last executing test programs: 4m53.66023819s ago: executing program 3 (id=191): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) semget(0x1, 0x3, 0x204) io_setup(0x6, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8000000000000001, 0xffffffff7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp6\x00') read$FUSE(r2, &(0x7f0000004800)={0x2020}, 0x2020) 4m49.795110417s ago: executing program 3 (id=199): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@i_version}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@auto_da_alloc}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 4m46.412069915s ago: executing program 3 (id=203): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x12, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES16=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES32, @ANYRES32], 0x1, 0x1f4, &(0x7f0000000780)="$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") 4m41.436803538s ago: executing program 3 (id=210): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@i_version}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@auto_da_alloc}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 4m40.079212867s ago: executing program 3 (id=214): munmap(&(0x7f0000893000/0x4000)=nil, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) 4m38.391550737s ago: executing program 3 (id=217): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x12, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES16=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES32, @ANYRES32], 0x1, 0x1f4, &(0x7f0000000780)="$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") chdir(&(0x7f0000000240)='./file0\x00') 4m22.956203103s ago: executing program 32 (id=217): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x12, &(0x7f0000000280)=ANY=[@ANYBLOB="005901e3fd18fb9c322293c67dcde48bfeffd1843c336e09b34af65ad26aafded7da5cfeeda2b8d8d900c2195f00f646f699eeb47813177405a6a6baf786c0d14f2079a9efa9db8973bcca25eb2973856c6760a483c41d0980c78a4cb096a5affa6b980600000000000000a1eacd2c820176737d4eb55dca564820dd769d8742f6d9ab243775a67afcdf845f978e95365cdf6f30aa43423b381881433e00ccbe6353b21300d8f0ca972589398eef9487db78486fcf174990c488031f8b39cc01bb509f3ea4bcde33d4c9e305ecb4dd88204c5d7bb5e469cabfda0feca3ce70c0acbc34d13e5a5c796eab23abfe3b717834f8e9d7120e1e925c4e210b4152c75210b3e979fbe8ddf23eef2d53733209b22206e0a4afc354c33d7ca2a00116a14d686e4aa86b6ec6a4130178c3ad8c723c0d8506bd7bff780000000000000000004b2ec61cfde813cc124715aaaf5508b93d8cf0860042108b660b74f94b1e4851eeec09fdb7a617eabeeeff8ce8bb99f4b1f9c2896cf31e19c3c24155b0ea7dc3cae1b56acb1946830cad94af3f1caf43ea03b38fc08a7e19480e283a4c0d", @ANYRES64=0x0, @ANYRES16=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES32, @ANYRES32], 0x1, 0x1f4, &(0x7f0000000780)="$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") chdir(&(0x7f0000000240)='./file0\x00') 1m53.843207613s ago: executing program 2 (id=686): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf1, &(0x7f0000000080), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 1m37.682892382s ago: executing program 2 (id=686): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf1, &(0x7f0000000080), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 1m27.50872449s ago: executing program 2 (id=686): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf1, &(0x7f0000000080), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 1m7.031767223s ago: executing program 2 (id=686): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf1, &(0x7f0000000080), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 31.49030389s ago: executing program 2 (id=686): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf1, &(0x7f0000000080), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 17.794111575s ago: executing program 4 (id=1370): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getresuid(0x0, 0x0, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4248, 0x0, &(0x7f0000000280), 0x0) 16.85292534s ago: executing program 4 (id=1372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) fsmount(r4, 0x0, 0x2) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) semctl$SETVAL(0x0, 0x3, 0x10, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r6, 0x89ed, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)={0x2, 0x16, 0x7, 0x9, 0xa, 0x0, 0x70bd2b, 0x25dfdbfe, [@sadb_x_policy={0x8, 0x12, 0x1, 0x0, 0x0, 0x0, 0x6c, {0x6, 0x9d, 0xa6, 0xf, 0x0, 0x6e531a13, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast1}}]}, 0x50}}, 0x20000080) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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") r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r7, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) 13.944457611s ago: executing program 4 (id=1382): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xff32, 0x0, 0x0, &(0x7f0000000000)=""/10, 0x17}}], 0x400000000000078, 0x42, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) 13.758935742s ago: executing program 4 (id=1384): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffff}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0xb}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, &(0x7f0000000500)=0x18) 11.904812551s ago: executing program 4 (id=1391): socket$packet(0x11, 0xa, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 11.330203805s ago: executing program 4 (id=1393): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) fsmount(r4, 0x0, 0x2) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) semctl$SETVAL(0x0, 0x3, 0x10, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r6, 0x89ed, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)={0x2, 0x16, 0x7, 0x9, 0xa, 0x0, 0x70bd2b, 0x25dfdbfe, [@sadb_x_policy={0x8, 0x12, 0x1, 0x0, 0x0, 0x0, 0x6c, {0x6, 0x9d, 0xa6, 0xf, 0x0, 0x6e531a13, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast1}}]}, 0x50}}, 0x20000080) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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") r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r7, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) 5.901980823s ago: executing program 1 (id=1422): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x0, 0x1da}, &(0x7f0000000100), &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000001c0)={0x80000, "340b7832ceefdad118cf501922d6974a270000c50f0000002ddc7d00"}) socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 5.856034866s ago: executing program 0 (id=1423): ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82187201, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000100)=@ethtool_wolinfo={0x6, 0x9, 0x3, "746478bdfd09"}}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB], 0x20) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf0, 0xf0, 0x2, [@volatile={0xa, 0x0, 0x0, 0x9, 0x3}, @restrict={0x1, 0x0, 0x0, 0xb, 0x2}, @enum64={0x8, 0x4, 0x0, 0x13, 0x1, 0xe, [{0x7}, {0x10, 0x5, 0xfffffff9}, {0xf, 0x5, 0xda00}, {0x10, 0x10001, 0x3}]}, @enum64={0xb, 0x9, 0x0, 0x13, 0x0, 0xc, [{0x4, 0x6, 0x6cc}, {0x10, 0xfffffffc}, {0x2, 0x7fff, 0x4}, {0x5, 0x1c, 0x5}, {0x5, 0x2, 0xfffffff8}, {0x7, 0x1, 0x9}, {0x5, 0x9}, {0xf, 0x7, 0x1}, {0x4, 0xffffff75, 0x3}]}, @const={0x9, 0x0, 0x0, 0xa, 0x3}, @volatile={0x8, 0x0, 0x0, 0x9, 0x1}, @const={0xe, 0x0, 0x0, 0xa, 0x3}]}}, &(0x7f00000004c0)=""/199, 0x10a, 0xc7, 0x0, 0xffff, 0x0, @void, @value}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='net_prio.prioidx\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x16, 0x1, 0x2, 0x8, 0x50a02, 0x1, 0x8, '\x00', 0x0, r4, 0x2, 0x1, 0x2, 0x0, @void, @value, @value=r5}, 0x50) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r6], 0x44}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8931, 0x0) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x41) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket(0x1, 0x803, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4eeffffff00000000003a000010210006001480eb000000951300000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x5f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = accept$packet(r8, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000700)=0x14) accept$packet(r9, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000780)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000680)=0x7, 0x1) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newtaction={0xd4, 0x30, 0x1, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_ct={0x74, 0x2, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0xc, 0x3, 0x35}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_LABELS={0x14, 0x7, "d415b9dde780a9ed9bbe2bc5a6064d41"}, @TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 5.749806513s ago: executing program 5 (id=1424): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9789d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) 5.031849925s ago: executing program 0 (id=1425): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000700), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf250600000008000e0056000000080003005200000008000e00a46398d008000d000e00000008000100"], 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x40010) 4.860230065s ago: executing program 1 (id=1426): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x6) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) close_range(r4, 0xffffffffffffffff, 0x0) lseek(r3, 0xc6c3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x50, 0x0, 0x9, 0x801, 0x0, 0x0, {0x1}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x2404c051}, 0x8000) 4.830105346s ago: executing program 0 (id=1427): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8, @ANYBLOB="0174dfdb0d"], 0x20}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.830797975s ago: executing program 0 (id=1428): socket$packet(0x11, 0xa, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0xfff1}, {}, {0x1, 0xfff2}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 3.692071564s ago: executing program 1 (id=1429): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x2) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, 'batadv_slave_1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x44, @random="42bdde0c2b69", 'bond_slave_0\x00'}}) readv(r3, &(0x7f0000000280)=[{&(0x7f0000000040)=""/176, 0xb0}, {0x0}], 0x2) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(&(0x7f0000000280)='keyring\x00', 0x0, &(0x7f00000001c0)='@\x9f+^\xbe-@(/[+\xca\x9f{\x00', 0xfffffffffffffffe) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60200, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 3.595092159s ago: executing program 0 (id=1430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') getpid() io_uring_enter(0xffffffffffffffff, 0x46f6, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000015c0)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) pread64(r5, &(0x7f0000002780)=""/59, 0x3b, 0xf27b) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0xfff) 2.322744404s ago: executing program 1 (id=1431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') getpid() io_uring_enter(0xffffffffffffffff, 0x46f6, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000015c0)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) pread64(r4, &(0x7f0000002780)=""/59, 0x3b, 0xf27b) 2.016214082s ago: executing program 5 (id=1432): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff26bd70000002000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="64000000100003040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r6, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4044045}, 0x814) 2.016022402s ago: executing program 2 (id=686): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf1, &(0x7f0000000080), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 902.355827ms ago: executing program 0 (id=1433): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x16, 0x3, "a3bb27"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 889.567538ms ago: executing program 1 (id=1434): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000007000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r4, 0x0, 0x0, 0x9200000000000000) sendmsg$tipc(r5, 0x0, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f00000004c0), 0x10) recvmmsg(r6, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x600100a2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f0000000580)=0x4, 0x4) sendmsg$can_raw(r6, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r7}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 889.371988ms ago: executing program 5 (id=1435): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x3}]}}]}, 0x44}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 804.293733ms ago: executing program 5 (id=1436): ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82187201, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000100)=@ethtool_wolinfo={0x6, 0x9, 0x3, "746478bdfd09"}}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB], 0x20) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf0, 0xf0, 0x2, [@volatile={0xa, 0x0, 0x0, 0x9, 0x3}, @restrict={0x1, 0x0, 0x0, 0xb, 0x2}, @enum64={0x8, 0x4, 0x0, 0x13, 0x1, 0xe, [{0x7}, {0x10, 0x5, 0xfffffff9}, {0xf, 0x5, 0xda00}, {0x10, 0x10001, 0x3}]}, @enum64={0xb, 0x9, 0x0, 0x13, 0x0, 0xc, [{0x4, 0x6, 0x6cc}, {0x10, 0xfffffffc}, {0x2, 0x7fff, 0x4}, {0x5, 0x1c, 0x5}, {0x5, 0x2, 0xfffffff8}, {0x7, 0x1, 0x9}, {0x5, 0x9}, {0xf, 0x7, 0x1}, {0x4, 0xffffff75, 0x3}]}, @const={0x9, 0x0, 0x0, 0xa, 0x3}, @volatile={0x8, 0x0, 0x0, 0x9, 0x1}, @const={0xe, 0x0, 0x0, 0xa, 0x3}]}}, &(0x7f00000004c0)=""/199, 0x10a, 0xc7, 0x0, 0xffff, 0x0, @void, @value}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='net_prio.prioidx\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x16, 0x1, 0x2, 0x8, 0x50a02, 0x1, 0x8, '\x00', 0x0, r4, 0x2, 0x1, 0x2, 0x0, @void, @value, @value=r5}, 0x50) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r6], 0x44}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8931, 0x0) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x41) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket(0x1, 0x803, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4eeffffff00000000003a000010210006001480eb000000951300000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x5f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = accept$packet(r8, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000700)=0x14) accept$packet(r9, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000780)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000680)=0x7, 0x1) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newtaction={0xd4, 0x30, 0x1, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_ct={0x74, 0x2, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0xc, 0x3, 0x35}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_LABELS={0x14, 0x7, "d415b9dde780a9ed9bbe2bc5a6064d41"}, @TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 167.921921ms ago: executing program 5 (id=1437): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@setneightbl={0x14, 0x43, 0x101, 0x70bd2d, 0x25dfdbfb, {0xa}}, 0x14}}, 0x0) 251.74µs ago: executing program 5 (id=1438): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@default, @bcast, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) connect$ax25(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 1 (id=1439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005cc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r3, 0x708, 0x40) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x3, &(0x7f0000000080)={0x1a, "6a4da751434fd7f4a4331cbdbfe64fa01f9fdf3aa54bce5d926ef908d52733fa7f"}}) kernel console output (not intermixed with test programs): etdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.979857][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.709'. [ 274.991354][ T6767] lo speed is unknown, defaulting to 1000 [ 275.069340][ T6696] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.151729][ T6696] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.299152][ T6696] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.344011][ T6779] udc-core: couldn't find an available UDC or it's busy [ 275.345963][ T6779] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 275.352100][ T6777] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 275.354231][ T6777] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 276.327921][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 