last executing test programs: 3.552666993s ago: executing program 0 (id=405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00019c"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 3.343558126s ago: executing program 0 (id=407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r1, 0x5, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$unix(0x1, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r11, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000f0ff0000000800050007"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 2.937050941s ago: executing program 1 (id=410): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = getuid() quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000901, r2, &(0x7f0000000380)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$ndb(&(0x7f0000000440), 0x0, 0x10000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0)='gfs2\x00', 0x1018d41, 0x0) 2.716798404s ago: executing program 0 (id=413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000030900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006c696d6974000000240002800c00024000000000000010000c0001400000000000000003080005400000000114"], 0xe8}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xfffffffd, @local, 0x7}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x7ffffff7}}], 0x1, 0x0) 2.547431447s ago: executing program 0 (id=417): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00019c"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 2.496994947s ago: executing program 3 (id=418): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000100760100000475000000000000", @ANYRES32, @ANYBLOB="9a"], 0x20}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000200)={'wlan1\x00', @multicast}) 2.393098369s ago: executing program 3 (id=419): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) recvfrom(r0, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) 2.042570843s ago: executing program 0 (id=420): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r2, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 2.042242133s ago: executing program 3 (id=421): r0 = socket$packet(0x11, 0x3, 0x300) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000000000004, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x2, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) madvise(&(0x7f0000b1b000/0x2000)=nil, 0x2000, 0x14) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r2, &(0x7f00000026c0)='?', 0xffffffffffffffbd, 0x4, 0x0, 0x0) 2.041817793s ago: executing program 4 (id=422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x28, 0x4, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 1.994795274s ago: executing program 2 (id=423): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r1, 0x5, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$unix(0x1, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r11, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000f0ff0000000800050007"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 1.977063614s ago: executing program 1 (id=424): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) close(r0) utimensat(r1, 0x0, &(0x7f00000002c0)={{0x0, 0xea60}}, 0x0) 1.852880326s ago: executing program 4 (id=425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 1.844413116s ago: executing program 4 (id=426): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xf00, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x1401, 0x7fc32be5eb343aa7}, 0x5c}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001bc0)) 1.579642219s ago: executing program 4 (id=427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000030900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006c696d6974000000240002800c00024000000000000010000c0001400000000000000003080005400000000114000000"], 0xe8}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xfffffffd, @local, 0x7}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x7ffffff7}}], 0x1, 0x0) 1.55134733s ago: executing program 3 (id=428): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a2c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x2003ff, 0x5, 0x9, 0x7, 0xb7, 0x9, 0x36b, 0x9, 0x4, 0x7ff, 0x1a, 0x1e, 0x7, 0xa, 0xa, 0x3}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x480c1}, 0x0) 1.51142604s ago: executing program 4 (id=429): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000200)={'wlan1\x00', @multicast}) 1.463814721s ago: executing program 3 (id=430): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f00000000c0)={[{@discard}, {@autodefrag}, {@datacow}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@space_cache_v1}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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") unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@volatile}], [], 0x2c}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1.451949881s ago: executing program 4 (id=431): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) r5 = fcntl$dupfd(r4, 0x406, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.421768411s ago: executing program 0 (id=432): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r6, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r12, &(0x7f00000000c0)=ANY=[], 0xff2e) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000080211000001080211000000080211000000200001000000010001"], 0x20) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="8000000008021100000108021100000108021100000000"], 0x64) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) 1.387960002s ago: executing program 2 (id=433): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00"/211], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00019c"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 1.275531274s ago: executing program 2 (id=434): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = getuid() quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000901, r2, &(0x7f0000000380)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$ndb(&(0x7f0000000440), 0x0, 0x10000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0)='gfs2\x00', 0x1018d41, 0x0) 1.007147247s ago: executing program 1 (id=435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r1, 0x5, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r9, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000f0ff0000000800050007"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 361.783246ms ago: executing program 2 (id=436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 302.571376ms ago: executing program 2 (id=437): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xf00, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x1401, 0x7fc32be5eb343aa7}, 0x5c}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001bc0)) 277.604806ms ago: executing program 1 (id=438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x17}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x8000000) 224.746027ms ago: executing program 1 (id=439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000030900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006c696d6974000000240002800c00024000000000000010000c0001400000000000000003080005400000000114000000"], 0xe8}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xfffffffd, @local, 0x7}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x7ffffff7}}], 0x1, 0x0) 38.98684ms ago: executing program 3 (id=440): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a2c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x2003ff, 0x5, 0x9, 0x7, 0xb7, 0x9, 0x36b, 0x9, 0x4, 0x7ff, 0x1a, 0x1e, 0x7, 0xa, 0xa, 0x3}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x480c1}, 0x0) 8.83003ms ago: executing program 1 (id=441): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000200)={'wlan1\x00', @multicast}) 0s ago: executing program 2 (id=442): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r2, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.109' (ED25519) to the list of known hosts. [ 34.215929][ T4286] cgroup: Unknown subsys name 'net' [ 34.477524][ T4286] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.810372][ T4286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 36.285640][ T4303] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.288047][ T4303] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.291299][ T4303] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.297143][ T4310] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.299914][ T4310] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.302526][ T4310] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.303699][ T4312] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.304696][ T4310] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.306999][ T4312] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.309075][ T4310] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.310843][ T4312] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.312985][ T4310] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 36.314761][ T4312] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 36.316009][ T4310] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.317979][ T4312] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.319796][ T4310] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.328231][ T4311] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.328919][ T4312] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 36.331425][ T4311] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.335730][ T4311] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.351308][ T4311] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 36.354177][ T4313] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.356870][ T4313] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.359804][ T4313] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.362060][ T4313] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 36.368322][ T4313] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.382897][ T4303] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 36.385778][ T4303] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 36.388000][ T4303] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 36.390148][ T4303] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 36.521648][ T4302] chnl_net:caif_netlink_parms(): no params data found [ 36.607243][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.609280][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.611816][ T4302] device bridge_slave_0 entered promiscuous mode [ 36.622064][ T4297] chnl_net:caif_netlink_parms(): no params data found [ 36.632089][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.634486][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.636987][ T4302] device bridge_slave_1 entered promiscuous mode [ 36.678967][ T4302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.701042][ T4302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.705610][ T4296] chnl_net:caif_netlink_parms(): no params data found [ 36.759628][ T4302] team0: Port device team_slave_0 added [ 36.766482][ T4302] team0: Port device team_slave_1 added [ 36.768653][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.770685][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.773650][ T4297] device bridge_slave_0 entered promiscuous mode [ 36.777180][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.779197][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.781677][ T4297] device bridge_slave_1 entered promiscuous mode [ 36.796292][ T4306] chnl_net:caif_netlink_parms(): no params data found [ 36.818493][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.820413][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.827670][ T4302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.837801][ T4307] chnl_net:caif_netlink_parms(): no params data found [ 36.862728][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.864575][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.871363][ T4302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.877328][ T4297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.885203][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.887090][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.889504][ T4296] device bridge_slave_0 entered promiscuous mode [ 36.901431][ T4297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.915656][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.917536][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.920045][ T4296] device bridge_slave_1 entered promiscuous mode [ 36.930389][ T4297] team0: Port device team_slave_0 added [ 36.953486][ T4297] team0: Port device team_slave_1 added [ 36.985510][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.987444][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.995450][ T4297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.000577][ T4296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.006337][ T4306] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.008363][ T4306] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.010852][ T4306] device bridge_slave_0 entered promiscuous mode [ 37.054218][ T4302] device hsr_slave_0 entered promiscuous mode [ 37.092860][ T4302] device hsr_slave_1 entered promiscuous mode [ 37.159487][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.161520][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.169160][ T4297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.173835][ T4296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.178772][ T4306] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.180736][ T4306] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.183514][ T4306] device bridge_slave_1 entered promiscuous mode [ 37.186330][ T4307] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.188190][ T4307] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.190702][ T4307] device bridge_slave_0 entered promiscuous mode [ 37.207991][ T4307] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.210019][ T4307] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.212867][ T4307] device bridge_slave_1 entered promiscuous mode [ 37.216564][ T4296] team0: Port device team_slave_0 added [ 37.219793][ T4296] team0: Port device team_slave_1 added [ 37.245096][ T4306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.269442][ T4306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.272412][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.274263][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.280802][ T4296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.285929][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.287688][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.294700][ T4296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.310697][ T4307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.364069][ T4297] device hsr_slave_0 entered promiscuous mode [ 37.402683][ T4297] device hsr_slave_1 entered promiscuous mode [ 37.442545][ T4297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.444708][ T4297] Cannot create hsr debugfs directory [ 37.463141][ T4307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.471855][ T4306] team0: Port device team_slave_0 added [ 37.487786][ T4306] team0: Port device team_slave_1 added [ 37.508461][ T4307] team0: Port device team_slave_0 added [ 37.545010][ T4296] device hsr_slave_0 entered promiscuous mode [ 37.592673][ T4296] device hsr_slave_1 entered promiscuous mode [ 37.632468][ T4296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.634515][ T4296] Cannot create hsr debugfs directory [ 37.649791][ T4307] team0: Port device team_slave_1 added [ 37.700505][ T4306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.702826][ T4306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.709984][ T4306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.718925][ T4306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.720904][ T4306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.728475][ T4306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.748239][ T4307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.750084][ T4307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.757412][ T4307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.773446][ T4307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.775386][ T4307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.782776][ T4307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.914156][ T4306] device hsr_slave_0 entered promiscuous mode [ 37.952657][ T4306] device hsr_slave_1 entered promiscuous mode [ 38.012397][ T4306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.014663][ T4306] Cannot create hsr debugfs directory [ 38.084185][ T4307] device hsr_slave_0 entered promiscuous mode [ 38.122701][ T4307] device hsr_slave_1 entered promiscuous mode [ 38.162441][ T4307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.164549][ T4307] Cannot create hsr debugfs directory [ 38.197938][ T4302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.260070][ T4302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.304101][ T4302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.354127][ T4305] Bluetooth: hci2: command 0x0409 tx timeout [ 38.356099][ T4305] Bluetooth: hci1: command 0x0409 tx timeout [ 38.379661][ T4302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.422563][ T4303] Bluetooth: hci4: command 0x0409 tx timeout [ 38.424343][ T4303] Bluetooth: hci3: command 0x0409 tx timeout [ 38.426106][ T4303] Bluetooth: hci0: command 0x0409 tx timeout [ 38.447158][ T4297] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.484658][ T4297] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.542024][ T4297] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.584043][ T4297] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.678901][ T4296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.725739][ T4296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.772651][ T4296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.809453][ T4296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.877302][ T4307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.911872][ T4307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.963007][ T4307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.016049][ T4307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.101127][ T4297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.105585][ T4302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.131095][ T4306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.184058][ T4306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.224387][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.227566][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.230303][ T4306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.286074][ T4297] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.288078][ T4306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.335254][ T4302] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.338468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.341483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.344229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.346892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.349754][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.351775][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.369608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.372184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.376057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.378586][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.380600][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.384986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.387635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.390099][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.391886][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.398341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.405500][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.408150][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.410640][ T452] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.412606][ T452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.424195][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.440572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.444641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.467993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.476300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.479387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.487644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.498698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.501875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.505565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.508257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.511837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.517899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.520610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.538537][ T4307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.545212][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.548242][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.557912][ T4302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.561273][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.567925][ T4296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.570821][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.574579][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.577146][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.579999][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.589329][ T4307] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.596398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.598743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.601050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.604984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.610026][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.628762][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.631816][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.640609][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.642640][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.646914][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.658196][ T4296] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.670679][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.673988][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.683430][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.689000][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.691694][ T195] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.693587][ T195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.698287][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.701015][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.710658][ T195] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.712681][ T195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.727200][ T4306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.729292][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.731840][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.739969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.747935][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.756058][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.762421][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.766857][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.769487][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.772006][ T195] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.774052][ T195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.790644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.795250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.807378][ T4306] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.809515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.813357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.816646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.819353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.841606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.844682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.847697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.850270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.854236][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.856142][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.858415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.861073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.865412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.868024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.870425][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.872209][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.875567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.878310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.880912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.884178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.886837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.889410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.891903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.896864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.899459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.906410][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.916733][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.918809][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.928980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.931130][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.935235][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.940382][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.944359][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.950767][ T4297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.960337][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.965192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.967913][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.980391][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.990670][ T4302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.996823][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.999598][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.008627][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.011271][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.031884][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.036043][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.050416][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.055732][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.070427][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.078320][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.081094][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.089610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.097193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.107301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.109747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.131049][ T4297] device veth0_vlan entered promiscuous mode [ 40.147802][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.150522][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.153837][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.163666][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.170716][ T4302] device veth0_vlan entered promiscuous mode [ 40.178697][ T4297] device veth1_vlan entered promiscuous mode [ 40.194889][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.197449][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.199545][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.208733][ T4302] device veth1_vlan entered promiscuous mode [ 40.221977][ T4307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.230903][ T4296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.236153][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.238590][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.241076][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.244134][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.287688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.290512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.294061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.296840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.299492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.312091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.314835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.327721][ T4306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.330985][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.334775][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.337361][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.340106][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.351705][ T4302] device veth0_macvtap entered promiscuous mode [ 40.360172][ T4296] device veth0_vlan entered promiscuous mode [ 40.369183][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.371707][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.376555][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.379020][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.381626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.386192][ T4302] device veth1_macvtap entered promiscuous mode [ 40.390040][ T4297] device veth0_macvtap entered promiscuous mode [ 40.400325][ T4307] device veth0_vlan entered promiscuous mode [ 40.411488][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.416325][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.418896][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.421401][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.433975][ T4305] Bluetooth: hci1: command 0x041b tx timeout [ 40.435591][ T4305] Bluetooth: hci2: command 0x041b tx timeout [ 40.436839][ T4296] device veth1_vlan entered promiscuous mode [ 40.445222][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.447960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.454795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.457210][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.461074][ T4297] device veth1_macvtap entered promiscuous mode [ 40.469783][ T4307] device veth1_vlan entered promiscuous mode [ 40.486702][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.494961][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.497683][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.500250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.502667][ T4303] Bluetooth: hci0: command 0x041b tx timeout [ 40.504308][ T4303] Bluetooth: hci3: command 0x041b tx timeout [ 40.505913][ T4303] Bluetooth: hci4: command 0x041b tx timeout [ 40.509242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.512205][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.521224][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.525068][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.528778][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.539841][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.541946][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.545450][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.548188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.550918][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.556830][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.559508][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.563603][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.569721][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.572492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.575095][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.577729][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.591881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.595845][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.603761][ T4296] device veth0_macvtap entered promiscuous mode [ 40.607101][ T4302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.609370][ T4302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.611664][ T4302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.615354][ T4302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.621704][ T4297] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.628174][ T4297] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.630547][ T4297] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.635021][ T4297] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.645093][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.648008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.650640][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.653441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.656014][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.659920][ T4296] device veth1_macvtap entered promiscuous mode [ 40.672062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.674972][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.677281][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.685344][ T4307] device veth0_macvtap entered promiscuous mode [ 40.692113][ T4306] device veth0_vlan entered promiscuous mode [ 40.706682][ T4307] device veth1_macvtap entered promiscuous mode [ 40.710782][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.715128][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.717723][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.720452][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.725442][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.733959][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.736810][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.739401][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.742067][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.747238][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.756635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.759256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.761996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.768923][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.772432][ T4306] device veth1_vlan entered promiscuous mode [ 40.793102][ T4296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.795580][ T4296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.797953][ T4296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.800251][ T4296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.820066][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.824453][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.827253][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.830041][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.834685][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.837479][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.841486][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.856425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.859268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.896345][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.899177][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.901815][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.907195][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.909861][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.913020][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.916963][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.935131][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.938011][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.940763][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.943794][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.950068][ T4307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.953346][ T4307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.955767][ T4307] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.958078][ T4307] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.965880][ T4306] device veth0_macvtap entered promiscuous mode [ 40.969605][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.971429][ T4306] device veth1_macvtap entered promiscuous mode [ 40.971779][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.990011][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.992862][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.995333][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.008954][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.011073][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.020225][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.041571][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.047443][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.051131][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.063973][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.064260][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.068967][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.071532][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.075243][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.077453][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.077829][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.083780][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.089739][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.097704][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.101516][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.120543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.123197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.125844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.144430][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.146440][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.149518][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.152154][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.153144][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.158215][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.161025][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.164392][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.167000][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.169638][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.175642][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.190529][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.193318][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.195986][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.201737][ T4306] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.204830][ T4306] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.207237][ T4306] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.209649][ T4306] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.216549][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.218689][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.221624][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.261270][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.267372][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.271316][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.300648][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.323137][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.387276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.517909][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.520238][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.528464][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.643246][ T452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.645573][ T452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.648875][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.767927][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 41.833774][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.854586][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.888565][ T4397] device bridge_slave_0 left promiscuous mode [ 41.890907][ T4397] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.950991][ T4397] device bridge_slave_1 left promiscuous mode [ 41.954990][ T4397] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.996384][ T4397] bond0: (slave bond_slave_0): Releasing backup interface [ 42.049010][ T4397] bond0: (slave bond_slave_1): Releasing backup interface [ 42.073409][ T4410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 42.101144][ T4397] team0: Port device team_slave_0 removed [ 42.115682][ T4397] team0: Port device team_slave_1 removed [ 42.117903][ T4397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.120112][ T4397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.125278][ T4397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.127343][ T4397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.136764][ T4412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'. [ 42.157499][ T4413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 42.426894][ T4410] netlink: 'syz.1.12': attribute type 10 has an invalid length. [ 42.692728][ T4305] Bluetooth: hci2: command 0x040f tx timeout [ 42.694823][ T4305] Bluetooth: hci1: command 0x040f tx timeout [ 42.697114][ T4305] Bluetooth: hci4: command 0x040f tx timeout [ 42.699476][ T4305] Bluetooth: hci3: command 0x040f tx timeout [ 42.702057][ T4305] Bluetooth: hci0: command 0x040f tx timeout [ 43.267071][ T4410] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 43.290555][ T4413] netlink: 'syz.0.14': attribute type 10 has an invalid length. [ 43.391575][ T4413] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 43.438806][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 43.487964][ T4436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 43.631056][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 43.644036][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 43.915404][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 43.941270][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.963850][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.142797][ T4456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 44.279114][ T4463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27'. [ 44.282811][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.330577][ T4465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 44.423109][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.467764][ T4456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 44.511816][ T4456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 44.578143][ T4418] loop3: detected capacity change from 0 to 131072 [ 44.669247][ T4474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 44.692817][ T4474] netlink: 'syz.0.33': attribute type 10 has an invalid length. [ 44.743663][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.744925][ T4418] F2FS-fs (loop3): Test dummy encryption mode enabled [ 44.746116][ T4303] Bluetooth: hci0: command 0x0419 tx timeout [ 44.749555][ T4303] Bluetooth: hci3: command 0x0419 tx timeout [ 44.751203][ T4303] Bluetooth: hci4: command 0x0419 tx timeout [ 44.752852][ T4303] Bluetooth: hci1: command 0x0419 tx timeout [ 44.754437][ T4303] Bluetooth: hci2: command 0x0419 tx timeout [ 44.775372][ T4418] F2FS-fs (loop3): Found nat_bits in checkpoint [ 44.817311][ T4418] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 44.893735][ T4418] syz.3.15 (pid 4418) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 44.967648][ T4468] loop2: detected capacity change from 0 to 40427 [ 44.986043][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.991465][ T4468] F2FS-fs (loop2): invalid crc value [ 45.022150][ T4468] F2FS-fs (loop2): Found nat_bits in checkpoint [ 45.065339][ T4468] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 45.115852][ T4468] syz.2.31: attempt to access beyond end of device [ 45.115852][ T4468] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 45.144077][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 45.224200][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 45.314929][ T4491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 45.334177][ T4491] netlink: 'syz.4.38': attribute type 10 has an invalid length. [ 45.388965][ T4493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.38'. [ 45.475576][ T4491] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 45.520638][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 45.529414][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.542005][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.554319][ T4494] device bridge_slave_0 left promiscuous mode [ 45.556116][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.621732][ T4494] device bridge_slave_1 left promiscuous mode [ 45.625558][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.675369][ T4494] bond0: (slave bond_slave_0): Releasing backup interface [ 45.731716][ T4494] bond0: (slave bond_slave_1): Releasing backup interface [ 45.739553][ T4504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 45.801600][ T4505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.34'. [ 45.837996][ T4494] team0: Port device team_slave_0 removed [ 45.861508][ T4494] team0: Port device team_slave_1 removed [ 45.868673][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.871055][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.878391][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.880607][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.891083][ T4494] bond0: (slave wlan1): Releasing backup interface [ 45.940926][ T4493] wlan1: authenticate with 08:02:11:00:00:00 [ 45.956352][ T4493] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 45.960018][ T195] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 45.961945][ T195] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 45.969311][ T195] wlan1: authentication with 08:02:11:00:00:00 timed out [ 46.055495][ T4504] netlink: 'syz.3.34': attribute type 10 has an invalid length. [ 46.117851][ T4504] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 46.424895][ T4521] loop2: detected capacity change from 0 to 32768 [ 46.432125][ T4521] ======================================================= [ 46.432125][ T4521] WARNING: The mand mount option has been deprecated and [ 46.432125][ T4521] and is ignored by this kernel. Remove the mand [ 46.432125][ T4521] option from the mount to silence this warning. [ 46.432125][ T4521] ======================================================= [ 46.524206][ T4521] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 46.806364][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 46.942410][ T4541] misc userio: Invalid payload size [ 46.944332][ T4541] misc userio: No port type given on /dev/userio [ 46.946354][ T4541] misc userio: The device must be registered before sending interrupts [ 47.094061][ T4543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 47.127806][ T4543] netlink: 'syz.4.53': attribute type 10 has an invalid length. [ 47.375380][ T4535] loop0: detected capacity change from 0 to 40427 [ 47.403362][ T4535] F2FS-fs (loop0): invalid crc value [ 47.444926][ T4535] F2FS-fs (loop0): Found nat_bits in checkpoint [ 47.468864][ T4521] overlayfs: upper fs does not support tmpfile. [ 47.481105][ T4521] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 47.488649][ T4535] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 47.526239][ T4521] overlayfs: upper fs missing required features. [ 47.541112][ T4535] syz.0.50: attempt to access beyond end of device [ 47.541112][ T4535] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 47.657767][ T4307] ocfs2: Unmounting device (7,2) on (node local) [ 48.106071][ T4562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.59'. [ 48.114438][ T4562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.59'. [ 48.147808][ T4527] loop1: detected capacity change from 0 to 131072 [ 48.168518][ T4527] F2FS-fs (loop1): Test dummy encryption mode enabled [ 48.243056][ T4527] F2FS-fs (loop1): Found nat_bits in checkpoint [ 48.277705][ T4527] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 48.361132][ T4576] misc userio: Invalid payload size [ 48.363070][ T4576] misc userio: No port type given on /dev/userio [ 48.382524][ T4576] misc userio: The device must be registered before sending interrupts [ 48.554166][ T4578] misc userio: Invalid payload size [ 48.586458][ T4578] misc userio: No port type given on /dev/userio [ 48.591778][ T4578] misc userio: The device must be registered before sending interrupts [ 48.594215][ T4345] net_ratelimit: 21 callbacks suppressed [ 48.594227][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.807677][ T4580] loop4: detected capacity change from 0 to 32768 [ 48.821364][ T4580] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 48.825166][ T4584] netlink: 'syz.2.66': attribute type 10 has an invalid length. [ 48.853998][ T4584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.895597][ T4584] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 48.917919][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 49.464264][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.945605][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.951050][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.954212][ T3877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.068726][ T4604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 50.076779][ T4604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 50.143492][ T4610] misc userio: Invalid payload size [ 50.145450][ T4610] misc userio: The device must be registered before sending interrupts [ 50.435368][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.502969][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.208270][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.210772][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.213199][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.393411][ T4623] netlink: 'syz.1.82': attribute type 10 has an invalid length. [ 51.619997][ T4306] ocfs2: Unmounting device (7,4) on (node local) [ 51.643858][ T4629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.655129][ T4629] netlink: 'syz.1.85': attribute type 10 has an invalid length. [ 51.663464][ T4629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.85'. [ 51.830150][ T4635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 51.840085][ T4635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 51.929512][ T4639] misc userio: Invalid payload size [ 51.940130][ T4639] misc userio: The device must be registered before sending interrupts [ 53.075047][ T4650] netlink: 'syz.1.94': attribute type 10 has an invalid length. [ 53.389304][ T4662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'. [ 53.399559][ T4662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'. [ 53.486080][ T4667] misc userio: Invalid payload size [ 53.488042][ T4667] misc userio: The device must be registered before sending interrupts [ 53.624030][ T7] net_ratelimit: 22 callbacks suppressed [ 53.624044][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.628141][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.689148][ T4676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 53.691661][ T3877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.693999][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.743076][ T4676] netlink: 'syz.3.107': attribute type 10 has an invalid length. [ 54.024383][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.262464][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.508315][ T4686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.107'. [ 54.534418][ T4687] Zero length message leads to an empty skb [ 54.536962][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.539607][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.542339][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.542919][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.757681][ T4698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.115'. [ 54.760894][ T4698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.115'. [ 54.877226][ T4704] misc userio: Invalid payload size [ 55.963265][ T4345] atkbd serio0: keyboard reset failed on [ 56.151247][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 56.154961][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.157108][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.160511][ T4720] device bridge_slave_0 left promiscuous mode [ 56.162858][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.203955][ T4720] device bridge_slave_1 left promiscuous mode [ 56.205911][ T4720] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.254646][ T4720] bond0: (slave bond_slave_0): Releasing backup interface [ 56.306373][ T4720] bond0: (slave bond_slave_1): Releasing backup interface [ 56.384412][ T4720] team0: Port device team_slave_0 removed [ 56.404450][ T4720] team0: Port device team_slave_1 removed [ 56.411203][ T4720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.416888][ T4720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.423409][ T4720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.427740][ T4720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.449104][ T4720] bond0: (slave wlan1): Releasing backup interface [ 56.463981][ T4696] loop0: detected capacity change from 0 to 131072 [ 56.467134][ T4696] F2FS-fs (loop0): Test dummy encryption mode enabled [ 56.472227][ T4696] F2FS-fs (loop0): Found nat_bits in checkpoint [ 56.490902][ T4696] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 56.741626][ T4737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.129'. [ 56.752008][ T4737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.129'. [ 56.884999][ T4747] netlink: 44 bytes leftover after parsing attributes in process `syz.2.134'. [ 56.940118][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 56.956906][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.958964][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.062009][ T4759] misc userio: Invalid payload size [ 58.109205][ T4776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'. [ 58.112593][ T7] atkbd serio1: keyboard reset failed on [ 58.122906][ T4776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'. [ 58.289852][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 58.300338][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.310657][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.316416][ T4785] device bridge_slave_0 left promiscuous mode [ 58.320296][ T4785] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.373798][ T4785] device bridge_slave_1 left promiscuous mode [ 58.375568][ T4785] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.415694][ T4785] bond0: (slave bond_slave_0): Releasing backup interface [ 58.434788][ T4790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.456843][ T4785] bond0: (slave bond_slave_1): Releasing backup interface [ 58.497891][ T4792] __nla_validate_parse: 1 callbacks suppressed [ 58.497903][ T4792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.152'. [ 58.533126][ T4785] team0: Port device team_slave_0 removed [ 58.552566][ T4785] team0: Port device team_slave_1 removed [ 58.554821][ T4785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.556999][ T4785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.560278][ T4785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.567753][ T4785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.578208][ T4785] bond0: (slave wlan1): Releasing backup interface [ 58.669502][ T4790] netlink: 'syz.2.152': attribute type 10 has an invalid length. [ 58.743073][ T4346] net_ratelimit: 30 callbacks suppressed [ 58.743086][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.860171][ T4805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.893087][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.860984][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.866948][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.870908][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.877315][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.879745][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.882090][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.921294][ T4815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'. [ 59.933233][ T4815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'. [ 60.019065][ T4821] netlink: 44 bytes leftover after parsing attributes in process `syz.4.163'. [ 60.114185][ T4823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 60.124246][ T4823] netlink: 'syz.0.164': attribute type 10 has an invalid length. [ 60.151142][ T4829] misc userio: Invalid payload size [ 60.159822][ T4823] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 60.167028][ T4823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'. [ 60.206719][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.390403][ T4845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'. [ 60.394967][ T4845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'. [ 60.442926][ T4849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.185801][ T4849] netlink: 'syz.2.176': attribute type 10 has an invalid length. [ 61.198739][ T4849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.176'. [ 61.222561][ T7] atkbd serio2: keyboard reset failed on [ 61.282461][ T4856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.299600][ T4856] netlink: 'syz.4.178': attribute type 10 has an invalid length. [ 61.302237][ T4856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.178'. [ 61.324241][ T4856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.077856][ T4874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.186'. [ 62.112795][ T4876] fuse: Unknown parameter 'user_i00000000000000000000' [ 62.282612][ T4880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.316943][ T4880] netlink: 'syz.4.188': attribute type 10 has an invalid length. [ 63.217377][ T4889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.253602][ T4889] netlink: 'syz.3.192': attribute type 10 has an invalid length. [ 63.269081][ T4889] bond0: (slave wlan1): Opening slave failed [ 63.283356][ T4887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.288346][ T4887] netlink: 'syz.2.191': attribute type 10 has an invalid length. [ 63.308029][ T4860] loop1: detected capacity change from 0 to 131072 [ 63.326981][ T4889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.331294][ T4860] F2FS-fs (loop1): Test dummy encryption mode enabled [ 63.384501][ T4860] F2FS-fs (loop1): Found nat_bits in checkpoint [ 63.428138][ T4860] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 63.644550][ T4893] loop4: detected capacity change from 0 to 32768 [ 63.697118][ T4893] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 63.813645][ T4901] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 63.862588][ T4348] net_ratelimit: 19 callbacks suppressed [ 63.862602][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.862734][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.864431][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.939759][ T4904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.059902][ T4909] fuse: Unknown parameter 'user_i00000000000000000000' [ 64.182789][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.185192][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.187459][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.245028][ T4920] __nla_validate_parse: 4 callbacks suppressed [ 64.245042][ T4920] netlink: 36 bytes leftover after parsing attributes in process `syz.3.202'. [ 64.269552][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.272310][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.426190][ T4851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.488429][ T4893] overlayfs: upper fs does not support tmpfile. [ 64.490835][ T4893] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 64.502989][ T4893] overlayfs: upper fs missing required features. [ 