276.434844][ T6787] loop1: detected capacity change from 0 to 512 [ 276.500573][ T6696] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 276.518575][ T6787] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 276.588614][ T6696] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 276.607850][ T6787] EXT4-fs (loop1): 1 truncate cleaned up [ 276.609543][ T6787] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,auto_da_alloc,errors=remount-ro,quota,. Quota mode: writeback. [ 276.638459][ T6696] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 276.703854][ T6696] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 276.965017][ T6795] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input4 [ 277.070451][ T6696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.084311][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.087008][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.100581][ T6696] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.106047][ T6795] netlink: 64 bytes leftover after parsing attributes in process `syz.5.716'. [ 277.114715][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.129912][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.156240][ T1614] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.158264][ T1614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.161481][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.173203][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 277.180434][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.189170][ T403] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.191097][ T403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.198475][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 277.222324][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 277.225523][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.250433][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.276729][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.289971][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.292803][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.315680][ T6812] loop1: detected capacity change from 0 to 512 [ 277.329028][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.339910][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.355784][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.366366][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.378466][ T6696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.484849][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.722'. [ 277.487934][ T6812] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 277.554366][ T6696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.561744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 277.563956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.568734][ T6812] EXT4-fs (loop1): 1 truncate cleaned up [ 277.570288][ T6812] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,auto_da_alloc,errors=remount-ro,quota,. Quota mode: writeback. [ 277.586316][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 277.589998][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 277.604933][ T6696] device veth0_vlan entered promiscuous mode [ 277.619815][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 277.622538][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.627428][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 277.629977][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.752775][ T6696] device veth1_vlan entered promiscuous mode [ 277.849518][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.852669][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.881191][ T6696] device veth0_macvtap entered promiscuous mode [ 277.892838][ T6696] device veth1_macvtap entered promiscuous mode [ 277.922881][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.925878][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.937206][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.940185][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.942947][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.945890][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.949505][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.952953][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.957779][ T6696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.961507][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 277.964184][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 277.969223][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.982611][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 278.500252][ T4237] Bluetooth: hci1: command 0x040f tx timeout [ 278.506704][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.509542][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.512091][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.514952][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.518729][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.521336][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.527120][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.530192][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.557055][ T6696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.580763][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 278.583646][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 278.600761][ T6696] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.603081][ T6696] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.605371][ T6696] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.747323][ T6696] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.500747][ T6841] udc-core: couldn't find an available UDC or it's busy [ 279.502684][ T6841] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 279.643721][ T6836] lo speed is unknown, defaulting to 1000 [ 280.516566][ T4235] Bluetooth: hci1: command 0x0419 tx timeout [ 280.613966][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.616718][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.630755][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 280.665880][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.681143][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.691395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 281.207514][ T6857] netlink: 'syz.4.735': attribute type 10 has an invalid length. [ 281.209720][ T6857] netlink: 55 bytes leftover after parsing attributes in process `syz.4.735'. [ 281.331998][ T6866] xt_hashlimit: size too large, truncated to 1048576 [ 281.411295][ T6855] delete_channel: no stack [ 281.662894][ T6871] loop4: detected capacity change from 0 to 512 [ 281.794529][ T6871] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 281.985852][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'. [ 284.090174][ T6901] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 284.116710][ T5291] device hsr_slave_0 left promiscuous mode [ 284.227635][ T5291] device hsr_slave_1 left promiscuous mode [ 284.267516][ T6907] ieee802154 phy0 wpan0: encryption failed: -22 [ 284.327375][ T5291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.329517][ T5291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.346571][ T5291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.348604][ T5291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.351333][ T5291] device bridge_slave_1 left promiscuous mode [ 284.353998][ T5291] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.407459][ T5291] device bridge_slave_0 left promiscuous mode [ 284.409682][ T5291] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.506581][ T5291] device veth1_macvtap left promiscuous mode [ 284.508335][ T5291] device veth0_macvtap left promiscuous mode [ 284.509963][ T5291] device veth1_vlan left promiscuous mode [ 284.511487][ T5291] device veth0_vlan left promiscuous mode [ 284.782515][ T5291] bond0 (unregistering): Released all slaves [ 284.974318][ T5291] team0 (unregistering): Port device team_slave_1 removed [ 284.995562][ T5291] team0 (unregistering): Port device team_slave_0 removed [ 285.013778][ T5291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.051537][ T5291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.282596][ T5291] bond0 (unregistering): Released all slaves [ 285.396833][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'. [ 285.753164][ T6933] loop1: detected capacity change from 0 to 512 [ 285.793133][ T6935] netlink: 392 bytes leftover after parsing attributes in process `syz.4.758'. [ 285.905534][ T6933] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 285.929077][ T6940] udc-core: couldn't find an available UDC or it's busy [ 285.941519][ T6940] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 286.157571][ T6941] lo speed is unknown, defaulting to 1000 [ 287.011500][ T6941] chnl_net:caif_netlink_parms(): no params data found [ 287.213636][ T6941] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.215696][ T6941] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.220022][ T6941] device bridge_slave_0 entered promiscuous mode [ 287.266853][ T6941] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.269120][ T6941] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.271898][ T6941] device bridge_slave_1 entered promiscuous mode [ 288.109097][ T6278] Bluetooth: hci1: command 0x0409 tx timeout [ 288.210268][ T6941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.212824][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.766'. [ 288.228563][ T6941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.316923][ T6969] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 288.943297][ T6941] team0: Port device team_slave_0 added [ 288.978122][ T6941] team0: Port device team_slave_1 added [ 289.956631][ T6981] loop1: detected capacity change from 0 to 512 [ 290.009949][ T6941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.011932][ T6941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.066871][ T6941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.105685][ T6941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.113098][ T6941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.149532][ T6941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.181631][ T6981] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 290.186300][ T4446] Bluetooth: hci1: command 0x041b tx timeout [ 290.205921][ T6986] netlink: 20 bytes leftover after parsing attributes in process `syz.4.772'. [ 290.245319][ T6986] device vlan0 entered promiscuous mode [ 290.266590][ T6986] device gretap0 entered promiscuous mode [ 290.402094][ T6993] udc-core: couldn't find an available UDC or it's busy [ 290.404068][ T6993] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 290.420296][ T6941] device hsr_slave_0 entered promiscuous mode [ 290.614880][ T6941] device hsr_slave_1 entered promiscuous mode [ 290.851934][ T6941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.858487][ T6941] Cannot create hsr debugfs directory [ 292.266188][ T4446] Bluetooth: hci1: command 0x040f tx timeout [ 292.473601][ T6994] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.475804][ T6994] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.261811][ T6994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.337089][ T6994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.098224][ T6994] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.100863][ T6994] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.103282][ T6994] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.105824][ T6994] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.346454][ T1961] Bluetooth: hci1: command 0x0419 tx timeout [ 294.448529][ T7021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.626625][ T6941] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.735670][ T7027] loop5: detected capacity change from 0 to 512 [ 294.739430][ T6941] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.831130][ T6941] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.869867][ T7027] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 294.881961][ T7031] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 294.903981][ T6941] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.966717][ T7034] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 294.995242][ T7037] ksmbd: Unknown IPC event: 6, ignore. [ 295.270607][ T7042] device vlan1 entered promiscuous mode [ 295.272209][ T7042] device team0 entered promiscuous mode [ 295.273715][ T7042] device team_slave_0 entered promiscuous mode [ 295.275649][ T7042] device team_slave_1 entered promiscuous mode [ 295.279767][ T7042] device team0 left promiscuous mode [ 295.281260][ T7042] device team_slave_0 left promiscuous mode [ 295.283114][ T7042] device team_slave_1 left promiscuous mode [ 295.294728][ T7045] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 295.417981][ T6941] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 295.463584][ T6941] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 295.528300][ T6941] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 295.582337][ T6941] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 295.821157][ T7069] loop0: detected capacity change from 0 to 8 [ 295.830245][ T6941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.840669][ T6941] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.842935][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 295.847926][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 295.882502][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 295.943870][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 295.948215][ T403] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.950154][ T403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.955002][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 295.958907][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 295.961382][ T403] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.963325][ T403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.965816][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 295.985570][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 295.989412][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 295.992219][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 295.995470][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 296.019530][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 296.024497][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 296.050087][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 296.136816][ T7088] ksmbd: Unknown IPC event: 6, ignore. [ 296.164398][ T7085] device team_slave_0 entered promiscuous mode [ 296.166473][ T7085] device team_slave_1 entered promiscuous mode [ 296.187009][ T7085] device vlan3 entered promiscuous mode [ 296.195351][ T7085] device team0 entered promiscuous mode [ 296.206423][ T7085] device team0 left promiscuous mode [ 296.220950][ T7085] device team_slave_0 left promiscuous mode [ 296.222557][ T7085] device team_slave_1 left promiscuous mode [ 296.299169][ T7096] loop0: detected capacity change from 0 to 512 [ 296.527013][ T7096] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 297.626767][ T7102] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 298.073186][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.5.809'. [ 298.094799][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 298.098678][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 298.129662][ T6941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 298.133228][ T6941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 298.144782][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 298.148235][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 298.833552][ T7117] loop1: detected capacity change from 0 to 8 [ 299.296042][ T6941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.336423][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 299.338643][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 299.509743][ T7143] device ip6erspan0 entered promiscuous mode [ 299.556353][ T7136] netlink: 'syz.5.820': attribute type 1 has an invalid length. [ 299.582878][ T7136] 8021q: adding VLAN 0 to HW filter on device bond1 [ 299.623369][ T7140] 8021q: adding VLAN 0 to HW filter on device bond1 [ 299.625632][ T7140] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 299.629274][ T7140] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 299.661460][ T7146] loop4: detected capacity change from 0 to 512 [ 299.676015][ T6941] device veth0_vlan entered promiscuous mode [ 299.684229][ T6941] device veth1_vlan entered promiscuous mode [ 299.719038][ T6941] device veth0_macvtap entered promiscuous mode [ 299.724459][ T6941] device veth1_macvtap entered promiscuous mode [ 299.739537][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 299.742726][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 299.745918][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 299.776059][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 299.789129][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 299.799791][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 299.811238][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 299.822684][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 299.832942][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 299.853119][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.868327][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.879398][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.885040][ T7146] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 299.910732][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.921451][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.934644][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.950864][ T6941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.959735][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 299.963602][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 299.970549][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 299.989150][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 299.995516][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 300.040399][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.043994][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.053878][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.065539][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.077480][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.107719][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.138213][ T6941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.151113][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 300.154207][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 300.180436][ T6941] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.204105][ T6941] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.228440][ T6941] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.242310][ T6941] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.416729][ T7149] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 300.428863][ T7155] netlink: 24 bytes leftover after parsing attributes in process `syz.1.825'. [ 300.497623][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.499735][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.505545][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 300.578671][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.581407][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.598398][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 300.755850][ T7161] loop0: detected capacity change from 0 to 8 [ 300.842270][ T7163] netlink: 212 bytes leftover after parsing attributes in process `syz.1.829'. [ 301.790145][ T7198] netlink: 32 bytes leftover after parsing attributes in process `syz.5.841'. [ 301.792708][ T7198] tipc: Invalid UDP bearer configuration [ 301.792748][ T7198] tipc: Enabling of bearer rejected, failed to enable media [ 302.005795][ T7211] lo speed is unknown, defaulting to 1000 [ 302.060534][ T7215] lo speed is unknown, defaulting to 1000 [ 302.149380][ T7220] loop1: detected capacity change from 0 to 512 [ 302.179509][ T7220] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 302.195567][ T7220] EXT4-fs (loop1): 1 truncate cleaned up [ 302.198115][ T7220] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,auto_da_alloc,errors=remount-ro,quota,. Quota mode: writeback. [ 304.103388][ T7241] IPVS: Error connecting to the multicast addr [ 304.137732][ T7243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.858'. [ 304.140504][ T7243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.858'. [ 305.790502][ T7253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.862'. [ 305.793324][ T7253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.862'. [ 305.856691][ T5291] device hsr_slave_0 left promiscuous mode [ 305.871799][ T7261] loop0: detected capacity change from 0 to 512 [ 306.049509][ T5291] device hsr_slave_1 left promiscuous mode [ 306.051967][ T7261] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 306.103911][ T7261] EXT4-fs (loop0): 1 truncate cleaned up [ 306.105592][ T7261] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,auto_da_alloc,errors=remount-ro,quota,. Quota mode: writeback. [ 306.156549][ T5291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.159915][ T5291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.164510][ T5291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.171742][ T5291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.175875][ T5291] device bridge_slave_1 left promiscuous mode [ 306.182387][ T5291] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.268421][ T5291] device bridge_slave_0 left promiscuous mode [ 306.270703][ T5291] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.759229][ T5291] device veth1_macvtap left promiscuous mode [ 306.760972][ T5291] device veth0_macvtap left promiscuous mode [ 306.763022][ T5291] device veth1_vlan left promiscuous mode [ 306.764927][ T5291] device veth0_vlan left promiscuous mode [ 307.949604][ T5291] team0 (unregistering): Port device team_slave_1 removed [ 307.995293][ T5291] team0 (unregistering): Port device team_slave_0 removed [ 308.035862][ T5291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.105883][ T5291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.356074][ T5291] bond0 (unregistering): Released all slaves [ 308.518964][ T7293] lo speed is unknown, defaulting to 1000 [ 308.971788][ T7305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.880'. [ 309.255106][ T7310] loop0: detected capacity change from 0 to 512 [ 309.379479][ T7310] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 309.464911][ T7310] EXT4-fs (loop0): 1 truncate cleaned up [ 309.467286][ T7310] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,auto_da_alloc,errors=remount-ro,quota,. Quota mode: writeback. [ 309.497993][ T7321] lo speed is unknown, defaulting to 1000 [ 309.660062][ T7321] chnl_net:caif_netlink_parms(): no params data found [ 309.843265][ T7327] loop5: detected capacity change from 0 to 512 [ 310.174181][ T7337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.887'. [ 310.213147][ T7337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.411972][ T7337] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.447795][ T7327] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 310.565885][ T7339] netlink: 'syz.1.887': attribute type 4 has an invalid length. [ 310.568254][ T7339] netlink: 152 bytes leftover after parsing attributes in process `syz.1.887'. [ 310.614653][ T7339] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 310.630499][ T7321] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.632353][ T7321] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.635243][ T7321] device bridge_slave_0 entered promiscuous mode [ 310.665090][ T7321] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.683456][ T7321] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.694996][ T7321] device bridge_slave_1 entered promiscuous mode [ 310.796375][ T7321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.818867][ T7321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.911793][ T7321] team0: Port device team_slave_0 added [ 310.947538][ T7321] team0: Port device team_slave_1 added [ 311.052797][ T7321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.054676][ T7321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.070992][ T7321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.075900][ T7321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.084143][ T7321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.100549][ T7321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.213805][ T7321] device hsr_slave_0 entered promiscuous mode [ 311.246694][ T7321] device hsr_slave_1 entered promiscuous mode [ 311.289138][ T7321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.291218][ T7321] Cannot create hsr debugfs directory [ 311.510097][ T7321] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.548072][ T6276] Bluetooth: hci1: command 0x0409 tx timeout [ 311.686744][ T7379] loop4: detected capacity change from 0 to 512 [ 311.701996][ T7321] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.718517][ T7381] device geneve0 entered promiscuous mode [ 311.728042][ T7380] device geneve0 left promiscuous mode [ 311.825135][ T7321] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.899137][ T7379] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 311.928431][ T7321] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.170089][ T7321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 312.230034][ T7321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 312.268371][ T7398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.908'. [ 312.275032][ T7321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 312.503725][ T7321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 312.543825][ T7410] netlink: 'syz.1.913': attribute type 10 has an invalid length. [ 313.277091][ T7410] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 313.369257][ T7321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.378245][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 313.383568][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 313.421220][ T7321] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.441543][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 313.449285][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 313.455565][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.457453][ T4336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.486782][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 313.500192][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 313.518983][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 313.535843][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.537848][ T4336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.556527][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 313.562457][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 313.579247][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 313.587219][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 313.593303][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 313.600160][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 313.605420][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 313.611879][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.618608][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 313.628649][ T7321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.636366][ T6276] Bluetooth: hci1: command 0x041b tx timeout [ 313.642912][ T7321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 313.651112][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.654136][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.915040][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 313.925144][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 313.939621][ T7321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.987327][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 313.990250][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 314.020229][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 314.025383][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 314.039790][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 314.051438][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 314.061596][ T7321] device veth0_vlan entered promiscuous mode [ 314.078390][ T7321] device veth1_vlan entered promiscuous mode [ 314.122487][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 314.125291][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 314.128791][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 314.134766][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 314.143440][ T7321] device veth0_macvtap entered promiscuous mode [ 314.149693][ T7321] device veth1_macvtap entered promiscuous mode [ 314.198783][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.206483][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.209196][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.212001][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.214581][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.239961][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.250233][ T7321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.252561][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 314.255410][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 314.258585][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 314.269823][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 314.287931][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.290917][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.293503][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.321096][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.323786][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.356612][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.367897][ T7321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.372973][ T7321] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.394192][ T7321] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.399336][ T7321] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.401675][ T7321] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.510824][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 314.513593][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 314.552591][ T7449] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 314.754956][ T7457] ieee802154 phy0 wpan0: encryption failed: -22 [ 314.909440][ T1614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.946737][ T1614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.976176][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 315.014334][ T5357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.066620][ T5357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.112233][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 315.223384][ T7472] lo speed is unknown, defaulting to 1000 [ 315.388337][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.390085][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.217134][ T4244] hid-generic 0005:04F3:06E6.0002: item fetching failed at offset 0/1 [ 317.227287][ T4244] hid-generic: probe of 0005:04F3:06E6.0002 failed with error -22 [ 317.596908][ T7520] udc-core: couldn't find an available UDC or it's busy [ 317.598977][ T7520] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 320.194256][ T7534] loop0: detected capacity change from 0 to 512 [ 320.266021][ T7534] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 320.305654][ T7534] EXT4-fs (loop0): 1 truncate cleaned up [ 320.317628][ T7534] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,auto_da_alloc,errors=remount-ro,quota,. Quota mode: writeback. [ 320.988395][ T7543] lo speed is unknown, defaulting to 1000 [ 321.213871][ T403] device hsr_slave_0 left promiscuous mode [ 321.246356][ T403] device hsr_slave_1 left promiscuous mode [ 321.337101][ T403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.339353][ T403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.342012][ T403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.345583][ T403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.366899][ T403] device bridge_slave_1 left promiscuous mode [ 321.368962][ T403] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.418835][ T403] device bridge_slave_0 left promiscuous mode [ 321.420773][ T403] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.556420][ T403] device veth1_macvtap left promiscuous mode [ 321.558102][ T403] device veth0_macvtap left promiscuous mode [ 321.559890][ T403] device veth1_vlan left promiscuous mode [ 321.561555][ T403] device veth0_vlan left promiscuous mode [ 322.292916][ T403] team0 (unregistering): Port device team_slave_1 removed [ 322.315656][ T403] team0 (unregistering): Port device team_slave_0 removed [ 322.339317][ T403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.399833][ T403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.586250][ T4227] Bluetooth: hci1: command 0x0409 tx timeout [ 322.685599][ T403] bond0 (unregistering): Released all slaves [ 322.849121][ T7556] netlink: 24 bytes leftover after parsing attributes in process `syz.0.962'. [ 323.080174][ T7543] chnl_net:caif_netlink_parms(): no params data found [ 323.263655][ T7515] Set syz1 is full, maxelem 65536 reached [ 323.443395][ T7543] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.445468][ T7543] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.448113][ T7543] device bridge_slave_0 entered promiscuous mode [ 323.452906][ T7582] loop1: detected capacity change from 0 to 512 [ 323.471622][ T7543] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.473520][ T7543] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.475994][ T7543] device bridge_slave_1 entered promiscuous mode [ 323.510188][ T7582] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 323.513339][ T7543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.520112][ T7543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.540547][ T7582] EXT4-fs (loop1): 1 truncate cleaned up [ 323.542221][ T7582] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,auto_da_alloc,errors=remount-ro,quota,. Quota mode: writeback. [ 323.542385][ T7543] team0: Port device team_slave_0 added [ 323.552196][ T7543] team0: Port device team_slave_1 added [ 323.575900][ T7543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.583162][ T7543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.600753][ T7543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.605454][ T7543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.607386][ T7543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.614617][ T7543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.720662][ T7543] device hsr_slave_0 entered promiscuous mode [ 323.756894][ T7543] device hsr_slave_1 entered promiscuous mode [ 323.930275][ T7543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.083015][ T7543] Cannot create hsr debugfs directory [ 324.639308][ T7543] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.666449][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 324.714601][ T7543] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.832098][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.986'. [ 324.841937][ T7625] netlink: 200 bytes leftover after parsing attributes in process `syz.1.986'. [ 325.277096][ T7543] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.571248][ T7543] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.627312][ T7638] loop1: detected capacity change from 0 to 512 [ 325.691512][ T7638] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 325.720885][ T7638] EXT4-fs (loop1): 1 truncate cleaned up [ 325.722423][ T7638] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,auto_da_alloc,errors=remount-ro,quota,. Quota mode: writeback. [ 325.798849][ T7543] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 325.909422][ T7543] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 326.575050][ T7543] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 326.614622][ T7656] netlink: 'syz.5.998': attribute type 6 has an invalid length. [ 326.617820][ T7543] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 326.767672][ T4235] Bluetooth: hci1: command 0x040f tx timeout [ 326.934967][ T7543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.941520][ T7683] loop5: detected capacity change from 0 to 512 [ 326.961752][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 326.964630][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 326.971417][ T7543] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.977511][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 326.980530][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 326.983751][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.985739][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.994581][ T7683] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 327.019835][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 327.023053][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 327.030642][ T7683] EXT4-fs (loop5): 1 truncate cleaned up [ 327.032633][ T7683] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,auto_da_alloc,errors=remount-ro,quota,. Quota mode: writeback. [ 327.038747][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.041450][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.043358][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.047090][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 327.062796][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 327.097429][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 327.101845][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 327.104825][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 327.107790][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 327.110559][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 327.113257][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 327.117205][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 327.177234][ T7543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.189575][ T7543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 327.221166][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 327.223860][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 327.247367][ T7691] loop1: detected capacity change from 0 to 512 [ 327.596552][ T7691] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 327.637485][ T7691] EXT4-fs (loop1): 1 truncate cleaned up [ 327.641432][ T7691] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,auto_da_alloc,errors=remount-ro,quota,. Quota mode: writeback. [ 328.409715][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 328.412000][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 328.462451][ T7543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.624843][ T7712] lo speed is unknown, defaulting to 1000 [ 328.792340][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 328.797707][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 328.826515][ T4233] Bluetooth: hci1: command 0x0419 tx timeout [ 329.772639][ T7735] loop0: detected capacity change from 0 to 512 [ 329.849155][ T7735] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 329.873196][ T7735] EXT4-fs (loop0): 1 truncate cleaned up [ 329.875206][ T7735] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,auto_da_alloc,errors=remount-ro,quota,. Quota mode: writeback. [ 329.884470][ T7543] device veth0_vlan entered promiscuous mode [ 330.052026][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 330.055125][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 330.069672][ T7543] device veth1_vlan entered promiscuous mode [ 330.073965][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 330.084676][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 330.087464][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 330.517231][ T7543] device veth0_macvtap entered promiscuous mode [ 330.539910][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 330.542567][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 330.545298][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 330.570281][ T7543] device veth1_macvtap entered promiscuous mode [ 330.580449][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 330.583069][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 330.621591][ T7543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.634691][ T7543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.651570][ T7543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.654435][ T7543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.677714][ T7543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.691127][ T7543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.707367][ T7543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.721014][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 330.723948][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 330.750446][ T7543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.753269][ T7543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.756018][ T7543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.761574][ T7543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.764909][ T7543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.768203][ T7543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.772374][ T7543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.774565][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 330.782054][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 330.811875][ T7543] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.814154][ T7543] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.818060][ T7543] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.820428][ T7543] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.832079][ T7748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1028'. [ 330.834707][ T7748] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1028'. [ 330.958151][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.961437][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.999549][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 331.032244][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.034533][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.057627][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 331.241499][ T7756] loop0: detected capacity change from 0 to 512 [ 331.282427][ T7756] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 331.308376][ T7756] EXT4-fs (loop0): 1 truncate cleaned up [ 331.310102][ T7756] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,auto_da_alloc,errors=remount-ro,quota,. Quota mode: writeback. [ 331.554805][ T7760] ax25_connect(): syz.4.1033 uses autobind, please contact jreuter@yaina.de [ 331.995892][ T7766] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1034'. [ 332.380288][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller1: link becomes ready [ 332.713460][ T7792] netlink: 'syz.4.1040': attribute type 3 has an invalid length. [ 332.931662][ T403] device hsr_slave_0 left promiscuous mode [ 333.096986][ T403] device hsr_slave_1 left promiscuous mode [ 333.861494][ T7804] loop1: detected capacity change from 0 to 512 [ 333.902655][ T7804] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 333.916377][ T403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.920988][ T403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.927681][ T403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.929967][ T403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.933096][ T403] device bridge_slave_1 left promiscuous mode [ 333.934819][ T403] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.967018][ T7804] EXT4-fs (loop1): 1 truncate cleaned up [ 333.968553][ T7804] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,auto_da_alloc,errors=remount-ro,quota,. Quota mode: writeback. [ 333.994835][ T403] device bridge_slave_0 left promiscuous mode [ 333.997116][ T403] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.176451][ T403] device veth1_macvtap left promiscuous mode [ 334.178260][ T403] device veth0_macvtap left promiscuous mode [ 334.179985][ T403] device veth1_vlan left promiscuous mode [ 334.181554][ T403] device veth0_vlan left promiscuous mode [ 334.907705][ T403] team0 (unregistering): Port device team_slave_1 removed [ 334.921695][ T403] team0 (unregistering): Port device team_slave_0 removed [ 334.960917][ T403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.007726][ T403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.152459][ T403] bond0 (unregistering): Released all slaves [ 335.252779][ T7809] netlink: 'syz.0.1047': attribute type 1 has an invalid length. [ 335.295103][ T7824] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1051'. [ 335.298028][ T7824] netlink: 'syz.1.1051': attribute type 7 has an invalid length. [ 335.300273][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1051'. [ 335.332142][ T7829] ieee802154 phy0 wpan0: encryption failed: -22 [ 335.684189][ T7842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1058'. [ 336.755190][ T7869] Cannot find set identified by id 0 to match [ 336.793704][ T7864] lo speed is unknown, defaulting to 1000 [ 337.057790][ T7889] netlink: 'syz.0.1075': attribute type 1 has an invalid length. [ 337.059883][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1075'. [ 337.214565][ T7864] chnl_net:caif_netlink_parms(): no params data found [ 337.306141][ T7864] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.308140][ T7864] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.310777][ T7864] device bridge_slave_0 entered promiscuous mode [ 337.314513][ T7864] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.317047][ T7864] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.319586][ T7864] device bridge_slave_1 entered promiscuous mode [ 337.336344][ T7864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.392205][ T7864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.485982][ T7864] team0: Port device team_slave_0 added [ 337.512770][ T7864] team0: Port device team_slave_1 added [ 337.600189][ T7864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.608935][ T7864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.633284][ T7864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.651324][ T7864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.657383][ T7864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.682370][ T7864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.818314][ T7864] device hsr_slave_0 entered promiscuous mode [ 337.907056][ T7864] device hsr_slave_1 entered promiscuous mode [ 337.917528][ T7864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.919797][ T7864] Cannot create hsr debugfs directory [ 338.258710][ T7921] netlink: 'syz.5.1086': attribute type 3 has an invalid length. [ 338.290570][ T7864] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.297049][ T7927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1090'. [ 338.425575][ T7864] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.524197][ T7864] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.700409][ T7864] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.746261][ T4446] Bluetooth: hci1: command 0x0409 tx timeout [ 338.969824][ T7864] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 339.008813][ T7864] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 339.038196][ T7864] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 339.084927][ T7864] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 339.247428][ T7956] ax25_connect(): syz.0.1101 uses autobind, please contact jreuter@yaina.de [ 339.313699][ T7864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.336479][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 339.338942][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 339.344017][ T7864] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.385119][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 339.397784][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 339.404957][ T4407] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.406931][ T4407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.420525][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 339.434464][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 339.438829][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 339.441565][ T4407] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.443558][ T4407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.483922][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 339.494464][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 