64.505371][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.507258][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.585547][ T4916] loop1: detected capacity change from 0 to 32768 [ 64.590645][ T4916] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.203 (4916) [ 64.601118][ T4306] ocfs2: Unmounting device (7,4) on (node local) [ 64.642101][ T4916] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 64.650308][ T4916] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 64.665482][ T4916] BTRFS info (device loop1): doing ref verification [ 64.667334][ T4916] BTRFS info (device loop1): use zlib compression, level 3 [ 64.669192][ T4916] BTRFS info (device loop1): using free space tree [ 64.825015][ T4947] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 64.889750][ T4920] loop3: detected capacity change from 0 to 32768 [ 64.895620][ T4916] BTRFS info (device loop1): enabling ssd optimizations [ 64.902713][ T4920] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.202 (4920) [ 64.910860][ T4920] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 64.916974][ T4920] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 64.919365][ T4920] BTRFS info (device loop3): using free space tree [ 64.940194][ T27] audit: type=1326 audit(64.910:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.1.203" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d5b728 code=0x0 [ 64.955399][ T4955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.960789][ T4955] netlink: 'syz.2.211': attribute type 10 has an invalid length. [ 64.964516][ T4955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.211'. [ 64.976004][ T4958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.983337][ T4958] netlink: 'syz.4.212': attribute type 10 has an invalid length. [ 64.987366][ T4958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.212'. [ 64.990155][ T4955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.009653][ T4920] BTRFS info (device loop3): enabling ssd optimizations [ 65.129991][ T4975] BTRFS info (device loop1): balance: start -s [ 65.138053][ T4975] BTRFS info (device loop1): relocating block group 1048576 flags system [ 65.169651][ T4975] BTRFS info (device loop1): balance: ended with status: 0 [ 65.311930][ T4296] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 65.320437][ T4979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.329806][ T4979] netlink: 'syz.0.213': attribute type 10 has an invalid length. [ 65.381711][ T4982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.213'. [ 65.487764][ T4984] fuse: Unknown parameter 'user_i00000000000000000000' [ 65.615907][ T4988] netlink: 'syz.4.217': attribute type 72 has an invalid length. [ 65.618240][ T4988] netlink: 36 bytes leftover after parsing attributes in process `syz.4.217'. [ 65.818865][ T5001] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 66.010858][ T5008] fuse: Unknown parameter 'user_id00000000000000000000' [ 66.177518][ T5011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.188832][ T5011] netlink: 'syz.0.226': attribute type 10 has an invalid length. [ 66.196143][ T5011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.226'. [ 66.217372][ T5011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.290047][ T5003] loop2: detected capacity change from 0 to 32768 [ 66.352179][ T5003] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 66.824825][ T5003] overlayfs: upper fs does not support tmpfile. [ 66.831491][ T5003] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 66.841426][ T5003] overlayfs: upper fs missing required features. [ 66.865707][ T5015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.871983][ T5015] netlink: 'syz.0.227': attribute type 10 has an invalid length. [ 66.875053][ T5015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.227'. [ 66.947793][ T4307] ocfs2: Unmounting device (7,2) on (node local) [ 67.054240][ T5023] netlink: 36 bytes leftover after parsing attributes in process `syz.2.230'. [ 68.080814][ T4297] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 68.085533][ T5037] fuse: Unknown parameter 'user_id00000000000000000000' [ 68.151178][ T5041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.204241][ T5046] netlink: 36 bytes leftover after parsing attributes in process `syz.0.241'. [ 68.205552][ T5041] netlink: 'syz.4.238': attribute type 10 has an invalid length. [ 68.232819][ T5041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.238'. [ 68.243566][ T5041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.902783][ T4346] net_ratelimit: 29 callbacks suppressed [ 68.902797][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.981348][ T5068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.989345][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.998333][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.002743][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.111346][ T5074] fuse: Unknown parameter 'user_id00000000000000000000' [ 69.435732][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.438135][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.440431][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.624599][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.239640][ T1518] cfg80211: failed to load regulatory.db [ 70.242372][ T5044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.460076][ T5102] netlink: 'syz.0.261': attribute type 4 has an invalid length. [ 70.461360][ T5100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.546981][ T5100] netlink: 'syz.1.262': attribute type 10 has an invalid length. [ 70.550761][ T5100] bond0: (slave wlan1): Opening slave failed [ 70.559000][ T5110] __nla_validate_parse: 1 callbacks suppressed [ 70.559012][ T5110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.262'. [ 70.612321][ T5106] netlink: 'syz.0.261': attribute type 4 has an invalid length. [ 70.698796][ T5113] fuse: Bad value for 'fd' [ 73.535865][ T5141] fuse: Bad value for 'fd' [ 73.558426][ T5109] loop4: detected capacity change from 0 to 131072 [ 73.567533][ T5109] F2FS-fs (loop4): Test dummy encryption mode enabled [ 73.571452][ T5109] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 73.698179][ T5149] netlink: 44 bytes leftover after parsing attributes in process `syz.2.282'. [ 73.709131][ T5149] netlink: 44 bytes leftover after parsing attributes in process `syz.2.282'. [ 73.712568][ T5150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.733035][ T5150] netlink: 'syz.1.281': attribute type 10 has an invalid length. [ 73.736726][ T5150] bond0: (slave wlan1): Opening slave failed [ 73.745332][ T5150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.281'. [ 73.908366][ T5120] loop3: detected capacity change from 0 to 131072 [ 73.970865][ T4345] net_ratelimit: 26 callbacks suppressed [ 73.970878][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.102671][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.759334][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.761903][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.856289][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.862746][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.865033][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.922577][ T5165] netlink: 'syz.3.285': attribute type 4 has an invalid length. [ 75.166031][ T5175] netlink: 'syz.3.285': attribute type 4 has an invalid length. [ 75.386252][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.703193][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.853038][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.220091][ T5196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.225238][ T5196] netlink: 'syz.0.297': attribute type 10 has an invalid length. [ 76.227674][ T5196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.297'. [ 77.164104][ T5202] device syzkaller0 entered promiscuous mode [ 78.414028][ T5223] netlink: 36 bytes leftover after parsing attributes in process `syz.0.308'. [ 79.954834][ T5228] sched: RT throttling activated [ 80.505423][ T4347] net_ratelimit: 17 callbacks suppressed [ 80.505438][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.548855][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.603071][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.605865][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.608269][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.610646][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.613893][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.637847][ T5234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.674073][ T5234] netlink: 'syz.3.311': attribute type 10 has an invalid length. [ 80.680438][ T5234] bond0: (slave wlan1): Opening slave failed [ 80.697750][ T5242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.719086][ T5242] netlink: 'syz.1.315': attribute type 10 has an invalid length. [ 80.798624][ T5242] bond0: (slave wlan1): Opening slave failed [ 80.872928][ T5242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.315'. [ 81.627649][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.629980][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.632235][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.028490][ T5248] loop2: detected capacity change from 0 to 32768 [ 82.052952][ T5248] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.319 (5248) [ 82.065267][ T5262] netlink: 36 bytes leftover after parsing attributes in process `syz.1.323'. [ 82.938470][ T5248] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 82.941320][ T5248] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 82.943779][ T5248] BTRFS info (device loop2): enabling disk space caching [ 82.945645][ T5248] BTRFS info (device loop2): enabling auto defrag [ 82.947369][ T5248] BTRFS info (device loop2): doing ref verification [ 82.949257][ T5248] BTRFS info (device loop2): use no compression [ 82.951010][ T5248] BTRFS info (device loop2): force clearing of disk cache [ 82.955132][ T5248] BTRFS info (device loop2): disabling disk space caching [ 82.957103][ T5248] BTRFS info (device loop2): enabling disk space caching [ 82.959006][ T5248] BTRFS info (device loop2): disk space caching is enabled [ 83.009920][ T5268] netlink: 'syz.0.321': attribute type 4 has an invalid length. [ 83.164995][ T5269] netlink: 'syz.0.321': attribute type 4 has an invalid length. [ 83.399543][ T5248] BTRFS info (device loop2): enabling ssd optimizations [ 83.406147][ T5248] BTRFS info (device loop2): rebuilding free space tree [ 83.465324][ T5248] BTRFS info (device loop2): disabling free space tree [ 83.467314][ T5248] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 83.470143][ T5248] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 83.582799][ T4307] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 83.851613][ T5262] loop1: detected capacity change from 0 to 32768 [ 83.892701][ T5262] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.323 (5262) [ 83.998250][ T5262] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 84.001200][ T5262] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 84.018518][ T5262] BTRFS info (device loop1): using free space tree [ 84.899509][ T5262] BTRFS error (device loop1): open_ctree failed: -12 [ 84.986682][ T4288] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4288) [ 84.992464][ T5333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.003669][ T5333] netlink: 'syz.3.333': attribute type 10 has an invalid length. [ 85.009731][ T5333] bond0: (slave wlan1): Opening slave failed [ 86.300232][ T5327] net_ratelimit: 40 callbacks suppressed [ 86.300246][ T5327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.304246][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.306581][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.308922][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.542999][ T5343] loop0: detected capacity change from 0 to 32768 [ 86.662668][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.664981][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.695112][ T5343] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 87.384344][ T5044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.386831][ T5044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.472572][ T5327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.474960][ T5327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.841257][ T5366] netlink: 'syz.3.345': attribute type 4 has an invalid length. [ 87.885969][ T5366] netlink: 'syz.3.345': attribute type 4 has an invalid length. [ 88.074990][ T4302] ocfs2: Unmounting device (7,0) on (node local) [ 88.232524][ T5372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.249489][ T5372] netlink: 'syz.1.349': attribute type 10 has an invalid length. [ 88.277517][ T5372] bond0: (slave wlan1): Opening slave failed [ 88.466211][ T5379] netlink: 36 bytes leftover after parsing attributes in process `syz.0.346'. [ 88.987665][ T5379] loop0: detected capacity change from 0 to 32768 [ 89.007455][ T5379] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 89.010400][ T5379] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 89.017251][ T5379] BTRFS info (device loop0): using free space tree [ 89.198390][ T5379] BTRFS info (device loop0): enabling ssd optimizations [ 89.346019][ T5364] loop2: detected capacity change from 0 to 131072 [ 89.362783][ T5364] F2FS-fs (loop2): invalid crc value [ 90.072439][ T5364] F2FS-fs (loop2): Found nat_bits in checkpoint [ 91.084938][ T5428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.090056][ T5428] netlink: 'syz.4.362': attribute type 10 has an invalid length. [ 91.102687][ T5428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.362'. [ 91.350554][ T5425] loop3: detected capacity change from 0 to 32768 [ 91.405299][ T5425] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 91.450921][ T5425] overlayfs: upper fs does not support tmpfile. [ 91.461486][ T5425] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 91.470897][ T5425] overlayfs: upper fs missing required features. [ 91.529082][ T4297] ocfs2: Unmounting device (7,3) on (node local) [ 91.792708][ T5044] net_ratelimit: 192 callbacks suppressed [ 91.792721][ T5044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.796592][ T5044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.910527][ T5379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.934440][ T4302] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 91.947711][ T5441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.967013][ T5441] netlink: 'syz.3.367': attribute type 10 has an invalid length. [ 91.970730][ T5441] bond0: (slave wlan1): Opening slave failed [ 91.990860][ T5441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.367'. [ 92.010399][ T5441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.031164][ T5439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.039326][ T5439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.041706][ T5439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.087613][ T5439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.090098][ T5439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.117109][ T5439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.119453][ T5439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.202704][ T5418] loop2: detected capacity change from 0 to 131072 [ 92.213747][ T5446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.217230][ T5418] F2FS-fs (loop2): Test dummy encryption mode enabled [ 92.230960][ T5446] netlink: 'syz.0.368': attribute type 10 has an invalid length. [ 92.240033][ T5446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.368'. [ 92.262542][ T5418] F2FS-fs (loop2): Found nat_bits in checkpoint [ 92.277670][ T5418] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 92.737108][ T5461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.761390][ T5461] netlink: 'syz.3.374': attribute type 10 has an invalid length. [ 92.777450][ T5461] bond0: (slave wlan1): Opening slave failed [ 92.795020][ T5461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.374'. [ 93.339683][ T5465] loop4: detected capacity change from 0 to 32768 [ 93.432133][ T5465] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 93.470449][ T5465] overlayfs: upper fs does not support tmpfile. [ 93.487375][ T5487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.492107][ T5465] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 93.496659][ T5487] netlink: 'syz.3.385': attribute type 10 has an invalid length. [ 93.499536][ T5465] overlayfs: upper fs missing required features. [ 93.516022][ T5487] bond0: (slave wlan1): Opening slave failed [ 93.534245][ T5487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.385'. [ 93.561379][ T5487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.588460][ T4306] ocfs2: Unmounting device (7,4) on (node local) [ 93.821426][ T5494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.832202][ T5494] netlink: 'syz.4.387': attribute type 10 has an invalid length. [ 93.835365][ T5494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.387'. [ 94.317454][ T5507] loop3: detected capacity change from 0 to 2048 [ 94.469897][ T5507] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 94.478022][ T5519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.512135][ T5519] netlink: 'syz.2.396': attribute type 10 has an invalid length. [ 94.517611][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 94.539757][ T5519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.396'. [ 94.741913][ T5530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.798438][ T5525] netlink: 'syz.4.400': attribute type 10 has an invalid length. [ 94.807903][ T5525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.400'. [ 94.845146][ T5525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.017417][ T5524] loop0: detected capacity change from 0 to 32768 [ 95.070596][ T5524] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 95.111587][ T5524] overlayfs: upper fs does not support tmpfile. [ 95.125249][ T5524] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 95.142979][ T5524] overlayfs: upper fs missing required features. [ 95.246775][ T4302] ocfs2: Unmounting device (7,0) on (node local) [ 95.492056][ T5549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.501105][ T5549] netlink: 'syz.0.407': attribute type 10 has an invalid length. [ 95.506305][ T5549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.407'. [ 95.825333][ T5553] loop4: detected capacity change from 0 to 32768 [ 95.881852][ T5553] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 95.934537][ T4306] ocfs2: Unmounting device (7,4) on (node local) [ 96.178751][ T5565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.218271][ T5565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.414'. [ 96.832407][ T5587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.841551][ T5587] netlink: 'syz.2.423': attribute type 10 has an invalid length. [ 96.845029][ T5587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.423'. [ 97.091242][ T5044] net_ratelimit: 61 callbacks suppressed [ 97.091257][ T5044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.095429][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.099404][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.244573][ T5598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.472637][ T5608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.541136][ T5612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.552044][ T5612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.560306][ T5612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.771870][ T5605] loop3: detected capacity change from 0 to 32768 [ 97.777680][ T5605] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.430 (5605) [ 97.784523][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.784734][ T5044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.801868][ T5616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.808143][ T5605] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 97.810966][ T5605] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 97.816197][ T5616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.435'. [ 97.818737][ T5605] BTRFS info (device loop3): turning on sync discard [ 97.820543][ T5605] BTRFS info (device loop3): enabling auto defrag [ 97.822228][ T5605] BTRFS info (device loop3): use no compression [ 97.824422][ T5605] BTRFS info (device loop3): force clearing of disk cache [ 97.826328][ T5605] BTRFS info (device loop3): enabling disk space caching [ 97.831210][ T5605] BTRFS info (device loop3): disabling disk space caching [ 98.317561][ T5044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.319973][ T5044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.353004][ T5605] BTRFS info (device loop3): enabling ssd optimizations [ 98.363702][ T5605] BTRFS info (device loop3): rebuilding free space tree [ 98.372159][ T5605] BTRFS info (device loop3): disabling free space tree [ 98.379596][ T5605] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 98.382216][ T5605] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 98.432457][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.505652][ T5641] capability: warning: `syz.3.430' uses deprecated v2 capabilities in a way that may be insecure [ 98.636682][ T5605] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 98.687762][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.711720][ T4297] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 98.833094][ T5652] [ 98.833860][ T5652] ====================================================== [ 98.835759][ T5652] WARNING: possible circular locking dependency detected [ 98.837576][ T5652] 6.1.135-syzkaller #0 Not tainted [ 98.838976][ T5652] ------------------------------------------------------ [ 98.840862][ T5652] syz.2.442/5652 is trying to acquire lock: [ 98.842430][ T5652] ffff80001781c858 (nr_node_list_lock){+...}-{2:2}, at: nr_rt_device_down+0xb4/0x660 [ 98.844931][ T5652] [ 98.844931][ T5652] but task is already holding lock: [ 98.846927][ T5652] ffff80001781c7f8 (nr_neigh_list_lock){+...}-{2:2}, at: nr_rt_device_down+0x38/0x660 [ 98.849538][ T5652] [ 98.849538][ T5652] which lock already depends on the new lock. [ 98.849538][ T5652] [ 98.852530][ T5652] [ 98.852530][ T5652] the existing dependency chain (in reverse order) is: [ 98.854999][ T5652] [ 98.854999][ T5652] -> #2 (nr_neigh_list_lock){+...}-{2:2}: [ 98.857221][ T5652] _raw_spin_lock_bh+0x54/0x6c [ 98.858672][ T5652] nr_del_node+0x35c/0x878 [ 98.860013][ T5652] nr_rt_ioctl+0x820/0xb80 [ 98.861373][ T5652] nr_ioctl+0x1c4/0x4e4 [ 98.862691][ T5652] sock_do_ioctl+0xf8/0x240 [ 98.864048][ T5652] sock_ioctl+0x5c4/0x840 [ 98.865385][ T5652] __arm64_sys_ioctl+0x14c/0x1c8 [ 98.866881][ T5652] invoke_syscall+0x98/0x2bc [ 98.868273][ T5652] el0_svc_common+0x138/0x258 [ 98.869747][ T5652] do_el0_svc+0x58/0x13c [ 98.871114][ T5652] el0_svc+0x58/0x138 [ 98.872356][ T5652] el0t_64_sync_handler+0x84/0xf0 [ 98.873872][ T5652] el0t_64_sync+0x18c/0x190 [ 98.875221][ T5652] [ 98.875221][ T5652] -> #1 (&nr_node->node_lock){+...}-{2:2}: [ 98.877488][ T5652] _raw_spin_lock_bh+0x54/0x6c [ 98.878937][ T5652] nr_del_node+0xbc/0x878 [ 98.880269][ T5652] nr_rt_ioctl+0x820/0xb80 [ 98.881611][ T5652] nr_ioctl+0x1c4/0x4e4 [ 98.882890][ T5652] sock_do_ioctl+0xf8/0x240 [ 98.884262][ T5652] sock_ioctl+0x5c4/0x840 [ 98.885610][ T5652] __arm64_sys_ioctl+0x14c/0x1c8 [ 98.887278][ T5652] invoke_syscall+0x98/0x2bc [ 98.888727][ T5652] el0_svc_common+0x138/0x258 [ 98.890182][ T5652] do_el0_svc+0x58/0x13c [ 98.891537][ T5652] el0_svc+0x58/0x138 [ 98.892806][ T5652] el0t_64_sync_handler+0x84/0xf0 [ 98.894369][ T5652] el0t_64_sync+0x18c/0x190 [ 98.895805][ T5652] [ 98.895805][ T5652] -> #0 (nr_node_list_lock){+...