339.500592][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 339.505994][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 339.515988][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 339.520876][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 339.530699][ T7864] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 339.533938][ T7864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 339.554057][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 339.557445][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 339.560027][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 339.562733][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 339.574868][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 339.583221][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 339.982370][ T7978] lo speed is unknown, defaulting to 1000 [ 340.014213][ T7982] syz.5.1109 sent an empty control message without MSG_MORE. [ 340.150602][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 340.152821][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 340.176397][ T7864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.231039][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 340.234159][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 340.264551][ T7864] device veth0_vlan entered promiscuous mode [ 340.271710][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 340.277245][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 340.294229][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 340.304396][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 340.361092][ T7864] device veth1_vlan entered promiscuous mode [ 340.398324][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 340.402089][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 340.422518][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 340.425225][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 340.463119][ T7864] device veth0_macvtap entered promiscuous mode [ 340.470642][ T7864] device veth1_macvtap entered promiscuous mode [ 340.530555][ T7864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.539142][ T7864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.552933][ T7864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.564789][ T7864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.573933][ T7864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.584692][ T7864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.596096][ T7864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.610134][ T7864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.613096][ T7864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.615831][ T7864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.620641][ T7864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.631050][ T7864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.633866][ T7864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.653534][ T7864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.655921][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 340.658956][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 340.661780][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 340.669378][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 340.731771][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 340.744850][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 340.831831][ T1534] Bluetooth: hci1: command 0x041b tx timeout [ 340.839010][ T7864] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.841594][ T7864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.852601][ T7864] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.866482][ T7864] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.069966][ T8021] udc-core: couldn't find an available UDC or it's busy [ 341.071904][ T8021] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 341.797445][ T1806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.801252][ T1806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.807963][ T8029] udc-core: couldn't find an available UDC or it's busy [ 341.808068][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 341.811956][ T8029] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 341.833272][ T8031] udc-core: couldn't find an available UDC or it's busy [ 341.835168][ T8031] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 341.868793][ T1806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.871145][ T1806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.882727][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 342.181872][ T8041] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1136'. [ 342.497203][ T8052] loop4: detected capacity change from 0 to 512 [ 342.549983][ T1534] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 342.596241][ T8052] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 342.611594][ T8052] EXT4-fs (loop4): 1 truncate cleaned up [ 342.613069][ T8052] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,auto_da_alloc,errors=remount-ro,quota,. Quota mode: writeback. [ 342.789160][ T8054] udc-core: couldn't find an available UDC or it's busy [ 342.791101][ T8054] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 343.816697][ T1534] usb 1-1: Using ep0 maxpacket: 8 [ 343.853553][ T8067] udc-core: couldn't find an available UDC or it's busy [ 343.860980][ T8067] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 344.076322][ T1534] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 344.078885][ T1534] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 344.081627][ T1534] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 344.084153][ T1534] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 344.125877][ T1534] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 344.133294][ T1534] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 344.135651][ T1534] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.154004][ T403] device hsr_slave_0 left promiscuous mode [ 344.212683][ T403] device hsr_slave_1 left promiscuous mode [ 344.228140][ T8070] udc-core: couldn't find an available UDC or it's busy [ 344.230026][ T8070] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 344.286864][ T403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.288904][ T403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.292148][ T403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.294283][ T403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.297916][ T403] device bridge_slave_1 left promiscuous mode [ 344.299578][ T403] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.337411][ T403] device bridge_slave_0 left promiscuous mode [ 344.339382][ T403] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.381647][ T8045] udc-core: couldn't find an available UDC or it's busy [ 344.383527][ T8045] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 344.387568][ T8045] udc-core: couldn't find an available UDC or it's busy [ 344.389615][ T8045] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 344.396247][ T1534] usb 1-1: usb_control_msg returned -71 [ 344.397752][ T1534] usbtmc 1-1:16.0: can't read capabilities [ 344.412577][ T1534] usb 1-1: USB disconnect, device number 4 [ 344.496359][ T403] device veth1_macvtap left promiscuous mode [ 344.498015][ T403] device veth0_macvtap left promiscuous mode [ 344.499614][ T403] device veth1_vlan left promiscuous mode [ 344.501244][ T403] device veth0_vlan left promiscuous mode [ 344.744187][ T403] team0 (unregistering): Port device team_slave_1 removed [ 344.777469][ T8077] udc-core: couldn't find an available UDC or it's busy [ 344.779763][ T8077] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 344.780254][ T403] team0 (unregistering): Port device team_slave_0 removed [ 344.785191][ T8077] udc-core: couldn't find an available UDC or it's busy [ 344.787827][ T8077] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 344.790540][ T8077] udc-core: couldn't find an available UDC or it's busy [ 344.792540][ T8077] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 344.795430][ T8077] udc-core: couldn't find an available UDC or it's busy [ 344.798080][ T8077] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 344.800509][ T403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.835436][ T403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.002052][ T8077] udc-core: couldn't find an available UDC or it's busy [ 345.002365][ T403] bond0 (unregistering): Released all slaves [ 345.003972][ T8077] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 345.102688][ T8072] netlink: 'syz.1.1147': attribute type 1 has an invalid length. [ 345.325701][ T8085] ax25_connect(): syz.1.1150 uses autobind, please contact jreuter@yaina.de [ 345.366457][ T8087] udc-core: couldn't find an available UDC or it's busy [ 345.368453][ T8087] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 346.041683][ T8096] udc-core: couldn't find an available UDC or it's busy [ 346.054838][ T8096] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 346.124494][ T8099] udc-core: couldn't find an available UDC or it's busy [ 346.130077][ T8099] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 346.808679][ T8096] udc-core: couldn't find an available UDC or it's busy [ 346.810886][ T8096] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 347.017359][ T8096] udc-core: couldn't find an available UDC or it's busy [ 347.019390][ T8096] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 347.032519][ T8110] netlink: 'syz.0.1160': attribute type 1 has an invalid length. [ 347.097382][ T8096] udc-core: couldn't find an available UDC or it's busy [ 347.156084][ T8096] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 347.875700][ T8096] udc-core: couldn't find an available UDC or it's busy [ 347.886930][ T8096] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 347.902525][ T8110] 8021q: adding VLAN 0 to HW filter on device bond1 [ 347.930050][ T8096] udc-core: couldn't find an available UDC or it's busy [ 347.932298][ T8096] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 347.975589][ T8115] bond1: (slave ip6gretap1): making interface the new active one [ 347.987515][ T8115] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 347.994594][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 348.058368][ T8120] lo speed is unknown, defaulting to 1000 [ 348.324200][ T8120] chnl_net:caif_netlink_parms(): no params data found [ 348.396095][ T8120] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.403712][ T8120] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.409426][ T8120] device bridge_slave_0 entered promiscuous mode [ 348.413682][ T8120] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.415810][ T8120] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.522785][ T4233] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 349.189899][ T8120] device bridge_slave_1 entered promiscuous mode [ 349.272024][ T8143] udc-core: couldn't find an available UDC or it's busy [ 349.273953][ T8143] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 349.582736][ T4233] usb 1-1: Using ep0 maxpacket: 16 [ 350.026879][ T4237] Bluetooth: hci1: command 0x0409 tx timeout [ 350.100169][ T8120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.124990][ T8120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.223036][ T8152] udc-core: couldn't find an available UDC or it's busy [ 350.226534][ T4233] usb 1-1: unable to get BOS descriptor or descriptor too short [ 350.234703][ T8120] team0: Port device team_slave_0 added [ 350.235215][ T8152] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 350.259695][ T8120] team0: Port device team_slave_1 added [ 350.306495][ T4233] usb 1-1: config 129 has an invalid interface number: 50 but max is 0 [ 350.308970][ T4233] usb 1-1: config 129 has no interface number 0 [ 350.311003][ T4233] usb 1-1: config 129 interface 50 altsetting 250 bulk endpoint 0xC has invalid maxpacket 16 [ 350.314810][ T4233] usb 1-1: config 129 interface 50 altsetting 250 has an invalid endpoint with address 0xFD, skipping [ 350.327488][ T4233] usb 1-1: config 129 interface 50 altsetting 250 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 350.337242][ T4233] usb 1-1: config 129 interface 50 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 350.350482][ T4233] usb 1-1: config 129 interface 50 has no altsetting 0 [ 350.442771][ T8120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.447923][ T8120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.459216][ T8120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.463955][ T8120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.466074][ T8120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.484593][ T8120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.246416][ T4233] usb 1-1: string descriptor 0 read error: -71 [ 351.248222][ T4233] usb 1-1: New USB device found, idVendor=05a3, idProduct=8388, bcdDevice=a7.f4 [ 351.250730][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.296419][ T4233] usb 1-1: can't set config #129, error -71 [ 351.300245][ T4233] usb 1-1: USB disconnect, device number 5 [ 351.308263][ T8120] device hsr_slave_0 entered promiscuous mode [ 351.336733][ T8120] device hsr_slave_1 entered promiscuous mode [ 351.348210][ T8162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1174'. [ 351.376748][ T8120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.378863][ T8120] Cannot create hsr debugfs directory [ 351.457788][ T8168] netlink: 'syz.5.1176': attribute type 1 has an invalid length. [ 351.480392][ T8168] 8021q: adding VLAN 0 to HW filter on device bond2 [ 351.509895][ T8168] bond2: (slave ip6gretap1): making interface the new active one [ 351.512733][ T8168] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 351.518857][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 351.571105][ T8120] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.602200][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 351.644619][ T8174] udc-core: couldn't find an available UDC or it's busy [ 351.651006][ T8174] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 351.659402][ T8120] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.713986][ T8120] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.842836][ T8120] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.912469][ T4233] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 352.699516][ T4229] Bluetooth: hci1: command 0x041b tx timeout [ 352.721887][ T8186] capability: warning: `syz.1.1184' uses 32-bit capabilities (legacy support in use) [ 352.858110][ T8120] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 352.910381][ T8120] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 352.950974][ T8120] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 352.966861][ T4233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.969880][ T4233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.973441][ T4233] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 352.981637][ T4233] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 352.988918][ T8120] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 353.006868][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.625509][ T8120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.649651][ T4233] usb 1-1: config 0 descriptor?? [ 353.720987][ T8211] udc-core: couldn't find an available UDC or it's busy [ 353.722960][ T8211] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 353.735012][ T8210] netlink: 'syz.1.1192': attribute type 1 has an invalid length. [ 353.753941][ T8210] 8021q: adding VLAN 0 to HW filter on device bond2 [ 353.768673][ T8120] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.792883][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 353.795435][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 353.810221][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 353.812947][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 353.822218][ T5291] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.824254][ T5291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.845993][ T8210] bond2: (slave ip6gretap1): making interface the new active one [ 353.850467][ T8210] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 353.918939][ T8120] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 353.921775][ T8120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.931104][ T26] audit: type=1326 audit(353.890:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8206 comm="syz.5.1193" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa6e8a68 code=0x0 [ 353.939778][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 353.942332][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 353.945124][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 353.952905][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 353.955416][ T5291] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.957553][ T5291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.963393][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 353.981163][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 353.984078][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 353.988928][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 353.991881][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 353.994776][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 353.997654][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 354.000295][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 354.003213][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 354.005802][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 354.010550][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 354.013336][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 354.167098][ T8167] udc-core: couldn't find an available UDC or it's busy [ 354.173498][ T8167] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 354.208839][ T4233] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 354.218583][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 354.221442][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 354.226851][ T4233] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 354.246414][ T8120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.974937][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 354.977932][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 355.003454][ T4237] Bluetooth: hci1: command 0x040f tx timeout [ 355.023027][ T8120] device veth0_vlan entered promiscuous mode [ 355.027225][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 355.030096][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 355.033240][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 355.043573][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 355.076905][ T8120] device veth1_vlan entered promiscuous mode [ 355.113317][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 355.118749][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 355.121697][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 355.133182][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 355.144740][ T8120] device veth0_macvtap entered promiscuous mode [ 355.171259][ T8120] device veth1_macvtap entered promiscuous mode [ 355.181971][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.185106][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.188413][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.191980][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.195209][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.200005][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.254072][ T8236] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1199'. [ 355.276439][ T8120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.276999][ C1] plantronics 0003:047F:FFFF.0003: hid_field_extract() called with n (132) > 32! (syz.1.1199) [ 355.280965][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.284373][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.287945][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.291709][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.295030][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.297957][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.338771][ T8120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.353227][ T8120] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.359177][ T8239] udc-core: couldn't find an available UDC or it's busy [ 355.363308][ T8120] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.369365][ T8239] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 355.374518][ T8120] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.381261][ T8120] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.490945][ T4175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.493414][ T4175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.540481][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.543042][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.548963][ T8167] udc-core: couldn't find an available UDC or it's busy [ 355.554129][ T8167] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 355.574504][ T1534] usb 1-1: USB disconnect, device number 6 [ 355.762468][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 355.765230][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 355.767822][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 355.772210][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 355.775311][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 355.778648][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 355.781436][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 355.783969][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 356.061062][ T8249] netlink: 'syz.5.1205': attribute type 1 has an invalid length. [ 356.108146][ T8249] 8021q: adding VLAN 0 to HW filter on device bond3 [ 356.476343][ T4237] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 356.796272][ T4237] usb 1-1: Using ep0 maxpacket: 16 [ 356.853770][ T26] audit: type=1326 audit(356.810:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8258 comm="syz.1.1207" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff97ed1a68 code=0x0 [ 356.880375][ T8264] netlink: 'syz.4.1209': attribute type 3 has an invalid length. [ 356.911436][ T4233] hid-generic 0005:0458:0009.0004: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 356.926409][ T4237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.929286][ T4237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.931807][ T4237] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 356.935158][ T4237] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 356.939156][ T4237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.944623][ T4237] usb 1-1: config 0 descriptor?? [ 358.380457][ T4237] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 358.420900][ T4237] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0005/input/input5 [ 359.898134][ T8288] loop4: detected capacity change from 0 to 512 [ 361.027495][ T8305] udc-core: couldn't find an available UDC or it's busy [ 361.029421][ T8305] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 361.104541][ T8307] netlink: 'syz.1.1221': attribute type 1 has an invalid length. [ 361.164063][ T8307] 8021q: adding VLAN 0 to HW filter on device bond3 [ 361.256423][ T4237] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 361.265668][ T4237] usb 1-1: USB disconnect, device number 7 [ 361.311966][ T8288] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 361.703392][ T403] device hsr_slave_0 left promiscuous mode [ 361.772071][ T8318] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 361.798503][ T403] device hsr_slave_1 left promiscuous mode [ 361.876825][ T403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.878859][ T403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.891883][ T403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.893777][ T403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.896983][ T403] device bridge_slave_1 left promiscuous mode [ 361.898690][ T403] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.958001][ T403] device bridge_slave_0 left promiscuous mode [ 361.959761][ T403] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.126865][ T403] device veth1_macvtap left promiscuous mode [ 362.128525][ T403] device veth0_macvtap left promiscuous mode [ 362.130205][ T403] device veth1_vlan left promiscuous mode [ 362.131686][ T403] device veth0_vlan left promiscuous mode [ 364.910775][ T403] team0 (unregistering): Port device team_slave_1 removed [ 364.931861][ T403] team0 (unregistering): Port device team_slave_0 removed [ 364.966639][ T403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.023730][ T403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.222792][ T403] bond0 (unregistering): Released all slaves [ 365.323503][ T8326] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 366.393331][ T4391] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 366.676213][ T4391] usb 1-1: Using ep0 maxpacket: 32 [ 366.796389][ T4391] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.956468][ T4391] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 366.958979][ T4391] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.960984][ T4391] usb 1-1: Product: syz [ 366.962108][ T4391] usb 1-1: Manufacturer: syz [ 366.966676][ T4391] usb 1-1: SerialNumber: syz [ 366.971155][ T4391] usb 1-1: config 0 descriptor?? [ 367.007868][ T4391] usb 1-1: bad CDC descriptors [ 367.011146][ T4391] usb 1-1: unsupported MDLM descriptors [ 367.268415][ T4391] usb 1-1: USB disconnect, device number 8 [ 367.302425][ T8358] MPTCP: kernel_bind error, err=-98 [ 367.309365][ T8360] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 367.603571][ T8364] lo speed is unknown, defaulting to 1000 [ 367.629815][ T8371] udc-core: couldn't find an available UDC or it's busy [ 367.631627][ T8371] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 368.683890][ T8364] chnl_net:caif_netlink_parms(): no params data found [ 369.546553][ T6277] Bluetooth: hci1: command 0x0409 tx timeout [ 369.686388][ T8364] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.688308][ T8364] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.691001][ T8364] device bridge_slave_0 entered promiscuous mode [ 369.694396][ T8364] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.734916][ T8364] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.749112][ T8364] device bridge_slave_1 entered promiscuous mode [ 369.861544][ T8364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.871378][ T8364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.732327][ T8364] team0: Port device team_slave_0 added [ 370.738169][ T8364] team0: Port device team_slave_1 added [ 370.739890][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1246'. [ 370.756415][ T4227] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 370.759718][ T8401] udc-core: couldn't find an available UDC or it's busy [ 370.761508][ T8401] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 370.847032][ T8364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.849050][ T8364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.857419][ T8364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.861690][ T8364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.863476][ T8364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.970123][ T8405] loop1: detected capacity change from 0 to 512 [ 371.096844][ T8364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.491191][ T26] audit: type=1326 audit(371.430:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.4.1248" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb97e5a68 code=0x7ffc0000 [ 371.495939][ T26] audit: type=1326 audit(371.430:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.4.1248" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb97e5a68 code=0x7ffc0000 [ 371.500202][ T26] audit: type=1326 audit(371.440:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.4.1248" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb97e5a68 code=0x7ffc0000 [ 371.503005][ T26] audit: type=1326 audit(371.440:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.4.1248" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb97e5a68 code=0x7ffc0000 [ 371.505638][ T26] audit: type=1326 audit(371.440:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.4.1248" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb97e5a68 code=0x7ffc0000 [ 371.515265][ T26] audit: type=1326 audit(371.440:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.4.1248" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb97e5a68 code=0x7ffc0000 [ 371.517436][ T26] audit: type=1326 audit(371.440:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.4.1248" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb97e5a68 code=0x7ffc0000 [ 371.525336][ T26] audit: type=1326 audit(371.440:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.4.1248" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb97e5a68 code=0x7ffc0000 [ 371.528478][ T26] audit: type=1326 audit(371.440:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.4.1248" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=179 compat=0 ip=0xffffb97e5a68 code=0x7ffc0000 [ 371.530871][ T26] audit: type=1326 audit(371.440:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.4.1248" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb97e5a68 code=0x7ffc0000 [ 371.749682][ T4391] Bluetooth: hci1: command 0x041b tx timeout [ 371.889987][ T4227] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 371.890034][ T4227] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 371.890051][ T4227] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 371.890076][ T4227] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 371.890098][ T4227] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 371.955713][ T8405] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 372.066636][ T4227] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 372.066665][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 372.066682][ T4227] usb 1-1: Product: syz [ 372.066695][ T4227] usb 1-1: Manufacturer: syz [ 372.138743][ T4227] cdc_wdm 1-1:1.0: skipping garbage [ 372.138785][ T4227] cdc_wdm 1-1:1.0: skipping garbage [ 372.146477][ T4227] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 372.146497][ T4227] cdc_wdm 1-1:1.0: Unknown control protocol [ 372.196285][ T8364] device hsr_slave_0 entered promiscuous mode [ 372.327057][ T8364] device hsr_slave_1 entered promiscuous mode [ 372.368154][ T8364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.370149][ T8364] Cannot create hsr debugfs directory [ 372.387170][ T4227] usb 1-1: USB disconnect, device number 9 [ 373.161248][ T8413] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 373.217546][ T8423] netlink: 'syz.4.1252': attribute type 1 has an invalid length. [ 373.274230][ T8364] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.336057][ T8423] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 373.374491][ T8364] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.417842][ T8423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 373.423973][ T4143] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 373.427902][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 373.446439][ T4227] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 373.473897][ T8423] device veth3 entered promiscuous mode [ 373.513728][ T8364] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.537000][ T4143] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 373.628154][ T8364] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.787375][ T8430] xt_CT: You must specify a L4 protocol and not use inversions on it [ 374.372314][ T4391] Bluetooth: hci1: command 0x040f tx timeout [ 374.499480][ T4227] usb 1-1: device descriptor read/all, error -71 [ 374.667804][ T8437] xt_TPROXY: Can be used only with -p tcp or -p udp [ 375.628734][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1258'. [ 376.429873][ T6278] Bluetooth: hci1: command 0x0419 tx timeout [ 376.691928][ T8453] netlink: 'syz.4.1263': attribute type 1 has an invalid length. [ 376.718448][ T8453] 8021q: adding VLAN 0 to HW filter on device bond2 [ 376.742841][ T8364] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 376.788402][ T8364] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 376.838060][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.861443][ T8456] bond2: (slave ip6gretap2): making interface the new active one [ 376.871267][ T8456] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 376.880245][ T8364] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 376.908314][ T8364] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 376.958843][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 377.141082][ T8364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.164493][ T8464] udc-core: couldn't find an available UDC or it's busy [ 377.169721][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 377.172280][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 377.174704][ T8464] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 377.206561][ T8364] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.211149][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 377.234304][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 377.237125][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.239137][ T4175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.289293][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 377.310010][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 377.317088][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 377.322042][ T4175] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.323964][ T4175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.330830][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 377.341510][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 377.345896][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 377.361413][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 377.388283][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 377.390723][ T8464] udc-core: couldn't find an available UDC or it's busy [ 377.392631][ T8464] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 377.398954][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 377.401891][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 377.427381][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 377.430158][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 377.432849][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 377.435521][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 377.587537][ T8364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 378.545543][ T8364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.591993][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 378.594295][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 378.718763][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 379.553813][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 379.638815][ T8489] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 379.659327][ T1614] device hsr_slave_0 left promiscuous mode [ 379.696452][ T1614] device hsr_slave_1 left promiscuous mode [ 379.856424][ T1614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.858535][ T1614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.861675][ T1614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.864936][ T1614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.878283][ T1614] device bridge_slave_1 left promiscuous mode [ 379.882342][ T1614] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.663075][ T1614] device bridge_slave_0 left promiscuous mode [ 380.667986][ T1614] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.826705][ T1614] device veth1_macvtap left promiscuous mode [ 380.828686][ T1614] device veth0_macvtap left promiscuous mode [ 380.830403][ T1614] device veth1_vlan left promiscuous mode [ 380.831898][ T1614] device veth0_vlan left promiscuous mode [ 381.191997][ T1614] team0 (unregistering): Port device team_slave_1 removed [ 381.213931][ T1614] team0 (unregistering): Port device team_slave_0 removed [ 381.231791][ T1614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.271895][ T1614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.482671][ T1614] bond0 (unregistering): Released all slaves [ 381.611464][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 381.614207][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 381.622421][ T8364] device veth0_vlan entered promiscuous mode [ 381.631169][ T8502] netlink: 'syz.0.1276': attribute type 1 has an invalid length. [ 381.651646][ T8510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1279'. [ 381.661645][ T8510] 8021q: adding VLAN 0 to HW filter on device bond3 [ 381.685223][ T8513] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 381.691340][ T8514] bond3: (slave macvlan0): Error -95 calling set_mac_address [ 381.704728][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 381.715984][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 381.720855][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 381.735062][ T8364] device veth1_vlan entered promiscuous mode [ 381.776386][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 381.779261][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 381.782886][ T8364] device veth0_macvtap entered promiscuous mode [ 381.789370][ T8364] device veth1_macvtap entered promiscuous mode [ 381.802895][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.805682][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.810644][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.813379][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.825371][ T8364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.827965][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 381.830714][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 382.008996][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 382.035227][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 382.504599][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.508442][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.514333][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.520448][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.564829][ T8364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.609481][ T8364] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.611914][ T8364] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.614383][ T8364] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.617425][ T8364] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.696333][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 382.699193][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 382.857639][ T8544] udc-core: couldn't find an available UDC or it's busy [ 382.859596][ T8544] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 385.939821][ T5291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.942053][ T5291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.947095][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 386.161808][ T5357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.165286][ T5357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.175297][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 389.022179][ T8592] udc-core: couldn't find an available UDC or it's busy [ 389.024086][ T8592] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 392.007076][ T8623] loop5: detected capacity change from 0 to 512 [ 392.909193][ T8627] netlink: 'syz.0.1310': attribute type 1 has an invalid length. [ 393.010587][ T8627] 8021q: adding VLAN 0 to HW filter on device bond2 [ 393.644025][ T8631] device vlan2 entered promiscuous mode [ 393.645685][ T8631] device bond2 entered promiscuous mode [ 395.799245][ T8641] netlink: 'syz.1.1313': attribute type 3 has an invalid length. [ 397.282706][ T8666] ptrace attach of "./syz-executor exec"[4023] was attempted by "./syz-executor exec"[8666] [ 400.877035][ T8684] netlink: 'syz.4.1326': attribute type 3 has an invalid length. [ 401.005860][ T8688] netlink: 'syz.4.1328': attribute type 1 has an invalid length. [ 401.149701][ T8688] 8021q: adding VLAN 0 to HW filter on device bond4 [ 401.185690][ T8688] device vlan1 entered promiscuous mode [ 401.192416][ T8688] device bond4 entered promiscuous mode [ 402.074342][ T8695] loop0: detected capacity change from 0 to 512 [ 402.217679][ T8695] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 402.613543][ T1614] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.712510][ T1614] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.763025][ T1614] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.773101][ T8698] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 402.864792][ T1614] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.910946][ T8716] tipc: Enabling of bearer rejected, failed to enable media [ 405.145020][ T8723] lo speed is unknown, defaulting to 1000 [ 407.536087][ T4227] Bluetooth: hci1: command 0x0409 tx timeout [ 407.636913][ T8723] chnl_net:caif_netlink_parms(): no params data found [ 407.648656][ T8749] netlink: 'syz.5.1342': attribute type 1 has an invalid length. [ 408.335117][ T8749] 8021q: adding VLAN 0 to HW filter on device bond4 [ 408.640731][ T8723] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.645218][ T8723] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.672797][ T8723] device bridge_slave_0 entered promiscuous mode [ 408.699175][ T8723] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.797303][ T8723] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.800007][ T8723] device bridge_slave_1 entered promiscuous mode [ 409.978754][ T4244] Bluetooth: hci1: command 0x041b tx timeout [ 410.101673][ T8723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.106010][ T8723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.364977][ T8723] team0: Port device team_slave_0 added [ 410.381680][ T8723] team0: Port device team_slave_1 added [ 410.501511][ T8723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.508739][ T8723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.204143][ T8723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.240989][ T8723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.242877][ T8723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.256218][ T8723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.229546][ T4244] Bluetooth: hci1: command 0x040f tx timeout [ 412.719577][ T8723] device hsr_slave_0 entered promiscuous mode [ 413.176753][ T8723] device hsr_slave_1 entered promiscuous mode [ 413.217410][ T8723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.219429][ T8723] Cannot create hsr debugfs directory [ 414.266370][ T4244] Bluetooth: hci1: command 0x0419 tx timeout [ 414.616711][ T8847] netlink: 'syz.1.1360': attribute type 3 has an invalid length. [ 414.742395][ T1614] device hsr_slave_0 left promiscuous mode [ 414.943140][ T1614] device hsr_slave_1 left promiscuous mode [ 415.697308][ T1614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.699366][ T1614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.702191][ T1614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.707489][ T1614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.716329][ T1614] device bridge_slave_1 left promiscuous mode [ 415.718062][ T1614] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.769959][ T1614] device bridge_slave_0 left promiscuous mode [ 415.773973][ T1614] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.906814][ T1614] device veth1_macvtap left promiscuous mode [ 415.908395][ T1614] device veth0_macvtap left promiscuous mode [ 415.910255][ T1614] device veth1_vlan left promiscuous mode [ 415.912021][ T1614] device veth0_vlan left promiscuous mode [ 416.497728][ T1614] team0 (unregistering): Port device team_slave_1 removed [ 416.508122][ T1614] team0 (unregistering): Port device team_slave_0 removed [ 416.590152][ T1614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.634202][ T1614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.774332][ T1614] bond0 (unregistering): Released all slaves [ 416.913070][ T8899] loop4: detected capacity change from 0 to 512 [ 417.037571][ T8876] netlink: 'syz.5.1369': attribute type 1 has an invalid length. [ 417.092637][ T8899] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 417.437684][ T8905] udc-core: couldn't find an available UDC or it's busy [ 417.439569][ T8905] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 417.727863][ T8912] netlink: 'syz.0.1374': attribute type 3 has an invalid length. [ 418.230440][ T8928] udc-core: couldn't find an available UDC or it's busy [ 418.232441][ T8928] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 419.067523][ T8723] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 419.248294][ T8723] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 419.308548][ T8723] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 419.359392][ T8723] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 419.797174][ T8723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.824932][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 419.829289][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 419.838115][ T8723] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.855233][ T8954] netlink: 'syz.1.1386': attribute type 1 has an invalid length. [ 419.885867][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 419.888765][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 419.894498][ T5357] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.896462][ T5357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.907460][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 419.920027][ T8954] bond5: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 419.931736][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 419.935495][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 419.952785][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.954757][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.964781][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 419.978753][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 419.981763][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 419.997255][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 420.013660][ T8954] device veth5 entered promiscuous mode [ 420.024326][ T8723] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 420.038499][ T8723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 420.047622][ T8947] udc-core: couldn't find an available UDC or it's busy [ 420.050186][ T8947] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 420.059547][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 420.062080][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 420.064847][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 420.078468][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 420.083807][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 420.097715][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 420.100287][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 420.109868][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 420.181233][ T8968] netlink: 'syz.1.1387': attribute type 3 has an invalid length. [ 420.244893][ T8723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.257324][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 420.259664][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 420.291992][ T8779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 420.294909][ T8779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 420.333418][ T8779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 420.336078][ T8779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 420.353661][ T8779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 420.358310][ T8779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 420.363179][ T8723] device veth0_vlan entered promiscuous mode [ 420.381752][ T8723] device veth1_vlan entered promiscuous mode [ 420.493300][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 420.495963][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 420.532061][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 420.547578][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 421.840218][ T8723] device veth0_macvtap entered promiscuous mode [ 421.872962][ T8723] device veth1_macvtap entered promiscuous mode [ 422.095445][ T8986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.898822][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.901570][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.905426][ T8723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.912271][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.915092][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.919491][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.922304][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.925919][ T8723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.928608][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 422.931330][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 422.934096][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 422.957623][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 423.008899][ T8723] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.011315][ T8723] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.013731][ T8723] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.016042][ T8723] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.058990][ T9005] netlink: 'syz.5.1395': attribute type 1 has an invalid length. [ 423.099619][ T9011] netlink: 'syz.1.1397': attribute type 1 has an invalid length. [ 423.207156][ T9010] netlink: 'syz.0.1398': attribute type 3 has an invalid length. [ 423.324683][ T9011] device veth7 entered promiscuous mode [ 423.343279][ T4179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.346736][ T4179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.427445][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 423.472133][ T4407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.474544][ T4407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.481320][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 424.071001][ T4407] Bluetooth: Error in BCSP hdr checksum [ 424.335203][ T4142] Bluetooth: Error in BCSP hdr checksum [ 424.609168][ T9049] lo speed is unknown, defaulting to 1000 [ 425.553088][ T9055] serio: Serial port ptm1 [ 425.786602][ T6277] Bluetooth: hci3: command 0x1003 tx timeout [ 425.788401][ T4039] Bluetooth: hci3: sending frame failed (-49) [ 425.902655][ T9066] netlink: 'syz.1.1411': attribute type 3 has an invalid length. [ 426.013298][ T9069] netlink: 'syz.5.1412': attribute type 1 has an invalid length. [ 426.093981][ T9074] bond6: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 426.299358][ T9074] device veth3 entered promiscuous mode [ 427.729958][ T9103] netlink: 'syz.0.1423': attribute type 3 has an invalid length. [ 428.529342][ T4391] Bluetooth: hci3: command 0x1001 tx timeout [ 428.531006][ T4039] Bluetooth: hci3: sending frame failed (-49) [ 428.747506][ T9113] netlink: 'syz.0.1427': attribute type 1 has an invalid length. [ 429.492584][ T9116] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 429.517958][ T9118] device veth3 entered promiscuous mode [ 429.525086][ T9114] netlink: 'syz.1.1426': attribute type 1 has an invalid length. [ 429.527687][ T9114] netlink: 'syz.1.1426': attribute type 2 has an invalid length. [ 431.494571][ T1961] Bluetooth: hci3: command 0x1009 tx timeout [ 431.544428][ T9136] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1432'. [ 433.202290][ T1614] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.220340][ T9150] netlink: 'syz.5.1436': attribute type 3 has an invalid length. [ 433.256763][ T9146] lo speed is unknown, defaulting to 1000 [ 433.328891][ T1614] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.409843][ T4229] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 433.435395][ T1614] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.489039][ T9158] ================================================================== [ 433.491701][ T9158] BUG: KASAN: use-after-free in ax25_dev_device_down+0x358/0x680 [ 433.493782][ T9158] Write of size 4 at addr ffff0000d45194b8 by task syz.5.1438/9158 [ 433.495903][ T9158] [ 433.496546][ T9158] CPU: 1 PID: 9158 Comm: syz.5.1438 Not tainted 5.15.178-syzkaller #0 [ 433.498795][ T9158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 433.501715][ T9158] Call trace: [ 433.502587][ T9158] dump_backtrace+0x0/0x530 [ 433.503848][ T9158] show_stack+0x2c/0x3c [ 433.505033][ T9158] dump_stack_lvl+0x108/0x170 [ 433.506300][ T9158] print_address_description+0x7c/0x3f0 [ 433.507818][ T9158] kasan_report+0x174/0x1e4 [ 433.509065][ T9158] kasan_check_range+0x274/0x2b4 [ 433.510443][ T9158] __kasan_check_write+0x44/0x54 [ 433.511779][ T9158] ax25_dev_device_down+0x358/0x680 [ 433.513328][ T9158] ax25_device_event+0x534/0x58c [ 433.514738][ T9158] raw_notifier_call_chain+0xd4/0x164 [ 433.516270][ T9158] __dev_notify_flags+0x2ac/0x534 [ 433.517685][ T9158] dev_change_flags+0xc8/0x154 [ 433.519003][ T9158] dev_ifsioc+0x140/0xfe4 [ 433.520138][ T9158] dev_ioctl+0x4e0/0xd3c [ 433.521330][ T9158] sock_do_ioctl+0x1dc/0x2dc [ 433.522700][ T9158] sock_ioctl+0x4f0/0x8ac [ 433.523805][ T9158] __arm64_sys_ioctl+0x14c/0x1c8 SYZFAIL: failed to recv rpc [ 433.525115][ T9158] invoke_syscall+0x98/0x2b8 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 433.526400][ T9158] el0_svc_common+0x138/0x258 [ 433.527608][ T9158] do_el0_svc+0x58/0x14c [ 433.528774][ T9158] el0_svc+0x7c/0x1f0 [ 433.529842][ T9158] el0t_64_sync_handler+0x84/0xe4 [ 433.531248][ T9158] el0t_64_sync+0x1a0/0x1a4 [ 433.532539][ T9158] [ 433.533194][ T9158] Allocated by task 8172: [ 433.534396][ T9158] ____kasan_kmalloc+0xbc/0xfc [ 433.535762][ T9158] __kasan_kmalloc+0x10/0x1c [ 433.537021][ T9158] kmem_cache_alloc_trace+0x27c/0x47c [ 433.538561][ T9158] ax25_dev_device_up+0x5c/0x548 [ 433.539971][ T9158] ax25_device_event+0x500/0x58c [ 433.541260][ T9158] raw_notifier_call_chain+0xd4/0x164 [ 433.542771][ T9158] __dev_notify_flags+0x2ac/0x534 [ 433.544138][ T9158] dev_change_flags+0xc8/0x154 [ 433.545469][ T9158] dev_ifsioc+0x140/0xfe4 [ 433.546724][ T9158] dev_ioctl+0x4e0/0xd3c [ 433.547871][ T9158] sock_do_ioctl+0x1dc/0x2dc [ 433.549149][ T9158] sock_ioctl+0x4f0/0x8ac [ 433.550360][ T9158] __arm64_sys_ioctl+0x14c/0x1c8 [ 433.551678][ T9158] invoke_syscall+0x98/0x2b8 [ 433.552954][ T9158] el0_svc_common+0x138/0x258 [ 433.554283][ T9158] do_el0_svc+0x58/0x14c [ 433.555431][ T9158] el0_svc+0x7c/0x1f0 [ 433.556529][ T9158] el0t_64_sync_handler+0x84/0xe4 [ 433.557954][ T9158] el0t_64_sync+0x1a0/0x1a4 [ 433.559224][ T9158] [ 433.559843][ T9158] Freed by task 9158: [ 433.560981][ T9158] kasan_set_track+0x4c/0x84 [ 433.562178][ T9158] kasan_set_free_info+0x28/0x4c [ 433.563622][ T9158] ____kasan_slab_free+0x118/0x164 [ 433.564979][ T9158] __kasan_slab_free+0x18/0x28 [ 433.566316][ T9158] slab_free_freelist_hook+0x128/0x1ec [ 433.567874][ T9158] kfree+0x178/0x410 [ 433.569076][ T9158] ax25_dev_device_down+0x1b0/0x680 [ 433.570477][ T9158] ax25_device_event+0x534/0x58c [ 433.571905][ T9158] raw_notifier_call_chain+0xd4/0x164 [ 433.573370][ T9158] __dev_notify_flags+0x2ac/0x534 [ 433.574759][ T9158] dev_change_flags+0xc8/0x154 [ 433.576069][ T9158] dev_ifsioc+0x140/0xfe4 [ 433.577318][ T9158] dev_ioctl+0x4e0/0xd3c [ 433.578528][ T9158] sock_do_ioctl+0x1dc/0x2dc [ 433.579839][ T9158] sock_ioctl+0x4f0/0x8ac [ 433.581088][ T9158] __arm64_sys_ioctl+0x14c/0x1c8 [ 433.582518][ T9158] invoke_syscall+0x98/0x2b8 [ 433.583870][ T9158] el0_svc_common+0x138/0x258 [ 433.585162][ T9158] do_el0_svc+0x58/0x14c [ 433.586292][ T9158] el0_svc+0x7c/0x1f0 [ 433.587444][ T9158] el0t_64_sync_handler+0x84/0xe4 [ 433.588812][ T9158] el0t_64_sync+0x1a0/0x1a4 [ 433.590105][ T9158] [ 433.590680][ T9158] Last potentially related work creation: [ 433.592251][ T9158] kasan_save_stack+0x38/0x68 [ 433.593608][ T9158] kasan_record_aux_stack+0xd4/0x11c [ 433.595186][ T9158] kvfree_call_rcu+0xb8/0x684 [ 433.596511][ T9158] drop_sysctl_table+0x274/0x3a0 [ 433.597883][ T9158] drop_sysctl_table+0x284/0x3a0 [ 433.599323][ T9158] unregister_sysctl_table+0x94/0x130 [ 433.600896][ T9158] unregister_net_sysctl_table+0x20/0x30 [ 433.602429][ T9158] neigh_sysctl_unregister+0x78/0x9c [ 433.603852][ T9158] addrconf_ifdown+0x14ec/0x1814 [ 433.605231][ T9158] addrconf_notify+0x350/0xc58 [ 433.606430][ T9158] raw_notifier_call_chain+0xd4/0x164 [ 433.607960][ T9158] unregister_netdevice_many+0xec4/0x189c [ 433.609613][ T9158] default_device_exit_batch+0x4c0/0x520 [ 433.611208][ T9158] cleanup_net+0x6bc/0xa9c [ 433.612385][ T9158] process_one_work+0x790/0x11b8 [ 433.613792][ T9158] worker_thread+0x910/0x1034 [ 433.615015][ T9158] kthread+0x37c/0x45c [ 433.616132][ T9158] ret_from_fork+0x10/0x20 [ 433.617267][ T9158] [ 433.617863][ T9158] The buggy address belongs to the object at ffff0000d4519400 [ 433.617863][ T9158] which belongs to the cache kmalloc-256 of size 256 [ 433.621815][ T9158] The buggy address is located 184 bytes inside of [ 433.621815][ T9158] 256-byte region [ffff0000d4519400, ffff0000d4519500) [ 433.625495][ T9158] The buggy address belongs to the page: [ 433.627079][ T9158] page:00000000545d695e refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000d4519a00 pfn:0x114518 [ 433.630435][ T9158] head:00000000545d695e order:1 compound_mapcount:0 [ 433.632306][ T9158] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 433.634589][ T9158] raw: 05ffc00000010200 fffffc00038c9288 fffffc0003081588 ffff0000c0002480 [ 433.636930][ T9158] raw: ffff0000d4519a00 000000000010000e 00000001ffffffff 0000000000000000 [ 433.639363][ T9158] page dumped because: kasan: bad access detected [ 433.641143][ T9158] [ 433.641767][ T9158] Memory state around the buggy address: [ 433.643349][ T9158] ffff0000d4519380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 433.645611][ T9158] ffff0000d4519400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 433.647982][ T9158] >ffff0000d4519480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 433.650198][ T9158] ^ [ 433.651771][ T9158] ffff0000d4519500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 433.654075][ T9158] ffff0000d4519580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 433.656414][ T9158] ================================================================== [ 433.658651][ T9158] Disabling lock debugging due to kernel taint [ 433.697173][ T9158] ------------[ cut here ]------------ [ 433.698790][ T9158] refcount_t: underflow; use-after-free. [ 433.700816][ T9158] WARNING: CPU: 0 PID: 9158 at lib/refcount.c:28 refcount_warn_saturate+0x1c8/0x20c [ 433.703458][ T9158] Modules linked in: [ 433.704490][ T9158] CPU: 0 PID: 9158 Comm: syz.5.1438 Tainted: G B 5.15.178-syzkaller #0 [ 433.707159][ T9158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 433.709915][ T9158] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 433.712023][ T9158] pc : refcount_warn_saturate+0x1c8/0x20c [ 433.713547][ T9158] lr : refcount_warn_saturate+0x1c8/0x20c [ 433.715063][ T9158] sp : ffff800020297600 [ 433.716206][ T9158] x29: ffff800020297600 x28: ffff800016df13c0 x27: 1fffe0001a8a3282 [ 433.718373][ T9158] x26: ffff80001bc02000 x25: 1fffe0001aa3a46d x24: dfff800000000000 [ 433.720575][ T9158] x23: 0000000000000001 x22: ffff0000d45194b8 x21: 0000000000000003 [ 433.722708][ T9158] x20: ffff0000d45194b8 x19: ffff800016fd0000 x18: 0000000000000001 [ 433.724947][ T9158] x17: 0000000000000002 x16: ffff800011b4e3fc x15: 00000000ffffffff [ 433.727107][ T9158] x14: ffff0000e7649b40 x13: 0000000000000001 x12: 0000000000080000 [ 433.729298][ T9158] x11: 000000000003c568 x10: ffff80002db4f000 x9 : 8eca00c477bbba00 [ 433.731559][ T9158] x8 : 8eca00c477bbba00 x7 : 0000000000000001 x6 : 0000000000000001 [ 433.733788][ T9158] x5 : ffff800020296d78 x4 : ffff800014c50660 x3 : ffff8000085568c0 [ 433.735954][ T9158] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000026 [ 433.738167][ T9158] Call trace: [ 433.739031][ T9158] refcount_warn_saturate+0x1c8/0x20c [ 433.740418][ T9158] ax25_dev_device_down+0x52c/0x680 [ 433.741800][ T9158] ax25_device_event+0x534/0x58c [ 433.743249][ T9158] raw_notifier_call_chain+0xd4/0x164 [ 433.744723][ T9158] __dev_notify_flags+0x2ac/0x534 [ 433.746138][ T9158] dev_change_flags+0xc8/0x154 [ 433.747480][ T9158] dev_ifsioc+0x140/0xfe4 [ 433.748699][ T9158] dev_ioctl+0x4e0/0xd3c [ 433.749873][ T9158] sock_do_ioctl+0x1dc/0x2dc [ 433.751204][ T9158] sock_ioctl+0x4f0/0x8ac [ 433.752480][ T9158] __arm64_sys_ioctl+0x14c/0x1c8 [ 433.753886][ T9158] invoke_syscall+0x98/0x2b8 [ 433.755163][ T9158] el0_svc_common+0x138/0x258 [ 433.756505][ T9158] do_el0_svc+0x58/0x14c [ 433.757674][ T9158] el0_svc+0x7c/0x1f0 [ 433.758721][ T9158] el0t_64_sync_handler+0x84/0xe4 [ 433.760153][ T9158] el0t_64_sync+0x1a0/0x1a4 [ 433.761506][ T9158] irq event stamp: 788 [ 433.762648][ T9158] hardirqs last enabled at (787): [] kasan_quarantine_put+0xdc/0x204 [ 433.765380][ T9158] hardirqs last disabled at (788): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 433.768098][ T9158] softirqs last enabled at (780): [] ax25_dev_device_down+0x168/0x680 [ 433.771010][ T9158] softirqs last disabled at (776): [] ax25_dev_device_down+0x64/0x680 [ 433.773783][ T9158] ---[ end trace 2e05c149ef24c2e4 ]--- [ 433.884294][ T1614] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.376526][ T4229] usb 1-1: device descriptor read/all, error -71 [ 435.353684][ T1614] device hsr_slave_0 left promiscuous mode [ 435.397603][ T1614] device hsr_slave_1 left promiscuous mode [ 435.466669][ T1614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.468711][ T1614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.471626][ T1614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.473587][ T1614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.476020][ T1614] device bridge_slave_1 left promiscuous mode [ 435.478295][ T1614] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.517299][ T1614] device bridge_slave_0 left promiscuous mode [ 435.519016][ T1614] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.636472][ T1614] device veth1_macvtap left promiscuous mode [ 435.638295][ T1614] device veth0_macvtap left promiscuous mode [ 435.639996][ T1614] device veth1_vlan left promiscuous mode [ 435.641603][ T1614] device veth0_vlan left promiscuous mode [ 435.796845][ T1614] team0 (unregistering): Port device team_slave_1 removed [ 435.803599][ T1614] team0 (unregistering): Port device team_slave_0 removed [ 435.815828][ T1614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.861309][ T1614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.971719][ T1614] bond0 (unregistering): Released all slaves [ 437.920413][ T1614] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.971504][ T1614] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.052279][ T1614] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.100760][ T1614] bond0: (slave netdevsim0): Releasing backup interface [ 438.138037][ T1614] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.267974][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.797098][ T1614] bond2: (slave ip6gretap1): Releasing active interface [ 438.821720][ T1614] bond5: (slave ip6gretap2): Releasing backup interface [ 440.513505][ T1614] device hsr_slave_0 left promiscuous mode [ 440.558577][ T1614] device hsr_slave_1 left promiscuous mode [ 440.626338][ T1614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.628303][ T1614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.633510][ T1614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.635438][ T1614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.637838][ T1614] device bond1 left promiscuous mode [ 440.639276][ T1614] bridge0: port 3(bond1) entered disabled state [ 440.687221][ T1614] device bridge_slave_1 left promiscuous mode [ 440.688953][ T1614] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.728321][ T1614] device bridge_slave_0 left promiscuous mode [ 440.729999][ T1614] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.886531][ T1614] device veth1_macvtap left promiscuous mode [ 440.888228][ T1614] device veth0_macvtap left promiscuous mode [ 440.889969][ T1614] device veth1_vlan left promiscuous mode [ 440.891572][ T1614] device veth0_vlan left promiscuous mode [ 440.979789][ T1614] bond6 (unregistering): Released all slaves [ 440.989656][ T1614] bond5 (unregistering): Released all slaves [ 440.995773][ T1614] bond4 (unregistering): Released all slaves [ 441.002223][ T1614] bond3 (unregistering): Released all slaves [ 441.008602][ T1614] bond2 (unregistering): Released all slaves [ 441.023236][ T1614] bond1 (unregistering): Released all slaves [ 441.093809][ T1614] team0 (unregistering): Port device team_slave_1 removed [ 441.102621][ T1614] team0 (unregistering): Port device team_slave_0 removed [ 441.110457][ T1614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.151673][ T1614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.274097][ T1614] bond0 (unregistering): Released all slaves