}-{2:2}: [ 98.897966][ T5652] __lock_acquire+0x293c/0x6544 [ 98.899452][ T5652] lock_acquire+0x20c/0x644 [ 98.900866][ T5652] _raw_spin_lock_bh+0x54/0x6c [ 98.902292][ T5652] nr_rt_device_down+0xb4/0x660 [ 98.903767][ T5652] nr_device_event+0x138/0x164 [ 98.905268][ T5652] raw_notifier_call_chain+0xd4/0x164 [ 98.907021][ T5652] __dev_notify_flags+0x250/0x46c [ 98.908597][ T5652] dev_change_flags+0xc8/0x154 [ 98.910081][ T5652] dev_ifsioc+0x524/0xed0 [ 98.911468][ T5652] dev_ioctl+0x4c8/0xc8c [ 98.912837][ T5652] sock_do_ioctl+0x18c/0x240 [ 98.914286][ T5652] sock_ioctl+0x5c4/0x840 [ 98.915683][ T5652] __arm64_sys_ioctl+0x14c/0x1c8 [ 98.917256][ T5652] invoke_syscall+0x98/0x2bc [ 98.918705][ T5652] el0_svc_common+0x138/0x258 [ 98.920147][ T5652] do_el0_svc+0x58/0x13c [ 98.921482][ T5652] el0_svc+0x58/0x138 [ 98.922753][ T5652] el0t_64_sync_handler+0x84/0xf0 [ 98.924348][ T5652] el0t_64_sync+0x18c/0x190 [ 98.925788][ T5652] [ 98.925788][ T5652] other info that might help us debug this: [ 98.925788][ T5652] [ 98.928592][ T5652] Chain exists of: [ 98.928592][ T5652] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 98.928592][ T5652] [ 98.932396][ T5652] Possible unsafe locking scenario: [ 98.932396][ T5652] [ 98.934430][ T5652] CPU0 CPU1 [ 98.935918][ T5652] ---- ---- [ 98.937342][ T5652] lock(nr_neigh_list_lock); [ 98.938676][ T5652] lock(&nr_node->node_lock); [ 98.940840][ T5652] lock(nr_neigh_list_lock); [ 98.942821][ T5652] lock(nr_node_list_lock); [ 98.944104][ T5652] [ 98.944104][ T5652] *** DEADLOCK *** [ 98.944104][ T5652] [ 98.946359][ T5652] 2 locks held by syz.2.442/5652: [ 98.947822][ T5652] #0: ffff8000176d7748 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 98.950300][ T5652] #1: ffff80001781c7f8 (nr_neigh_list_lock){+...}-{2:2}, at: nr_rt_device_down+0x38/0x660 [ 98.953104][ T5652] [ 98.953104][ T5652] stack backtrace: [ 98.954797][ T5652] CPU: 0 PID: 5652 Comm: syz.2.442 Not tainted 6.1.135-syzkaller #0 [ 98.957064][ T5652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 98.959881][ T5652] Call trace: [ 98.960839][ T5652] dump_backtrace+0x1c8/0x1f4 [ 98.962156][ T5652] show_stack+0x2c/0x3c [ 98.963338][ T5652] __dump_stack+0x30/0x40 [ 98.964567][ T5652] dump_stack_lvl+0xf8/0x160 [ 98.965840][ T5652] dump_stack+0x1c/0x5c [ 98.966991][ T5652] print_circular_bug+0x148/0x1b0 [ 98.968402][ T5652] check_noncircular+0x240/0x2d4 [ 98.969815][ T5652] __lock_acquire+0x293c/0x6544 [ 98.971179][ T5652] lock_acquire+0x20c/0x644 [ 98.972399][ T5652] _raw_spin_lock_bh+0x54/0x6c [ 98.973730][ T5652] nr_rt_device_down+0xb4/0x660 [ 98.975079][ T5652] nr_device_event+0x138/0x164 [ 98.976403][ T5652] raw_notifier_call_chain+0xd4/0x164 [ 98.977869][ T5652] __dev_notify_flags+0x250/0x46c [ 98.979220][ T5652] dev_change_flags+0xc8/0x154 [ 98.980500][ T5652] dev_ifsioc+0x524/0xed0 [ 98.981671][ T5652] dev_ioctl+0x4c8/0xc8c [ 98.982798][ T5652] sock_do_ioctl+0x18c/0x240 [ 98.984063][ T5652] sock_ioctl+0x5c4/0x840 [ 98.985260][ T5652] __arm64_sys_ioctl+0x14c/0x1c8 [ 98.986633][ T5652] invoke_syscall+0x98/0x2bc [ 98.987906][ T5652] el0_svc_common+0x138/0x258 [ 98.989170][ T5652] do_el0_svc+0x58/0x13c [ 98.990304][ T5652] el0_svc+0x58/0x138 [ 98.991349][ T5652] el0t_64_sync_handler+0x84/0xf0 [ 98.992733][ T5652] el0t_64_sync+0x18c/0x190 [ 99.014334][ T5654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.024959][ T5652] ================================================================== [ 99.027108][ T5652] BUG: KASAN: use-after-free in rose_get_neigh+0x17c/0x480 [ 99.029099][ T5652] Read of size 1 at addr ffff0000f2bb7830 by task syz.2.442/5652 [ 99.031126][ T5652] [ 99.031771][ T5652] CPU: 1 PID: 5652 Comm: syz.2.442 Not tainted 6.1.135-syzkaller #0 [ 99.033971][ T5652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 99.036769][ T5652] Call trace: [ 99.037684][ T5652] dump_backtrace+0x1c8/0x1f4 [ 99.038979][ T5652] show_stack+0x2c/0x3c [ 99.040086][ T5652] __dump_stack+0x30/0x40 [ 99.041262][ T5652] dump_stack_lvl+0xf8/0x160 [ 99.042446][ T5652] print_address_description+0x88/0x220 [ 99.043986][ T5652] print_report+0x50/0x68 [ 99.045127][ T5652] kasan_report+0xa8/0x100 [ 99.046304][ T5652] __asan_report_load1_noabort+0x2c/0x38 [ 99.047842][ T5652] rose_get_neigh+0x17c/0x480 [ 99.049124][ T5652] rose_connect+0x364/0xfe8 [ 99.050339][ T5652] __sys_connect+0x264/0x28c [ 99.051535][ T5652] __arm64_sys_connect+0x7c/0x94 [ 99.052919][ T5652] invoke_syscall+0x98/0x2bc [ 99.054116][ T5652] el0_svc_common+0x138/0x258 [ 99.055333][ T5652] do_el0_svc+0x58/0x13c [ 99.056448][ T5652] el0_svc+0x58/0x138 [ 99.057502][ T5652] el0t_64_sync_handler+0x84/0xf0 [ 99.058851][ T5652] el0t_64_sync+0x18c/0x190 [ 99.060071][ T5652] [ 99.060669][ T5652] Allocated by task 4537: [ 99.061827][ T5652] kasan_set_track+0x4c/0x80 [ 99.063072][ T5652] kasan_save_alloc_info+0x28/0x34 [ 99.064453][ T5652] __kasan_kmalloc+0xa0/0xb8 [ 99.065903][ T5652] kmalloc_trace+0x7c/0x94 [ 99.066993][ T5652] rose_add_node+0x1f4/0xba4 [ 99.068334][ T5652] rose_rt_ioctl+0xa04/0xde4 [ 99.069550][ T5652] rose_ioctl+0x378/0xb80 [ 99.070771][ T5652] sock_do_ioctl+0xf8/0x240 [ 99.071988][ T5652] sock_ioctl+0x5c4/0x840 [ 99.073209][ T5652] __arm64_sys_ioctl+0x14c/0x1c8 [ 99.074518][ T5652] invoke_syscall+0x98/0x2bc [ 99.075759][ T5652] el0_svc_common+0x138/0x258 [ 99.076959][ T5652] do_el0_svc+0x58/0x13c [ 99.078150][ T5652] el0_svc+0x58/0x138 [ 99.079206][ T5652] el0t_64_sync_handler+0x84/0xf0 [ 99.080599][ T5652] el0t_64_sync+0x18c/0x190 [ 99.082082][ T5652] [ 99.082690][ T5652] Freed by task 5652: [ 99.083843][ T5652] kasan_set_track+0x4c/0x80 [ 99.085068][ T5652] kasan_save_free_info+0x3c/0x60 [ 99.086409][ T5652] ____kasan_slab_free+0x148/0x1b0 [ 99.087794][ T5652] __kasan_slab_free+0x18/0x28 [ 99.089057][ T5652] slab_free_freelist_hook+0x16c/0x1ec [ 99.090509][ T5652] __kmem_cache_free+0xc0/0x224 [ 99.091824][ T5652] kfree+0xd0/0x1ac [ 99.092841][ T5652] rose_remove_neigh+0x23c/0x2b8 [ 99.094158][ T5652] rose_rt_device_down+0x33c/0x394 [ 99.095565][ T5652] rose_device_event+0x5d8/0x68c [ 99.096883][ T5652] raw_notifier_call_chain+0xd4/0x164 [ 99.098307][ T5652] __dev_notify_flags+0x250/0x46c [ 99.099653][ T5652] dev_change_flags+0xc8/0x154 [ 99.100911][ T5652] dev_ifsioc+0x524/0xed0 [ 99.102030][ T5652] dev_ioctl+0x4c8/0xc8c [ 99.103156][ T5652] sock_do_ioctl+0x18c/0x240 [ 99.104360][ T5652] sock_ioctl+0x5c4/0x840 [ 99.105535][ T5652] __arm64_sys_ioctl+0x14c/0x1c8 [ 99.106854][ T5652] invoke_syscall+0x98/0x2bc [ 99.108099][ T5652] el0_svc_common+0x138/0x258 [ 99.109294][ T5652] do_el0_svc+0x58/0x13c [ 99.110462][ T5652] el0_svc+0x58/0x138 [ 99.111516][ T5652] el0t_64_sync_handler+0x84/0xf0 [ 99.112908][ T5652] el0t_64_sync+0x18c/0x190 [ 99.114105][ T5652] [ 99.114712][ T5652] The buggy address belongs to the object at ffff0000f2bb7800 [ 99.114712][ T5652] which belongs to the cache kmalloc-512 of size 512 [ 99.118423][ T5652] The buggy address is located 48 bytes inside of [ 99.118423][ T5652] 512-byte region [ffff0000f2bb7800, ffff0000f2bb7a00) [ 99.121982][ T5652] [ 99.122598][ T5652] The buggy address belongs to the physical page: [ 99.124306][ T5652] page:000000000e21532c refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000f2bb6000 pfn:0x132bb4 [ 99.127433][ T5652] head:000000000e21532c order:2 compound_mapcount:0 compound_pincount:0 [ 99.129789][ T5652] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 99.132017][ T5652] raw: 05ffc00000010200 fffffc0003c48108 fffffc0003c4d408 ffff0000c0002600 [ 99.132557][ T5655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.443'. [ 99.134395][ T5652] raw: ffff0000f2bb6000 0000000000100004 00000001ffffffff 0000000000000000 [ 99.134404][ T5652] page dumped because: kasan: bad access detected [ 99.134408][ T5652] [ 99.134411][ T5652] Memory state around the buggy address: [ 99.134418][ T5652] ffff0000f2bb7700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 99.134425][ T5652] ffff0000f2bb7780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 99.147647][ T5652] >ffff0000f2bb7800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.149870][ T5652] ^ [ 99.151393][ T5652] ffff0000f2bb7880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.153599][ T5652] ffff0000f2bb7900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.155847][ T5652] ================================================================== [ 99.164157][ T5656] ------------[ cut here ]------------ [ 99.165682][ T5656] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: 0x0 [ 99.168515][ T5656] WARNING: CPU: 1 PID: 5656 at lib/debugobjects.c:518 debug_print_object+0x148/0x1d4 [ 99.168741][ T5654] netlink: 'syz.0.443': attribute type 10 has an invalid length. [ 99.171003][ T5656] Modules linked in: [ 99.171015][ T5656] CPU: 1 PID: 5656 Comm: syz.2.442 Tainted: G B 6.1.135-syzkaller #0 [ 99.171028][ T5656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 99.179525][ T5656] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 99.181768][ T5656] pc : debug_print_object+0x148/0x1d4 [ 99.183292][ T5656] lr : debug_print_object+0x148/0x1d4 [ 99.184745][ T5656] sp : ffff800020b777e0 [ 99.185901][ T5656] x29: ffff800020b777e0 x28: dfff800000000000 x27: 0000000000000002 [ 99.188081][ T5656] x26: ffff800015070000 x25: ffff8000083ad880 x24: dfff800000000000 [ 99.190223][ T5656] x23: 0000000000000000 x22: 0000000000000000 x21: ffff800011f69d00 [ 99.192505][ T5656] x20: ffff800011a9ad20 x19: ffff800011f69840 x18: ffff800011a7bd00 [ 99.194742][ T5656] x17: 203a657079742074 x16: ffff800008042940 x15: 0000000000000002 [ 99.196974][ T5656] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000080000 [ 99.199190][ T5656] x11: 0000000000001ce8 x10: ffff800026979000 x9 : 006dfcef39239f00 [ 99.201350][ T5656] x8 : 006dfcef39239f00 x7 : 0000000000000001 x6 : 0000000000000001 [ 99.203515][ T5656] x5 : ffff800020b77278 x4 : ffff800015154740 x3 : ffff80000852ded4 [ 99.205733][ T5656] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 99.207891][ T5656] Call trace: [ 99.208758][ T5656] debug_print_object+0x148/0x1d4 [ 99.210144][ T5656] debug_object_assert_init+0x250/0x2c8 [ 99.211676][ T5656] timer_delete+0x48/0x1e8 [ 99.212913][ T5656] rose_transmit_link+0x43c/0x66c [ 99.214300][ T5656] rose_write_internal+0xeec/0x17c0 [ 99.215840][ T5656] rose_connect+0x8bc/0xfe8 [ 99.217094][ T5656] __sys_connect+0x264/0x28c [ 99.218343][ T5656] __arm64_sys_connect+0x7c/0x94 [ 99.219760][ T5656] invoke_syscall+0x98/0x2bc [ 99.221132][ T5656] el0_svc_common+0x138/0x258 [ 99.222379][ T5656] do_el0_svc+0x58/0x13c [ 99.223546][ T5656] el0_svc+0x58/0x138 [ 99.224624][ T5656] el0t_64_sync_handler+0x84/0xf0 [ 99.225991][ T5656] el0t_64_sync+0x18c/0x190 [ 99.227253][ T5656] irq event stamp: 0 [ 99.228263][ T5656] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 99.230216][ T5656] hardirqs last disabled at (0): [] copy_process+0x1250/0x3710 [ 99.232630][ T5656] softirqs last enabled at (0): [] copy_process+0x1284/0x3710 [ 99.235310][ T5656] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 99.237323][ T5656] ---[ end trace 0000000000000000 ]--- [ 99.504150][ T5606] block nbd4: shutting down sockets [ 102.112507][ T4345] net_ratelimit: 16 callbacks suppressed [ 102.112541][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.263258][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.265876][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.502669][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.505127][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.822513][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.982511][ T4981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.542902][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.545189][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.022595][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.142526][ T22] net_ratelimit: 15 callbacks suppressed [ 107.142541][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.702557][ T4981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.705596][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.182457][ T4981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.182541][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.662470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.742591][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.745006][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog