last executing test programs: 2m31.551626318s ago: executing program 0 (id=1652): syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001"], 0x44}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000000000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2m8.394101152s ago: executing program 0 (id=1652): syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001"], 0x44}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000000000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1m40.464279841s ago: executing program 0 (id=1652): syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001"], 0x44}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000000000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1m40.372733683s ago: executing program 3 (id=2044): r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000340)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4888, r2, 0x3a}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000780)="76f1eb06aaad12aa171aaa6ef3d2", 0xe}], 0x1, 0x0, 0x0, 0x2f00}}, {{&(0x7f0000000140)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x208}}], 0x2, 0x58000) 1m39.556311355s ago: executing program 3 (id=2048): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = fanotify_init(0x10, 0x101000) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) fanotify_mark(r3, 0x41, 0x8000038, r4, 0x0) fanotify_mark(r3, 0x80, 0x0, r4, 0x0) r5 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x1001, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r5, 0x80045104, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x800008, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$packet(0x11, 0xa, 0x300) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x11880, &(0x7f0000fff000/0x1000)=nil, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000001914000000110001"], 0xd8}}, 0x80) 1m37.37327793s ago: executing program 3 (id=2061): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/33, 0x21}], 0x1, &(0x7f0000000500)=""/174, 0xae}}], 0x1, 0x40002002, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x2, {0x4e23}}, 0x10, &(0x7f0000000940)=[{&(0x7f00000004c0)="e8", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x4800) 1m36.880921868s ago: executing program 3 (id=2066): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x1008c, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1518, &(0x7f0000002280)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0xfffffffffffffffc}, {0xb6, 0x0, 0x0, 0x400000000000}, 0x4, 0x6e6bb1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2b}, 0x0, @in=@empty, 0x3506}}, 0xe8) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000005700), 0x40000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000380)={0x2, &(0x7f00000001c0)=[0x81, 0x6]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r7, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) 1m35.686334227s ago: executing program 3 (id=2072): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008045}, 0x4880) 1m34.575691084s ago: executing program 3 (id=2074): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x2b, 0x80801, 0x1) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000140)={0x6}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'ipvlan1\x00', @random}) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) unshare(0x62040200) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001f00)) sendmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="09000000050000000000", @ANYRES32=0x0], 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000004be2871bfd586c42bf061c0000000000000000000071"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x2c, 0x3, "5a9301f91e1587d3efa9bbb64810dfad88342196df9776e3e6e11ceaca0f092d18d367d02592c8f8"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x4048000) close(0x3) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000000)=""/50, 0x32, 0x40002021, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) 1m18.540458176s ago: executing program 32 (id=2074): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x2b, 0x80801, 0x1) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000140)={0x6}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'ipvlan1\x00', @random}) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) unshare(0x62040200) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001f00)) sendmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="09000000050000000000", @ANYRES32=0x0], 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000004be2871bfd586c42bf061c0000000000000000000071"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x2c, 0x3, "5a9301f91e1587d3efa9bbb64810dfad88342196df9776e3e6e11ceaca0f092d18d367d02592c8f8"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x4048000) close(0x3) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000000)=""/50, 0x32, 0x40002021, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) 1m1.871328398s ago: executing program 0 (id=1652): syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001"], 0x44}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000000000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 30.459735412s ago: executing program 0 (id=1652): syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001"], 0x44}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000000000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 7.563683091s ago: executing program 1 (id=2578): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000000180), 0x400000000000077, 0x700000000000000) 6.622705477s ago: executing program 1 (id=2571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) 6.585838997s ago: executing program 1 (id=2572): socket$inet6(0xa, 0x2, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x37e, &(0x7f0000000740)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0200", 0x348, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x7, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x19, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x5, 0x11, "3f14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e2eeb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05"}, {0x5, 0x1, "fc0fe85e8ee7"}]}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000100)) write$tun(r0, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x8}}}}}}}, 0x42) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 5.855476438s ago: executing program 5 (id=2576): socket(0x10, 0x80002, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) 5.520581654s ago: executing program 5 (id=2579): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82187201, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000240)=ANY=[@ANYBLOB="80000000080211000001080211020000080211000000000000e3ffffffffffff63822f07c13b1974f10001000006463e98b2076c7014e5fe056dea5957480202020202020108"], 0x36) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r6, @ANYRESDEC=r1, @ANYRES16=r5, @ANYRESHEX=r0], 0xfc}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r7], 0x44}}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8931, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x1, 0x84) 5.435026565s ago: executing program 1 (id=2580): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) 5.355947477s ago: executing program 1 (id=2581): syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'syz_tun\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 5.244597968s ago: executing program 1 (id=2582): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000000180), 0x400000000000077, 0x700000000000000) 5.003448732s ago: executing program 4 (id=2584): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0xa001, 0x1}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_restrict_self(r2, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) 4.648578908s ago: executing program 2 (id=2585): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x98699bd21b946cc3) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x20000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f0888e47", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.617832538s ago: executing program 0 (id=1652): syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001"], 0x44}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000000000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.777065277s ago: executing program 2 (id=2587): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, {0xc}, {0xb, 0xfff1}, {0x4, 0x10}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfe, 0x1, 0x200, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x4, 0x7fff, 0xf, 0x2, 0x4, 0x2}}, {0x4}}]}]}, 0x68}}, 0x0) 2.776035957s ago: executing program 5 (id=2588): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0x80) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close(r3) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=[@mark={{0x14, 0x1, 0x24, 0x8}}], 0x18}}, {{&(0x7f0000000f40)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f0000001180), 0x0, &(0x7f00000011c0)}}], 0x3, 0x20000001) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x48}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="100000002f14010000000000fedbdf25"], 0x10}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x1) setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}], 0x1, &(0x7f0000000300)=[@ip_retopts={{0x10}}], 0x10}, 0x24008004) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000040)={0x80000, 0x1, 0x9}, 0xc) 2.774986697s ago: executing program 4 (id=2589): socket$key(0xf, 0x3, 0x2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x1000000000000010, 0x80802, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xa9\x1fg\xf1\x85z{\x1d<\xe2\x1c7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xedn\x8c<5\xcf\x92;\x85)\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\x05\x831\xd3\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xf6\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xc6(\x19\xf8\xb4?Fv\xac\xc7m\xe1\xf68W\x19\x0f\x87\x84\xafK\x91v\xb5\xe7Cf\xe0L\b9\xe2\x15d~R4\xdf\xbb\xfeiH', 0x3) ftruncate(r4, 0xffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r5 = syz_io_uring_setup(0x24fd, &(0x7f00000004c0)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000540)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[@ANYRES64=r8], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.675654569s ago: executing program 2 (id=2590): socket$inet6(0xa, 0x2, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x37e, &(0x7f0000000740)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0200", 0x348, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x7, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x19, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x5, 0x11, "3f14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e2eeb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05"}, {0x5, 0x1, "fc0fe85e8ee7"}]}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x8}}}}}}}, 0x42) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 2.59377877s ago: executing program 5 (id=2591): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) 2.57937105s ago: executing program 4 (id=2592): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) 2.472431722s ago: executing program 5 (id=2593): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x1008c, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1518, &(0x7f0000002280)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0xfffffffffffffffc}, {0xb6, 0x0, 0x0, 0x400000000000}, 0x4, 0x6e6bb1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2b}, 0x0, @in=@empty, 0x3506}}, 0xe8) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000005700), 0x40000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000380)={0x2, &(0x7f00000001c0)=[0x81, 0x6]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r7) keyctl$search(0xa, r7, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) 2.396539803s ago: executing program 4 (id=2594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) 2.341267104s ago: executing program 4 (id=2595): socket$inet6(0xa, 0x2, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x30b, &(0x7f0000000740)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0200", 0x2d5, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x7, 0x1, "000000050000000026000400"}, {0x0, 0xb, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x19, 0x6, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a027440000000000"}, {0x5, 0x11, "3f14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e2eeb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05"}, {0x5, 0x1, "fc0fe85e8ee7"}]}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000100)) write$tun(r0, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x8}}}}}}}, 0x42) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 2.184721677s ago: executing program 2 (id=2596): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000000180), 0x400000000000077, 0x700000000000000) 1.071201204s ago: executing program 2 (id=2597): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x98699bd21b946cc3) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x20000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f0888e47", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 972.359076ms ago: executing program 4 (id=2598): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0xa001, 0x1}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_restrict_self(r2, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) 517.752172ms ago: executing program 2 (id=2599): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82187201, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000240)=ANY=[@ANYBLOB="80000000080211000001080211020000080211000000000000e3ffffffffffff63822f07c13b1974f10001000006463e98b2076c7014e5fe056dea5957480202020202020108"], 0x36) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r6, @ANYRESDEC=r1, @ANYRES16=r5, @ANYRESHEX=r0], 0xfc}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r7], 0x44}}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8931, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x1, 0x84) 0s ago: executing program 5 (id=2600): syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'syz_tun\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) kernel console output (not intermixed with test programs): us mode [ 612.897317][T10915] netlink: 'syz.3.1548': attribute type 25 has an invalid length. [ 613.069324][T10924] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1556'. [ 613.179238][T10920] xt_CT: No such helper "pptp" [ 613.364965][T10924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.404761][T10924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.434290][T10924] bond0 (unregistering): Released all slaves [ 614.264009][T10937] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 614.990117][T10941] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.998462][T10941] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.176095][T10941] device caif0 left promiscuous mode [ 615.713210][T10941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.763938][T10941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.892937][T10941] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.903897][T10941] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.913717][T10941] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.925277][T10941] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.326524][T10941] syz.2.1551 (10941) used greatest stack depth: 19392 bytes left [ 616.802046][T11066] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1584'. [ 616.916728][T11066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.938686][T11066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.958759][T11066] bond0 (unregistering): Released all slaves [ 617.084111][T11080] device syzkaller1 entered promiscuous mode [ 617.636667][T11110] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1603'. [ 617.675080][T11112] tipc: Started in network mode [ 617.702119][T11112] tipc: Node identity 262d5a389, cluster identity 4711 [ 617.719824][T11112] tipc: Enabled bearer , priority 0 [ 617.841005][T11117] device syzkaller0 entered promiscuous mode [ 617.882991][T11127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1609'. [ 617.972394][T11127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1609'. [ 618.031117][T11111] tipc: Resetting bearer [ 618.116661][T11111] tipc: Disabling bearer [ 618.401604][T11146] ksmbd: Unknown IPC event: 6, ignore. [ 618.537181][T11156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1620'. [ 618.598181][T11156] team0 (unregistering): Port device team_slave_0 removed [ 618.627980][T11156] team0 (unregistering): Port device team_slave_1 removed [ 618.847981][T11165] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 619.494937][T11188] netlink: set zone limit has 8 unknown bytes [ 620.072787][T11205] device bond0 entered promiscuous mode [ 620.078624][T11205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.256944][T11212] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 621.610392][ T4173] syz-executor (4173) used greatest stack depth: 18464 bytes left [ 621.898633][T11218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1642'. [ 623.643284][T11300] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.650599][T11300] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.924498][T11154] Set syz1 is full, maxelem 65536 reached [ 624.044645][T11332] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 624.333449][T11300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.352445][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.358771][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.422203][T11300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.620043][ T1324] Bluetooth: hci0: command 0x0409 tx timeout [ 624.898580][T11300] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.907767][T11300] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.917312][T11300] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.926506][T11300] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.170238][T11320] netlink: 'syz.2.1661': attribute type 4 has an invalid length. [ 625.540851][T11304] chnl_net:caif_netlink_parms(): no params data found [ 625.877318][ T4710] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.937178][T11304] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.969268][T11304] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.990054][T11304] device bridge_slave_0 entered promiscuous mode [ 625.998797][T11304] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.006148][T11304] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.037147][T11304] device bridge_slave_1 entered promiscuous mode [ 626.073855][ T4710] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.193590][T11304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.265352][ T4710] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.292433][T11304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.359035][ T4710] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.492498][T11304] team0: Port device team_slave_0 added [ 626.528024][T11304] team0: Port device team_slave_1 added [ 626.643315][T11304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.669690][T10101] Bluetooth: hci0: command 0x041b tx timeout [ 626.698131][T11304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.750610][T11304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.781670][T11304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.790521][T11304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.848312][T11304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.036639][T11304] device hsr_slave_0 entered promiscuous mode [ 627.083690][T11304] device hsr_slave_1 entered promiscuous mode [ 627.096909][T11304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 627.136302][T11304] Cannot create hsr debugfs directory [ 627.759060][T11424] device bridge_slave_1 left promiscuous mode [ 627.773073][T11424] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.801750][T11438] netlink: 'syz.3.1703': attribute type 29 has an invalid length. [ 627.844557][T11424] device bridge_slave_0 left promiscuous mode [ 627.852675][T11424] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.980651][T11438] netlink: 'syz.3.1703': attribute type 29 has an invalid length. [ 628.113370][T11440] netlink: 'syz.3.1703': attribute type 29 has an invalid length. [ 628.452281][T11456] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1707'. [ 628.478524][T11456] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1707'. [ 628.593012][T11451] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1707'. [ 628.609969][T11456] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1707'. [ 628.736234][T11470] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1710'. [ 628.750181][T10101] Bluetooth: hci0: command 0x040f tx timeout [ 628.776821][T11470] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1710'. [ 628.820128][T11465] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1710'. [ 628.979549][T11471] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1710'. [ 629.352725][T11304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 629.469656][T11304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 629.494089][T11498] syzkaller1: tun_chr_ioctl cmd 21731 [ 629.555369][T11304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 629.585115][T11304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 630.034468][T11520] device bridge_slave_1 left promiscuous mode [ 630.080468][T11520] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.132080][T11520] device bridge_slave_0 left promiscuous mode [ 630.161542][T11520] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.380350][T11304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.471171][ T4710] device hsr_slave_0 left promiscuous mode [ 630.492465][ T4710] device hsr_slave_1 left promiscuous mode [ 630.540302][ T4710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.589771][ T4710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.641067][ T4710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.648523][ T4710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.720481][ T4710] device bridge_slave_1 left promiscuous mode [ 630.728943][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.772953][ T4710] device bridge_slave_0 left promiscuous mode [ 630.779205][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.829786][ T1324] Bluetooth: hci0: command 0x0419 tx timeout [ 630.890251][ T4710] device veth1_macvtap left promiscuous mode [ 630.900803][ T4710] device veth0_macvtap left promiscuous mode [ 630.906932][ T4710] device veth1_vlan left promiscuous mode [ 630.951205][ T4710] device veth0_vlan left promiscuous mode [ 631.313400][ T4710] bond0 (unregistering): Released all slaves [ 631.762317][ T4710] bond1 (unregistering): Released all slaves [ 631.906052][ T4710] team0 (unregistering): Port device team_slave_1 removed [ 631.920132][ T4710] team0 (unregistering): Port device team_slave_0 removed [ 632.072442][T11577] device bridge_slave_1 left promiscuous mode [ 632.078693][T11577] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.087673][T11577] device bridge_slave_0 left promiscuous mode [ 632.094222][T11577] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.212461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 632.220482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 632.230310][T11583] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1744'. [ 632.239709][T11583] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.1744'. [ 632.255317][T11304] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.307949][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 632.351578][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 632.380039][ T4638] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.387134][ T4638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.440642][T11590] netlink: 'syz.2.1746': attribute type 29 has an invalid length. [ 632.448824][T11590] netlink: 'syz.2.1746': attribute type 29 has an invalid length. [ 632.555584][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 632.564123][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 632.593642][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 632.613530][ T4638] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.620697][ T4638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.632987][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 632.643056][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 632.652830][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 632.684992][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 632.694212][T11597] netlink: 'syz.2.1746': attribute type 29 has an invalid length. [ 632.713508][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 632.741467][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 632.770889][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 632.795130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 632.812664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 632.842556][T11304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 632.865002][T11304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 632.903516][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 632.909877][ T6613] Bluetooth: hci0: command 0x0401 tx timeout [ 632.926123][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 633.273681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 633.290867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 633.335014][T11304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.441471][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 633.453503][T11635] netlink: 'syz.4.1766': attribute type 29 has an invalid length. [ 633.488625][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 633.571686][T11635] netlink: 'syz.4.1766': attribute type 29 has an invalid length. [ 633.588133][T11640] netlink: 'syz.4.1766': attribute type 29 has an invalid length. [ 633.607201][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 633.627710][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 633.657549][T11304] device veth0_vlan entered promiscuous mode [ 633.685501][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 633.714448][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 633.720717][T11647] netlink: 'syz.1.1771': attribute type 29 has an invalid length. [ 633.750351][T11304] device veth1_vlan entered promiscuous mode [ 633.765230][T11649] __nla_validate_parse: 5 callbacks suppressed [ 633.765247][T11649] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1770'. [ 633.785568][T11647] netlink: 'syz.1.1771': attribute type 29 has an invalid length. [ 633.800533][T11650] netlink: 'syz.1.1771': attribute type 29 has an invalid length. [ 633.830517][T11649] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1770'. [ 633.847508][T11647] netlink: 'syz.1.1771': attribute type 29 has an invalid length. [ 633.865152][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 633.892733][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 633.912802][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 633.934332][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 633.948736][T11645] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1770'. [ 633.963506][T11304] device veth0_macvtap entered promiscuous mode [ 633.984603][T11651] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1770'. [ 634.011651][T11304] device veth1_macvtap entered promiscuous mode [ 634.077271][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.119781][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.145697][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.219440][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.275430][T11304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.303485][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 634.304193][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 634.304766][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 634.305341][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 634.313938][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.313991][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.314003][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.314019][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.320590][T11304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.320715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 634.321365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 634.326156][T11304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.326188][T11304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.326213][T11304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.326238][T11304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.522667][ T4638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.522744][ T4638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.526020][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 634.594857][ T4638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.594937][ T4638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.598246][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 634.673518][T11672] loop3: detected capacity change from 0 to 1024 [ 635.307192][T11684] loop1: detected capacity change from 0 to 512 [ 635.375192][T11684] EXT4-fs (loop1): Ignoring removed nobh option [ 635.446893][T11684] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,stripe=0x0000000000010000,nodiscard,,errors=continue. Quota mode: none. [ 635.579827][ T4216] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 635.608011][ T4176] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 635.989803][ T4216] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.017416][ T4216] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 636.047124][ T4216] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 636.059490][ T4216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.088895][ T4216] usb 5-1: config 0 descriptor?? [ 636.143305][ T4216] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 636.159973][ T4216] dvb-usb: bulk message failed: -22 (3/0) [ 636.206865][ T4216] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 636.250047][ T4216] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 636.279064][ T4216] usb 5-1: media controller created [ 636.315436][ T4216] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 636.345838][T11682] dvb-usb: bulk message failed: -22 (3/0) [ 636.381494][ T4216] dvb-usb: bulk message failed: -22 (6/0) [ 636.400225][ T4216] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 636.451763][ T4216] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input120 [ 636.514973][ T4216] dvb-usb: schedule remote query interval to 150 msecs. [ 636.545009][ T4216] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 636.625585][ T4216] usb 5-1: USB disconnect, device number 8 [ 637.142928][ T4216] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 637.316341][T11708] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1793'. [ 637.350352][T11708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1793'. [ 637.517952][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 637.619543][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 637.697210][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 637.824997][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 638.029671][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #108!!! [ 638.109701][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 638.118893][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 638.132148][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 638.141707][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 638.269717][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 638.547428][ T4710] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.185964][ T4710] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.415800][ T5249] Bluetooth: hci0: command 0x0409 tx timeout [ 639.487232][ T4710] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.630243][ T5249] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 639.666984][ T5249] Bluetooth: hci2: Injecting HCI hardware error event [ 639.808509][ T4176] Bluetooth: hci2: hardware error 0x00 [ 639.982486][T11704] chnl_net:caif_netlink_parms(): no params data found [ 640.216601][ T4710] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.747015][T11742] loop1: detected capacity change from 0 to 512 [ 641.464773][T11742] EXT4-fs (loop1): Ignoring removed nobh option [ 641.471126][T11742] EXT4-fs (loop1): Ignoring removed nobh option [ 641.477427][T11742] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 641.479675][ T4216] Bluetooth: hci0: command 0x041b tx timeout [ 641.530182][T11742] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 641.541466][T11742] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1801: invalid indirect mapped block 2683928664 (level 1) [ 641.580664][T11704] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.587743][T11704] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.610526][T11742] EXT4-fs (loop1): 1 truncate cleaned up [ 641.616206][T11742] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,nobh,minixdf,nobh,usrjquota=.grpquota,nodiscard,jqfmt=vfsv0,noload,,,errors=continue. Quota mode: writeback. [ 641.668960][T11704] device bridge_slave_0 entered promiscuous mode [ 641.731365][T11704] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.738478][T11704] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.870582][T11704] device bridge_slave_1 entered promiscuous mode [ 642.037966][T11704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.092982][T11704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.157864][T11752] loop4: detected capacity change from 0 to 128 [ 642.197491][T11754] loop1: detected capacity change from 0 to 8 [ 642.283146][T11752] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 642.311406][T11752] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 642.334663][T11704] team0: Port device team_slave_0 added [ 642.356592][T11704] team0: Port device team_slave_1 added [ 642.373435][T11754] SQUASHFS error: Unable to read directory block [631:26] [ 642.534057][T11704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.547779][T11704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 642.599590][T11704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.649134][T11763] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1807'. [ 642.886524][T11758] validate_nla: 2 callbacks suppressed [ 642.886581][T11758] netlink: 'syz.2.1809': attribute type 5 has an invalid length. [ 643.032305][T11758] device ip6erspan0 entered promiscuous mode [ 643.101222][T11704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.125895][T11704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.381886][T11704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.550269][ T4216] Bluetooth: hci0: command 0x040f tx timeout [ 643.724005][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1810'. [ 643.807859][T11777] loop4: detected capacity change from 0 to 512 [ 643.848291][T11772] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1810'. [ 643.939829][T11777] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 643.958776][T11704] device hsr_slave_0 entered promiscuous mode [ 643.990861][T11704] device hsr_slave_1 entered promiscuous mode [ 644.039665][T11777] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 644.095114][T11797] xt_hashlimit: size too large, truncated to 1048576 [ 644.104216][T11777] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 644.126819][T11777] EXT4-fs (loop4): 1 truncate cleaned up [ 644.132694][T11777] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,max_batch_time=0x0000000000000008,quota,,errors=continue. Quota mode: writeback. [ 645.630648][ T4216] Bluetooth: hci0: command 0x0419 tx timeout [ 650.481639][T11840] netlink: 'syz.1.1824': attribute type 10 has an invalid length. [ 650.489634][T11840] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1824'. [ 650.500672][T11840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.509768][T11840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.518452][T11840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.527555][T11840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.543003][T11840] team0: Port device geneve0 added [ 650.796729][T11844] loop4: detected capacity change from 0 to 1024 [ 650.806314][ T4710] device hsr_slave_0 left promiscuous mode [ 650.830618][ T4710] device hsr_slave_1 left promiscuous mode [ 650.869733][ T4710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.930712][ T4710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.953537][T11844] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 650.970467][ T4710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.068178][ T4710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.429608][ T4710] device bridge_slave_1 left promiscuous mode [ 652.445603][T11848] tmpfs: Unknown parameter 'usrquota' [ 652.478120][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.529767][ T4710] device bridge_slave_0 left promiscuous mode [ 652.556419][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.631333][T11868] loop3: detected capacity change from 0 to 8 [ 652.818174][ T4710] device veth1_macvtap left promiscuous mode [ 652.848408][ T4710] device veth0_macvtap left promiscuous mode [ 652.884073][ T4710] device veth1_vlan left promiscuous mode [ 652.907954][ T4710] device veth0_vlan left promiscuous mode [ 654.405423][T11889] process 'syz.4.1834' launched './file0' with NULL argv: empty string added [ 655.006857][ T4710] team0 (unregistering): Port device team_slave_1 removed [ 655.056362][ T4710] team0 (unregistering): Port device team_slave_0 removed [ 655.086730][ T4710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.120381][ T4710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.240270][T11892] loop3: detected capacity change from 0 to 32768 [ 655.317666][ T4710] bond0 (unregistering): Released all slaves [ 655.396914][T11892] Process accounting resumed [ 655.727834][T11704] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 655.852295][T11704] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 656.266795][T11704] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 656.776809][T11704] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 657.009571][T11907] loop1: detected capacity change from 0 to 256 [ 657.045861][T11907] exfat: Unknown parameter 'zero_size_dir' [ 657.428866][T11704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.516676][T11704] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.086484][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 658.097881][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 658.106248][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 658.123310][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 658.132401][ T4638] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.139519][ T4638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.148354][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 658.157438][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 658.169069][ T4638] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.176178][ T4638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.185841][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 658.195284][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 658.205128][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 658.214547][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 658.223700][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 658.233736][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 658.243068][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 658.251937][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 658.260887][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 658.268981][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 658.463637][T11934] mmap: syz.3.1856 (11934) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 659.343037][T11704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 659.441735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 659.460279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 661.093446][T11950] loop1: detected capacity change from 0 to 512 [ 661.319755][T11950] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 661.371259][T11950] EXT4-fs (loop1): 1 truncate cleaned up [ 661.396505][T11950] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,max_batch_time=0x0000000000000008,quota,,errors=continue. Quota mode: writeback. [ 662.145547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 662.184173][T11949] loop2: detected capacity change from 0 to 32768 [ 662.204664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 662.225664][T11704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.309278][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 662.330445][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 662.357892][T11704] device veth0_vlan entered promiscuous mode [ 662.379144][T11949] Process accounting resumed [ 662.382227][T11704] device veth1_vlan entered promiscuous mode [ 662.430822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 662.445535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 662.464661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 662.483526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 662.498777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 662.754615][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 662.916793][T11980] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 662.941686][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 663.030552][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 663.101549][T11704] device veth0_macvtap entered promiscuous mode [ 663.164936][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 663.182222][T11704] device veth1_macvtap entered promiscuous mode [ 663.284786][T11704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.348004][T11704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.398568][T11704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.456871][T11704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.511081][T11704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 663.549249][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 663.582004][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 663.651110][T11704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.692809][T11704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.944979][T11704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.449721][T11704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.058555][T11704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.297546][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 665.793843][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 666.142293][T11704] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.206150][T11704] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.218591][T11704] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.236925][T11704] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.362144][T12021] QAT: failed to copy from user cfg_data. [ 666.476053][ T4638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.518153][ T4638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.586157][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 666.630436][ T4801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.668496][ T4801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.702902][T12027] loop2: detected capacity change from 0 to 512 [ 666.731105][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 666.811064][T12027] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 666.866931][T12027] EXT4-fs (loop2): 1 truncate cleaned up [ 666.881173][T12027] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,max_batch_time=0x0000000000000008,quota,,errors=continue. Quota mode: writeback. [ 668.962187][T12037] loop1: detected capacity change from 0 to 32768 [ 669.093181][T12037] Process accounting resumed [ 671.867378][T12100] netlink: 'syz.4.1876': attribute type 10 has an invalid length. [ 671.875553][T12100] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1876'. [ 672.053000][T12100] team0: Port device geneve0 added [ 672.133475][T12059] loop2: detected capacity change from 0 to 32768 [ 674.196549][T10101] Bluetooth: hci0: command 0x0409 tx timeout [ 675.584642][T12104] chnl_net:caif_netlink_parms(): no params data found [ 675.658045][T12137] loop3: detected capacity change from 0 to 128 [ 675.935105][T12137] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 676.167689][T12137] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 676.371414][T12104] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.419240][ T9233] Bluetooth: hci0: command 0x041b tx timeout [ 676.426054][T12104] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.435892][T12104] device bridge_slave_0 entered promiscuous mode [ 676.445285][T12104] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.452535][T12104] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.460730][T12104] device bridge_slave_1 entered promiscuous mode [ 676.523460][T12104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.564405][T12104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.608117][T12125] loop2: detected capacity change from 0 to 32768 [ 676.865240][T12104] team0: Port device team_slave_0 added [ 676.950113][T12104] team0: Port device team_slave_1 added [ 678.659679][ T9233] Bluetooth: hci0: command 0x040f tx timeout [ 678.716440][T12104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.760109][T12104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.787101][T12104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.813030][ T4710] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.838932][T12104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.851265][T12104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.886146][T12104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.911284][ T4710] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.959713][ T9521] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 678.980232][T12104] device hsr_slave_0 entered promiscuous mode [ 678.988686][T12104] device hsr_slave_1 entered promiscuous mode [ 678.999914][T12104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 679.007865][T12104] Cannot create hsr debugfs directory [ 679.021224][ T4710] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.072342][T12160] netlink: 'syz.2.1891': attribute type 4 has an invalid length. [ 679.080721][T12160] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1891'. [ 679.112002][ T4710] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.360426][ T9521] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.411208][ T9521] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.474522][ T9521] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 679.501355][ T9521] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 679.512592][ T9521] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.673789][ T9521] usb 4-1: config 0 descriptor?? [ 680.713132][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 681.076733][ T9521] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 681.086222][ T9521] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 681.125375][ T9521] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 681.450891][T12104] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 681.461342][T12104] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 681.481938][T12104] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 681.492990][T12104] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 681.732923][T12188] loop3: detected capacity change from 0 to 256 [ 681.744387][T12104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.780914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 681.794370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 681.827715][T12104] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.871724][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 681.902214][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 681.912726][ T4384] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.919881][ T4384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.952580][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 681.986249][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 682.009806][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 682.022105][ T4384] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.029282][ T4384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.038138][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 682.088208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 682.122504][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 682.138233][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 682.149228][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 682.160356][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 682.209460][ T4710] device hsr_slave_0 left promiscuous mode [ 682.221779][ T4710] device hsr_slave_1 left promiscuous mode [ 682.234429][ T4710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.245099][ T4710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.263878][ T4710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.275011][ T4710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.294960][ T4710] device bridge_slave_1 left promiscuous mode [ 682.306143][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.325556][ T4710] device bridge_slave_0 left promiscuous mode [ 682.335932][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.427338][ T4710] device veth1_macvtap left promiscuous mode [ 682.445726][ T4710] device veth0_macvtap left promiscuous mode [ 682.456152][ T4710] device veth1_vlan left promiscuous mode [ 682.466792][ T4710] device veth0_vlan left promiscuous mode [ 682.910196][ T9020] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 683.131131][ T4710] team0 (unregistering): Port device team_slave_1 removed [ 683.193483][ T4710] team0 (unregistering): Port device team_slave_0 removed [ 683.224507][ T4710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.242991][ T4710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.407744][ T4710] bond0 (unregistering): Released all slaves [ 683.488918][T12104] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 683.504025][T12104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 683.515720][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 683.524019][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 683.533212][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 683.541863][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 683.551954][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 683.560779][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 683.571018][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1899'. [ 683.883095][ T7916] usb 4-1: USB disconnect, device number 4 [ 685.069547][T12226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1907'. [ 685.126269][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 685.148075][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 685.187980][T12104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.261027][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 685.286190][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 685.513462][T12243] loop4: detected capacity change from 0 to 8 [ 685.792265][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.798960][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.174787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 687.276789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 687.454870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 687.455712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 687.458564][T12104] device veth0_vlan entered promiscuous mode [ 687.465764][T12104] device veth1_vlan entered promiscuous mode [ 687.675587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 687.713460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 687.749999][T12104] device veth0_macvtap entered promiscuous mode [ 687.786213][T12257] loop3: detected capacity change from 0 to 256 [ 687.810824][T12104] device veth1_macvtap entered promiscuous mode [ 687.901250][T12104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.981884][T12261] loop4: detected capacity change from 0 to 8 [ 688.062760][T12104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.194937][T12104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.333096][T12104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.471836][T12257] exfat: Unknown parameter 'zero_size_dir' [ 688.534670][T12104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.655551][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 688.750198][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 688.758487][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 688.769152][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 688.886352][T12104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.937795][T12104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.458977][T12104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.492786][T12104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.584489][T12104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.652581][T12104] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.703259][T12104] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.712437][T12104] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.721295][T12104] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.506739][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 690.575456][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 690.955031][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.028040][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.624197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 691.800342][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.808565][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.946372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 692.040908][T12286] loop2: detected capacity change from 0 to 512 [ 692.314103][T12286] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 693.011978][T12304] loop2: detected capacity change from 0 to 8 [ 695.398389][ T4710] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.454476][T12308] loop1: detected capacity change from 0 to 512 [ 695.474388][ T4710] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.671107][ T4710] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.432166][T12308] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1928: invalid indirect mapped block 256 (level 2) [ 697.488876][T12308] EXT4-fs (loop1): 2 truncates cleaned up [ 697.496192][T12308] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 697.535710][ T4710] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.560220][T12308] syz.1.1928 (pid 12308) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 697.580401][T12308] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1928: bg 0: block 5: invalid block bitmap [ 697.709548][ T9521] Bluetooth: hci0: command 0x0409 tx timeout [ 698.060306][T12315] chnl_net:caif_netlink_parms(): no params data found [ 698.272653][T12315] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.280815][T12315] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.340646][T12315] device bridge_slave_0 entered promiscuous mode [ 698.426523][T12315] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.448823][T12315] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.467869][T12315] device bridge_slave_1 entered promiscuous mode [ 698.544928][T12315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.580605][T12315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.734556][T12315] team0: Port device team_slave_0 added [ 698.796909][T12315] team0: Port device team_slave_1 added [ 699.440565][T12315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.485805][T12377] loop1: detected capacity change from 0 to 8 [ 699.809591][T10101] Bluetooth: hci0: command 0x041b tx timeout [ 701.096401][T12315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.406563][T12315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.879629][T10101] Bluetooth: hci0: command 0x040f tx timeout [ 702.386162][T12315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.419586][T12315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.542288][T12315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.042600][T12315] device hsr_slave_0 entered promiscuous mode [ 703.064755][T12315] device hsr_slave_1 entered promiscuous mode [ 703.190455][T12423] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 703.309692][ T4710] device hsr_slave_0 left promiscuous mode [ 703.339954][ T4710] device hsr_slave_1 left promiscuous mode [ 703.391984][ T4710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 703.412547][ T4710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 703.480200][ T4710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 703.487658][ T4710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.509268][ T4710] device bridge_slave_1 left promiscuous mode [ 703.515784][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.039654][T10101] Bluetooth: hci0: command 0x0419 tx timeout [ 704.340691][ T4710] device bridge_slave_0 left promiscuous mode [ 704.347245][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.399110][ T4710] device veth1_macvtap left promiscuous mode [ 704.406622][ T4710] device veth0_macvtap left promiscuous mode [ 704.421334][ T4710] device veth1_vlan left promiscuous mode [ 704.427321][ T4710] device veth0_vlan left promiscuous mode [ 705.431349][ T4710] team0 (unregistering): Port device team_slave_1 removed [ 705.462538][ T4710] team0 (unregistering): Port device team_slave_0 removed [ 705.475885][ T4710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.491485][ T4710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.577242][ T4710] bond0 (unregistering): Released all slaves [ 705.888386][T12457] loop2: detected capacity change from 0 to 512 [ 705.985639][T12455] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 705.989548][T12457] EXT4-fs (loop2): Ignoring removed oldalloc option [ 706.029694][T12457] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 706.142838][T12457] EXT4-fs (loop2): 1 truncate cleaned up [ 706.151982][T12457] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 706.216720][ T1324] Bluetooth: hci0: command 0x0c1a tx timeout [ 708.383865][T12489] netlink: 356 bytes leftover after parsing attributes in process `syz.1.1973'. [ 710.217057][T12315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 710.384893][T12536] loop3: detected capacity change from 0 to 512 [ 710.410246][T12315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 710.439311][T12315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 710.462778][T12536] EXT4-fs (loop3): Ignoring removed oldalloc option [ 710.486372][T12536] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 710.569985][T12546] netlink: 'syz.4.1990': attribute type 21 has an invalid length. [ 710.617933][T12315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 710.618091][T12536] EXT4-fs (loop3): 1 truncate cleaned up [ 710.631457][T12536] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 711.564226][T12315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.774550][T12315] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.670479][T12315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 712.701437][T12315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 713.019588][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 713.091991][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 713.180814][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 713.209504][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 713.252509][ T3084] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.259695][ T3084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.305281][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 713.319241][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 713.336712][ T3084] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.343883][ T3084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.359046][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 713.368639][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 713.402937][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 713.425686][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 713.435989][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 713.447543][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 713.456939][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 713.466238][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 713.475585][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 713.485035][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 713.494146][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 713.502921][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 713.511730][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 714.483222][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 714.521872][T12606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2004'. [ 714.557914][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 714.620676][T12315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.697095][T12612] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 714.997887][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 715.046018][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 715.050339][T12627] loop4: detected capacity change from 0 to 512 [ 715.120785][T12627] EXT4-fs (loop4): Ignoring removed oldalloc option [ 715.130819][T12627] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 715.180271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 715.185797][T12627] EXT4-fs (loop4): 1 truncate cleaned up [ 715.193713][T12627] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 715.208944][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 715.268358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 715.330213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 715.445608][T12315] device veth0_vlan entered promiscuous mode [ 715.525222][T12315] device veth1_vlan entered promiscuous mode [ 716.502651][T12645] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 716.635634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 716.651713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 716.716418][T12315] device veth0_macvtap entered promiscuous mode [ 716.758957][T12656] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 716.796546][T12660] netlink: 'syz.3.2018': attribute type 2 has an invalid length. [ 716.806134][T12315] device veth1_macvtap entered promiscuous mode [ 716.821188][T12660] netlink: 'syz.3.2018': attribute type 1 has an invalid length. [ 716.842101][T12665] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 716.843425][T12666] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 716.884183][T12660] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2018'. [ 717.007160][T12315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.066236][T12315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.066991][T12668] infiniband syz1: set down [ 717.087415][T12668] infiniband syz1: added macvlan1 [ 717.129143][T12315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.138135][T12668] RDS/IB: syz1: added [ 717.144748][T12668] smc: adding ib device syz1 with port count 1 [ 717.151378][T12668] smc: ib device syz1 port 1 has pnetid [ 717.196162][T12315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.217093][T12315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.331973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 717.357810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 717.368309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 717.379984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 717.405789][T12315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.458201][T12315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.492843][T12315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.504748][T12687] syz.2.2025 uses obsolete (PF_INET,SOCK_PACKET) [ 717.548002][T12315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.689048][T12315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.745663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 717.825489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 717.891441][T12315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.915575][T12315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.943548][T12315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.952937][T12315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.193151][ T3084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.221696][ T3084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.295727][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 718.347581][ T4710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.389841][ T4710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.489937][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 718.586722][T12707] device wg2 entered promiscuous mode [ 718.620633][T12711] loop1: detected capacity change from 0 to 512 [ 718.814504][T12711] EXT4-fs (loop1): Ignoring removed oldalloc option [ 718.821422][T12711] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 718.880609][T12711] EXT4-fs (loop1): 1 truncate cleaned up [ 718.886530][T12711] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 720.793829][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.344145][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.406918][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.468839][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.700645][T12800] loop3: detected capacity change from 0 to 512 [ 722.125401][T12800] EXT4-fs (loop3): Ignoring removed oldalloc option [ 722.275642][T12800] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 722.574547][T12800] EXT4-fs (loop3): 1 truncate cleaned up [ 722.621152][T12800] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 722.769558][T12823] device netdevsim0 entered promiscuous mode [ 722.775784][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2051'. [ 722.866909][T12822] device netdevsim0 left promiscuous mode [ 723.836996][T12842] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 723.847610][T12842] team0: Port device macvlan2 added [ 724.340046][T12861] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2065'. [ 724.385711][T12861] team0 (unregistering): Port device team_slave_0 removed [ 724.403983][T12861] team0 (unregistering): Port device team_slave_1 removed [ 724.417407][T12861] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.430853][T12861] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.444205][T12861] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.454379][T12861] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.493746][T12861] team0 (unregistering): Port device geneve0 removed [ 724.515743][T12864] loop3: detected capacity change from 0 to 256 [ 724.663953][T12864] exfat: Unknown parameter 'zero_size_dir' [ 725.294085][T12892] loop2: detected capacity change from 0 to 512 [ 725.335060][T12892] EXT4-fs (loop2): Ignoring removed oldalloc option [ 725.342167][T12892] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 725.379870][T12892] EXT4-fs (loop2): 1 truncate cleaned up [ 725.385834][T12892] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 726.470287][ T9521] Bluetooth: hci0: command 0x0409 tx timeout [ 726.718537][T12912] loop1: detected capacity change from 0 to 512 [ 726.735165][T12912] EXT4-fs (loop1): Ignoring removed oldalloc option [ 726.741957][T12912] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 726.759322][T12912] EXT4-fs (loop1): 1 truncate cleaned up [ 726.766557][T12912] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 728.509438][ T9020] Bluetooth: hci0: command 0x041b tx timeout [ 728.629544][T12937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2080'. [ 729.356394][T12844] chnl_net:caif_netlink_parms(): no params data found [ 730.589500][ T9233] Bluetooth: hci0: command 0x040f tx timeout [ 731.009793][ T9] device hsr_slave_0 left promiscuous mode [ 731.019028][ T9] device hsr_slave_1 left promiscuous mode [ 731.034500][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.045814][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.058846][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.070724][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.078630][ T9] device bridge_slave_1 left promiscuous mode [ 731.094205][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.108249][ T9] device bridge_slave_0 left promiscuous mode [ 731.118757][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.145380][ T9] device veth1_macvtap left promiscuous mode [ 731.157854][ T9] device veth0_macvtap left promiscuous mode [ 731.167088][ T9] device veth1_vlan left promiscuous mode [ 731.179396][ T9] device veth0_vlan left promiscuous mode [ 731.595623][ T9] team0 (unregistering): Port device team_slave_1 removed [ 731.627487][ T9] team0 (unregistering): Port device team_slave_0 removed [ 731.648016][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.677555][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.825801][ T9] bond0 (unregistering): Released all slaves [ 731.993175][T12844] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.008600][T12844] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.016930][T12844] device bridge_slave_0 entered promiscuous mode [ 732.035068][T12844] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.089473][T12844] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.118376][T12844] device bridge_slave_1 entered promiscuous mode [ 732.367027][T12844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.549455][T12981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2091'. [ 732.681253][ T9233] Bluetooth: hci0: command 0x0419 tx timeout [ 732.741242][T12844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.997235][T12991] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2094'. [ 733.039889][T12991] device batadv1 entered promiscuous mode [ 733.299685][T12999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2095'. [ 733.506314][T12993] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2094'. [ 733.521244][T12993] device batadv1 entered promiscuous mode [ 733.584837][T12999] netlink: 'syz.2.2095': attribute type 1 has an invalid length. [ 734.031059][T12844] team0: Port device team_slave_0 added [ 734.193645][T12844] team0: Port device team_slave_1 added [ 734.406397][T12844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.480188][T12844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 734.506428][T12844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.897705][T12844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.933654][T12844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.059290][T12844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.096238][T13056] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2109'. [ 738.110708][T13056] device batadv1 entered promiscuous mode [ 738.192789][T12844] device hsr_slave_0 entered promiscuous mode [ 738.227589][T12844] device hsr_slave_1 entered promiscuous mode [ 738.452116][T13066] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 741.382913][T12844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 741.444773][T13129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2129'. [ 741.474881][T13129] 8021q: adding VLAN 0 to HW filter on device bond3 [ 741.500640][T12844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 741.563477][T13129] 8021q: adding VLAN 0 to HW filter on device bond3 [ 741.570890][T13129] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 741.582977][T13129] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 741.603661][ T4801] tipc: Subscription rejected, illegal request [ 741.662575][T12844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 741.733127][T12844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 743.305748][T12844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.394543][T13176] netlink: 'syz.4.2141': attribute type 39 has an invalid length. [ 743.682687][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 743.792191][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 744.244198][T13189] loop2: detected capacity change from 0 to 256 [ 744.320873][T13189] exfat: Unknown parameter 'zero_size_dir' [ 744.410140][T12844] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.517527][T12844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 744.528224][T12844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 744.572280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 744.582429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 744.591851][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.599060][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.608681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 744.618914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 744.629034][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.636257][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.645545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 744.655123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 744.675182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 744.850362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 744.915652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 744.972349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 745.170278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 745.229432][ T9020] Bluetooth: hci5: command 0x0409 tx timeout [ 745.241454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 745.305794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 745.340726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 745.366529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 745.398274][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 745.425883][T13218] xt_hashlimit: size too large, truncated to 1048576 [ 745.471409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 745.517583][T13222] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 1, id = 0 [ 745.602532][T13224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 745.610833][T13224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 745.623425][T13224] bond0: (slave bond_slave_0): Releasing backup interface [ 745.634081][T13224] device bond_slave_0 left promiscuous mode [ 745.698605][T13224] bond0: (slave bond_slave_1): Releasing backup interface [ 745.716604][T13224] device bond_slave_1 left promiscuous mode [ 745.814016][T13224] team0: Port device team_slave_0 removed [ 745.861556][T13224] team0: Port device team_slave_1 removed [ 745.868139][T13224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 745.879439][T13224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 745.921519][T13224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 745.928965][T13224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 745.964939][T13224] team0: Port device geneve0 removed [ 746.003890][T13224] team0: Port device macvlan2 removed [ 747.232203][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.239282][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.625420][ T9020] Bluetooth: hci5: command 0x041b tx timeout [ 747.678720][T12844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.786821][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 747.804050][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 748.109208][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 748.769505][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 749.850903][T13267] loop4: detected capacity change from 0 to 256 [ 749.896460][T13267] exfat: Unknown parameter 'zero_size_dir' [ 751.988860][ T9020] Bluetooth: hci5: command 0x040f tx timeout [ 752.213870][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 752.223338][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 752.249094][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 752.260133][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 752.276500][T12844] device veth0_vlan entered promiscuous mode [ 752.328728][T12844] device veth1_vlan entered promiscuous mode [ 752.451296][T12844] device veth0_macvtap entered promiscuous mode [ 752.458381][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 752.503787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 752.514587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 752.560354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 752.591131][T13169] chnl_net:caif_netlink_parms(): no params data found [ 752.705016][T13287] device bridge_slave_0 left promiscuous mode [ 752.711806][T13287] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.831247][T13301] loop2: detected capacity change from 0 to 256 [ 752.861476][T13301] exfat: Unknown parameter 'zero_size_dir' [ 753.087002][T13287] device bridge_slave_1 left promiscuous mode [ 753.093381][T13287] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.143771][T13287] bond0: (slave bond_slave_0): Releasing backup interface [ 753.154451][T13287] bond0: (slave bond_slave_1): Releasing backup interface [ 753.165423][T13287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.180094][T13287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.189879][T12844] device veth1_macvtap entered promiscuous mode [ 753.197657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 753.206679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 753.226234][T13297] device batadv0 entered promiscuous mode [ 753.233165][T13297] device vlan2 entered promiscuous mode [ 753.245509][T13297] device batadv0 left promiscuous mode [ 754.421008][ T9233] Bluetooth: hci5: command 0x0419 tx timeout [ 754.720636][T13169] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.795990][T13169] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.587080][T13169] device bridge_slave_0 entered promiscuous mode [ 755.747240][T12844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 755.964281][T12844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.212295][T12844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 756.341898][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 756.440163][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 756.663091][T13169] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.788726][T13354] loop2: detected capacity change from 0 to 256 [ 756.810940][T13169] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.839018][T13169] device bridge_slave_1 entered promiscuous mode [ 756.842456][T13354] exfat: Unknown parameter 'zero_size_dir' [ 756.855512][T12844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 756.867805][T12844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.879316][T12844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 756.893131][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 756.920306][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 757.152786][T12844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.162929][T12844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.171719][T12844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.180463][T12844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.291728][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.310377][T13169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.325738][T13169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.385233][T13169] team0: Port device team_slave_0 added [ 757.398702][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.425058][T13169] team0: Port device team_slave_1 added [ 757.492512][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.510215][T13169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.517198][T13169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.550035][T13169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.568806][T13169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.576123][T13169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.602481][T13169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.630049][ T5026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.638311][ T5026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.653321][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.701634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 757.876403][T13382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2200'. [ 757.962587][T13169] device hsr_slave_0 entered promiscuous mode [ 758.070290][T13169] device hsr_slave_1 entered promiscuous mode [ 758.106601][T13169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 758.125825][T13169] Cannot create hsr debugfs directory [ 758.160373][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.161408][T13389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 758.168709][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.178435][T13389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 758.259893][T13400] loop2: detected capacity change from 0 to 256 [ 758.267110][T13401] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 758.300609][T13400] exfat: Unknown parameter 'zero_size_dir' [ 758.311407][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 759.222685][T13417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2203'. [ 759.333352][T13423] smc: removing ib device syz1 [ 760.744274][T13169] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 761.280375][T13169] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 761.315381][T13169] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 761.355624][T13169] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 761.572368][T13465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2213'. [ 761.619940][T13463] loop1: detected capacity change from 0 to 256 [ 761.669945][T13463] exfat: Unknown parameter 'zero_size_dir' [ 762.386509][T13475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2215'. [ 762.647004][T13487] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2219'. [ 762.963370][T13169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.000144][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 763.008895][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 763.047448][T13169] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.085695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 763.112082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 763.125370][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.132513][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.168213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 763.197824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 763.277938][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.285111][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.333611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 763.395778][T13458] chnl_net:caif_netlink_parms(): no params data found [ 763.424193][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 763.460914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 763.506982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 763.529573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 763.539068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 763.602279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 763.620727][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 763.637458][T13519] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2225'. [ 763.658807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 763.673067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 763.704018][T13522] loop4: detected capacity change from 0 to 256 [ 763.729279][T13169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 763.767943][T13169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 763.779312][T13525] xt_hashlimit: size too large, truncated to 1048576 [ 763.790907][T13522] exfat: Unknown parameter 'zero_size_dir' [ 764.071126][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 764.083259][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 764.775915][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2232'. [ 767.616533][T13574] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2235'. [ 767.785199][T13580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2238'. [ 767.814135][T13580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2238'. [ 767.894882][T13458] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.906626][T13458] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.922232][T13458] device bridge_slave_0 entered promiscuous mode [ 767.966792][T13169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.059556][T13458] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.066636][T13458] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.139101][T13458] device bridge_slave_1 entered promiscuous mode [ 768.161836][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 768.200549][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 768.515946][T13458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.554712][T13458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.753497][T13606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2242'. [ 768.763183][T13606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2242'. [ 768.811066][T13458] team0: Port device team_slave_0 added [ 768.864158][T13458] team0: Port device team_slave_1 added [ 769.080822][T13458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.117541][T13458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.162035][T13619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2245'. [ 769.295396][T13458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.424265][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 769.550603][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 769.602311][T13458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.609285][T13458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.660548][T13458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.928387][T13169] device veth0_vlan entered promiscuous mode [ 770.041954][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 770.060378][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 770.090022][T13646] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2253'. [ 770.099137][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2253'. [ 770.204766][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 770.223147][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 770.255211][T13169] device veth1_vlan entered promiscuous mode [ 770.277373][T13458] device hsr_slave_0 entered promiscuous mode [ 770.285307][T13458] device hsr_slave_1 entered promiscuous mode [ 770.295939][T13458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 770.303815][T13458] Cannot create hsr debugfs directory [ 770.331941][ T9] device hsr_slave_0 left promiscuous mode [ 770.382600][ T9] device hsr_slave_1 left promiscuous mode [ 770.396853][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 770.405313][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 770.440500][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 770.448268][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.465460][ T9] device veth1_macvtap left promiscuous mode [ 770.475714][ T9] device veth0_macvtap left promiscuous mode [ 770.482340][ T9] device veth1_vlan left promiscuous mode [ 770.488151][ T9] device veth0_vlan left promiscuous mode [ 770.914890][ T9] bond1 (unregistering): Released all slaves [ 771.124309][ T9] team0 (unregistering): Port device team_slave_1 removed [ 771.139470][ T9] team0 (unregistering): Port device team_slave_0 removed [ 771.289208][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 771.311142][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 771.434724][T13169] device veth0_macvtap entered promiscuous mode [ 771.520342][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 771.545614][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 771.554628][T13666] loop1: detected capacity change from 0 to 256 [ 771.571344][T13169] device veth1_macvtap entered promiscuous mode [ 771.619848][T13666] exfat: Unknown parameter 'zero_size_dir' [ 771.681843][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 771.693615][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 771.807540][T13169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.829878][T13169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.870862][T13169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 771.882670][T13169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.893744][T13169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.905366][T13169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 771.917846][T13673] bond0: (slave bond_slave_0): Releasing backup interface [ 771.937723][T13673] bond0: (slave bond_slave_1): Releasing backup interface [ 771.947566][T13673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.956650][T13673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.967962][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 771.982000][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 771.991928][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 772.001658][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 772.097411][T13169] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.109832][T13169] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.118798][T13169] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.129123][T13169] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.255695][T13458] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.461821][T13458] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.802104][T13698] loop1: detected capacity change from 0 to 256 [ 772.840800][T13698] exfat: Unknown parameter 'zero_size_dir' [ 772.959810][ T3084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.011628][ T3084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.218013][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 773.490321][ T3084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.539485][ T3084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.598935][T13458] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.661256][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 773.784081][T13716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2272'. [ 773.874811][T13716] 8021q: adding VLAN 0 to HW filter on device bond5 [ 774.065956][T13717] 8021q: adding VLAN 0 to HW filter on device bond5 [ 774.076241][T13717] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 774.090348][T13717] bond5: (slave vxcan1): Error -22 calling dev_set_mtu [ 774.239245][T13720] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 774.250341][T13720] bond5: (slave wireguard0): Error -95 calling set_mac_address [ 774.376923][T13458] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.969718][T13744] loop1: detected capacity change from 0 to 256 [ 775.101592][T13744] exfat: Unknown parameter 'zero_size_dir' [ 776.088161][T13458] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 776.185825][T13458] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 776.301605][T13458] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 776.356833][T13773] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2286'. [ 776.419183][T13773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2286'. [ 776.511000][T13458] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 777.053628][T13785] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 777.297347][T13458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.604091][T13458] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.671361][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 777.680397][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 777.820714][T13787] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 777.920946][T13807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2292'. [ 777.942948][T13787] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 778.001378][T13787] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 778.029985][T13787] device bridge_slave_0 left promiscuous mode [ 778.047998][T13787] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.081051][T13787] device bridge_slave_1 left promiscuous mode [ 778.092254][T13787] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.114320][T13787] bond0: (slave bond_slave_0): Releasing backup interface [ 778.155002][T13787] bond0: (slave bond_slave_1): Releasing backup interface [ 778.225665][T13787] team0: Port device team_slave_0 removed [ 778.266025][T13787] team0: Port device team_slave_1 removed [ 778.292457][T13787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 778.306543][T13787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.316965][T13787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 778.332840][T13787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 778.438080][T13813] loop2: detected capacity change from 0 to 256 [ 778.570044][T13813] exfat: Unknown parameter 'zero_size_dir' [ 778.887844][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 779.439003][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 779.525160][ T4801] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.532317][ T4801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.625628][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 779.685683][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 779.752291][ T4801] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.759483][ T4801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.808223][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 779.860955][T13833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2298'. [ 779.986783][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 780.120200][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 780.187407][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 780.249654][T13854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 780.280148][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 780.324793][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 780.381716][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 780.494158][T13864] loop1: detected capacity change from 0 to 256 [ 780.532784][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 780.553376][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 780.620751][T13864] exfat: Unknown parameter 'zero_size_dir' [ 780.658396][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 780.736920][T13458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 780.930787][T13458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 781.002366][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 781.053267][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 781.071529][T10101] Bluetooth: hci5: command 0x0405 tx timeout [ 781.266636][T13883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 781.274548][T13883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 782.171006][T13924] device wireguard0 entered promiscuous mode [ 782.640445][T13948] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 782.731773][T13960] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2336'. [ 782.744115][T13960] tipc: Cannot configure node identity twice [ 782.751646][T13960] tipc: Cannot configure node identity twice [ 782.980164][T13973] xt_hashlimit: size too large, truncated to 1048576 [ 782.997426][T13975] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 783.005282][T13975] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 783.047502][T13977] xt_hashlimit: size too large, truncated to 1048576 [ 783.098484][T13981] : renamed from bond0 [ 783.382570][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 783.470304][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 783.649530][T13994] device wireguard0 entered promiscuous mode [ 783.802238][T13458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.812111][ T9521] Bluetooth: hci5: command 0x0405 tx timeout [ 783.838309][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 783.867137][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 784.081217][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 784.111554][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 784.162428][T13458] device veth0_vlan entered promiscuous mode [ 784.211221][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 784.219282][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 784.355281][T13458] device veth1_vlan entered promiscuous mode [ 784.587812][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 784.627433][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 784.660939][T14008] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2364'. [ 784.753169][T13458] device veth0_macvtap entered promiscuous mode [ 784.806159][T14018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2359'. [ 784.818971][T14018] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.828422][T14018] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.837195][T14018] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.846064][T14018] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.861129][T14018] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 784.870475][T14018] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 784.879438][T14018] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 784.888332][T14018] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 784.995525][T14021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2360'. [ 785.023135][T13458] device veth1_macvtap entered promiscuous mode [ 785.090967][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 785.143083][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 785.181408][T14029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2365'. [ 785.390582][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.409144][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.431647][T14048] loop4: detected capacity change from 0 to 256 [ 785.446669][T13458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.461285][T14048] exfat: Unknown parameter 'zero_size_dir' [ 785.476963][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 785.496130][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 785.694026][T14044] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 785.754088][T14044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 785.782960][T14044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 785.866132][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.921124][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.982421][T13458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 786.027057][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 786.327672][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 786.372661][T13458] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.400107][T13458] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.439493][T13458] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.470093][T13458] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.928528][T14089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2385'. [ 786.950261][T14089] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.959068][T14089] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.968240][T14089] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.977018][T14089] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.072884][T14089] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.082176][T14089] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.091123][T14089] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.100046][T14089] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.234295][T14101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2390'. [ 787.386640][ T3084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.435702][ T3084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.419812][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 788.465135][T14116] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 788.534801][T14122] device wireguard0 entered promiscuous mode [ 788.664765][ T4801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.747898][ T4801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.418346][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 790.269155][T14180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 790.278724][T14180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 790.562733][T14177] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 790.607754][T14177] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 790.625691][T14177] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 790.733514][T14194] device syzkaller0 entered promiscuous mode [ 790.816566][T14204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2417'. [ 790.827418][T14204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2417'. [ 790.841479][T14204] device gretap0 entered promiscuous mode [ 791.410713][ T9] device hsr_slave_0 left promiscuous mode [ 791.417513][ T9] device hsr_slave_1 left promiscuous mode [ 791.424212][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 791.432352][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.440275][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 791.447704][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.457215][ T9] device bridge_slave_1 left promiscuous mode [ 791.463515][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.473272][ T9] device bridge_slave_0 left promiscuous mode [ 791.479916][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.491700][ T9] device veth1_macvtap left promiscuous mode [ 791.497733][ T9] device veth0_macvtap left promiscuous mode [ 791.504211][ T9] device veth1_vlan left promiscuous mode [ 791.510368][ T9] device veth0_vlan left promiscuous mode [ 792.025734][ T9] team0 (unregistering): Port device team_slave_1 removed [ 792.097026][ T9] team0 (unregistering): Port device team_slave_0 removed [ 792.146616][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 792.209252][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 792.287920][ T9] bond0 (unregistering): Released all slaves [ 792.336163][T14211] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2428'. [ 792.347710][T14219] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2421'. [ 793.300218][T14266] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 793.538680][T14236] chnl_net:caif_netlink_parms(): no params data found [ 793.673941][T14289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2440'. [ 793.688577][T14289] device bond0 entered promiscuous mode [ 793.695728][T14289] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 793.736967][T14289] device bond0 left promiscuous mode [ 794.987798][ T9018] Bluetooth: hci0: command 0x0409 tx timeout [ 795.280063][T14236] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.304220][T14236] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.370760][T14236] device bridge_slave_0 entered promiscuous mode [ 795.408715][T14236] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.418599][T14236] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.436063][T14236] device bridge_slave_1 entered promiscuous mode [ 795.456597][T14330] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2456'. [ 795.477079][T14330] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2456'. [ 795.491916][T14330] device team_slave_0 entered promiscuous mode [ 795.501739][T14330] device gretap0 entered promiscuous mode [ 795.522024][T14330] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network [ 796.570414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 796.615085][T14236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.717270][T14236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.038061][T14378] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2470'. [ 797.047447][T14378] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2470'. [ 797.065454][T14378] device team_slave_0 entered promiscuous mode [ 797.079464][ T9018] Bluetooth: hci0: command 0x041b tx timeout [ 797.080454][T14378] device gretap0 entered promiscuous mode [ 797.095475][T14378] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 797.103430][T14378] Cannot create hsr debugfs directory [ 797.108982][T14378] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network [ 797.120964][T14378] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 798.371575][T14236] team0: Port device team_slave_0 added [ 798.446821][T14236] team0: Port device team_slave_1 added [ 798.552869][T14236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.584501][T14236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.611557][T14236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.638658][T14236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.689032][T14236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.871937][T14236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.150147][ T9018] Bluetooth: hci0: command 0x040f tx timeout [ 799.855369][T14236] device hsr_slave_0 entered promiscuous mode [ 799.888877][T14236] device hsr_slave_1 entered promiscuous mode [ 799.935105][T14425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2484'. [ 799.944190][T14425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2484'. [ 799.964098][T14425] device team_slave_0 entered promiscuous mode [ 799.996282][T14425] device team_slave_0 left promiscuous mode [ 800.307849][T14445] netlink: 'syz.2.2492': attribute type 4 has an invalid length. [ 801.628702][T14236] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.732273][ T9023] Bluetooth: hci0: command 0x0419 tx timeout [ 801.788352][T14489] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2501'. [ 801.811561][T14489] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2501'. [ 801.854959][T14489] device team_slave_0 entered promiscuous mode [ 801.890673][T14489] device gretap0 entered promiscuous mode [ 801.917013][T14489] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 801.940167][T14489] Cannot create hsr debugfs directory [ 801.973512][T14489] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network [ 802.065713][T14236] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.098496][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 803.366603][T14236] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.679915][T14236] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.087049][T14236] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 804.262974][T14236] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 805.234301][T14236] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 805.293117][T14236] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 806.050438][T14606] loop2: detected capacity change from 0 to 256 [ 806.110256][T14606] exfat: Unknown parameter 'zero_size_dir' [ 806.642262][T14616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 806.805148][T14621] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 806.972180][T14629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2546'. [ 807.169277][T14236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.294659][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 807.320285][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 807.393074][T14236] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.436553][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 807.550512][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 807.579477][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.586605][ T4710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.594780][T14643] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2548'. [ 807.608539][T14643] device  entered promiscuous mode [ 807.614383][T14643] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 807.628603][T14643] device  left promiscuous mode [ 807.651974][T14647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2552'. [ 807.670919][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 807.701295][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 807.711084][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 807.720961][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.728096][ T4710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.871549][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 807.939841][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 808.063733][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 808.835303][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.843647][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.279648][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 809.300173][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 809.762020][T14677] loop1: detected capacity change from 0 to 256 [ 809.788436][T14236] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 809.799628][T14236] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 809.811154][T14677] exfat: Unknown parameter 'zero_size_dir' [ 809.821995][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 809.865227][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 809.898826][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 809.909681][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 809.919008][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 809.930395][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 809.939139][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 810.566300][T14634] ODEBUG: Out of memory. ODEBUG disabled [ 810.709016][T14706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 810.994355][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 811.012463][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 811.054310][T14236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 811.093928][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 811.110677][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 811.147932][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 811.174374][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 811.189178][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 811.201529][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 812.022175][T14236] device veth0_vlan entered promiscuous mode [ 812.105139][T14236] device veth1_vlan entered promiscuous mode [ 812.203044][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 812.233650][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 812.295715][T14236] device veth0_macvtap entered promiscuous mode [ 812.315697][T14236] device veth1_macvtap entered promiscuous mode [ 812.338013][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 812.347468][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 812.382696][T14236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.403187][T14236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.418774][T14236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 812.442237][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 812.456908][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 812.512594][T14236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.535820][T14236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.560910][T14236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 812.569909][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 812.578763][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 812.612674][T14236] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.624957][T14236] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.634880][T14236] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.643939][T14236] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.798187][ T4384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.826594][ T4384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.858284][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 812.896370][ T4710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.929586][ T4710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.955805][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 813.306084][ T9] device hsr_slave_0 left promiscuous mode [ 813.322986][ T9] device hsr_slave_1 left promiscuous mode [ 813.343229][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 813.354876][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.366026][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 813.383050][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.392242][ T9] device bridge_slave_1 left promiscuous mode [ 813.398462][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.409031][ T9] device bridge_slave_0 left promiscuous mode [ 813.415588][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.429886][ T9] device veth1_macvtap left promiscuous mode [ 813.435927][ T9] device veth0_macvtap left promiscuous mode [ 813.442861][ T9] device veth1_vlan left promiscuous mode [ 813.448681][ T9] device veth0_vlan left promiscuous mode [ 814.734804][ T9] team0 (unregistering): Port device team_slave_1 removed [ 814.767511][ T9] team0 (unregistering): Port device team_slave_0 removed [ 814.807042][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 814.827955][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 815.002608][ T9] bond0 (unregistering): Released all slaves [ 815.111412][T14779] loop4: detected capacity change from 0 to 256 [ 815.130869][T14757] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2568'. [ 815.140132][T14779] exfat: Unknown parameter 'zero_size_dir' [ 815.153388][T14757] device bond0 entered promiscuous mode [ 815.162838][T14757] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 815.187492][T14757] device bond0 left promiscuous mode [ 816.982203][T14801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 817.113133][T14815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 817.997263][T14827] chnl_net:caif_netlink_parms(): no params data found [ 818.074986][T14827] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.082220][T14827] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.090765][T14827] device bridge_slave_0 entered promiscuous mode [ 818.099737][T14827] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.106861][T14827] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.115494][T14827] device bridge_slave_1 entered promiscuous mode [ 818.152571][T14827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 818.173252][T14827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.224468][T14827] team0: Port device team_slave_0 added [ 818.236283][T14827] team0: Port device team_slave_1 added [ 818.295968][T14827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.310224][T14827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.345122][T14827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.365819][T14827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.375331][T14827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.408812][T14827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.573833][T14827] device hsr_slave_0 entered promiscuous mode [ 818.617737][T14827] device hsr_slave_1 entered promiscuous mode [ 818.663322][T14827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 818.704433][T14827] Cannot create hsr debugfs directory [ 818.765079][T14852] loop5: detected capacity change from 0 to 256 [ 818.838178][T14852] exfat: Unknown parameter 'zero_size_dir' [ 819.042500][T14857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 819.056594][T14857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 819.885301][ T5245] Bluetooth: hci0: command 0x0409 tx timeout [ 820.823102][T14877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 821.257076][T14886] ================================================================== [ 821.265731][T14886] BUG: KASAN: use-after-free in ax25_fillin_cb+0x460/0x660 [ 821.272986][T14886] Read of size 4 at addr ffff888023aa5438 by task syz.5.2600/14886 [ 821.280886][T14886] [ 821.283226][T14886] CPU: 1 PID: 14886 Comm: syz.5.2600 Not tainted 5.15.180-syzkaller #0 [ 821.291477][T14886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 821.301568][T14886] Call Trace: [ 821.304870][T14886] [ 821.307808][T14886] dump_stack_lvl+0x1e3/0x2d0 [ 821.309914][ T9233] Bluetooth: hci1: command 0x0409 tx timeout [ 821.312506][T14886] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 821.324121][T14886] ? _printk+0xd1/0x120 [ 821.328299][T14886] ? __wake_up_klogd+0xcc/0x100 [ 821.333168][T14886] ? panic+0x860/0x860 [ 821.337249][T14886] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 821.342735][T14886] print_address_description+0x63/0x3b0 [ 821.348301][T14886] ? ax25_fillin_cb+0x460/0x660 [ 821.353171][T14886] kasan_report+0x16b/0x1c0 [ 821.357696][T14886] ? ax25_fillin_cb+0x460/0x660 [ 821.362571][T14886] ax25_fillin_cb+0x460/0x660 [ 821.367274][T14886] ax25_setsockopt+0xab7/0xe70 [ 821.372066][T14886] ? ax25_shutdown+0x10/0x10 [ 821.376675][T14886] ? aa_sock_opt_perm+0x79/0x110 [ 821.381633][T14886] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 821.387288][T14886] ? security_socket_setsockopt+0x7d/0xa0 [ 821.393025][T14886] ? ax25_shutdown+0x10/0x10 [ 821.397637][T14886] __sys_setsockopt+0x57e/0x990 [ 821.402512][T14886] ? __ia32_sys_recv+0xb0/0xb0 [ 821.407304][T14886] ? syscall_enter_from_user_mode+0x2e/0x240 [ 821.413302][T14886] __x64_sys_setsockopt+0xb1/0xc0 [ 821.418353][T14886] do_syscall_64+0x3b/0xb0 [ 821.422796][T14886] ? clear_bhb_loop+0x15/0x70 [ 821.427537][T14886] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 821.433450][T14886] RIP: 0033:0x7f226058c169 [ 821.437884][T14886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.457534][T14886] RSP: 002b:00007f225e3f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 821.465971][T14886] RAX: ffffffffffffffda RBX: 00007f22607a4fa0 RCX: 00007f226058c169 [ 821.473958][T14886] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000007 [ 821.481941][T14886] RBP: 00007f226060d990 R08: 0000000000000010 R09: 0000000000000000 [ 821.489929][T14886] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 821.497912][T14886] R13: 0000000000000000 R14: 00007f22607a4fa0 R15: 00007ffce340a748 [ 821.505927][T14886] [ 821.508956][T14886] [ 821.511285][T14886] Allocated by task 14621: [ 821.515701][T14886] ____kasan_kmalloc+0xba/0xf0 [ 821.520485][T14886] kmem_cache_alloc_trace+0x143/0x290 [ 821.525873][T14886] ax25_dev_device_up+0x51/0x5a0 [ 821.530826][T14886] ax25_device_event+0x4a0/0x510 [ 821.535778][T14886] raw_notifier_call_chain+0xd0/0x170 [ 821.541169][T14886] __dev_notify_flags+0x1fd/0x3f0 [ 821.546206][T14886] dev_change_flags+0xe7/0x190 [ 821.550981][T14886] dev_ifsioc+0x147/0x10c0 [ 821.555401][T14886] dev_ioctl+0x504/0xf60 [ 821.559679][T14886] sock_do_ioctl+0x34f/0x5a0 [ 821.564266][T14886] sock_ioctl+0x484/0x770 [ 821.568602][T14886] __se_sys_ioctl+0xf1/0x160 [ 821.573188][T14886] do_syscall_64+0x3b/0xb0 [ 821.577600][T14886] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 821.583492][T14886] [ 821.585808][T14886] Freed by task 14795: [ 821.589861][T14886] kasan_set_track+0x4b/0x80 [ 821.594446][T14886] kasan_set_free_info+0x1f/0x40 [ 821.599393][T14886] ____kasan_slab_free+0xd8/0x120 [ 821.604410][T14886] slab_free_freelist_hook+0xdd/0x160 [ 821.609778][T14886] kfree+0xf1/0x270 [ 821.613606][T14886] ax25_release+0x3b3/0x840 [ 821.618109][T14886] sock_close+0xcd/0x230 [ 821.622365][T14886] __fput+0x3fe/0x8e0 [ 821.626344][T14886] task_work_run+0x129/0x1a0 [ 821.630937][T14886] exit_to_user_mode_loop+0x106/0x130 [ 821.636304][T14886] exit_to_user_mode_prepare+0xb1/0x140 [ 821.641844][T14886] syscall_exit_to_user_mode+0x5d/0x240 [ 821.647389][T14886] do_syscall_64+0x47/0xb0 [ 821.651802][T14886] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 821.657696][T14886] [ 821.660012][T14886] Last potentially related work creation: [ 821.665712][T14886] kasan_save_stack+0x36/0x60 [ 821.670388][T14886] kasan_record_aux_stack+0xba/0x100 [ 821.675680][T14886] insert_work+0x54/0x3e0 [ 821.680042][T14886] __queue_work+0x963/0xd00 [ 821.684570][T14886] queue_work_on+0x14b/0x250 [ 821.689179][T14886] netdevice_event+0x82f/0x960 [ 821.693945][T14886] raw_notifier_call_chain+0xd0/0x170 [ 821.699326][T14886] __dev_notify_flags+0x1fd/0x3f0 [ 821.704361][T14886] dev_change_flags+0xe7/0x190 [ 821.709126][T14886] do_setlink+0xc26/0x3d80 [ 821.713540][T14886] rtnl_newlink+0x17bf/0x2050 [ 821.718216][T14886] rtnetlink_rcv_msg+0x99d/0xef0 [ 821.723151][T14886] netlink_rcv_skb+0x1cf/0x410 [ 821.727913][T14886] netlink_unicast+0x7c0/0x990 [ 821.732698][T14886] netlink_sendmsg+0xa30/0xd60 [ 821.737489][T14886] __sys_sendto+0x564/0x720 [ 821.741996][T14886] __x64_sys_sendto+0xda/0xf0 [ 821.746761][T14886] do_syscall_64+0x3b/0xb0 [ 821.751178][T14886] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 821.757071][T14886] [ 821.759406][T14886] Second to last potentially related work creation: [ 821.765979][T14886] kasan_save_stack+0x36/0x60 [ 821.770676][T14886] kasan_record_aux_stack+0xba/0x100 [ 821.775958][T14886] call_rcu+0x1c4/0xa70 [ 821.780146][T14886] addrconf_ifdown+0x191b/0x1be0 [ 821.785080][T14886] addrconf_notify+0x452/0xf40 [ 821.789837][T14886] raw_notifier_call_chain+0xd0/0x170 [ 821.795290][T14886] unregister_netdevice_many+0xe98/0x1840 [ 821.801021][T14886] default_device_exit_batch+0x390/0x3f0 [ 821.806754][T14886] cleanup_net+0x886/0xc90 [ 821.811177][T14886] process_one_work+0x8a1/0x10c0 [ 821.816136][T14886] worker_thread+0xaca/0x1280 [ 821.820822][T14886] kthread+0x3f6/0x4f0 [ 821.824976][T14886] ret_from_fork+0x1f/0x30 [ 821.829391][T14886] [ 821.831715][T14886] The buggy address belongs to the object at ffff888023aa5400 [ 821.831715][T14886] which belongs to the cache kmalloc-192 of size 192 [ 821.845762][T14886] The buggy address is located 56 bytes inside of [ 821.845762][T14886] 192-byte region [ffff888023aa5400, ffff888023aa54c0) [ 821.859057][T14886] The buggy address belongs to the page: [ 821.864692][T14886] page:ffffea00008ea940 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23aa5 [ 821.874840][T14886] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 821.882421][T14886] raw: 00fff00000000200 ffffea00018181c0 0000000b0000000b ffff888017441a00 [ 821.891021][T14886] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 821.899593][T14886] page dumped because: kasan: bad access detected [ 821.906089][T14886] page_owner tracks the page as allocated [ 821.911793][T14886] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 10957844119, free_ts 10663240772 [ 821.927667][T14886] get_page_from_freelist+0x3b78/0x3d40 [ 821.933224][T14886] __alloc_pages+0x272/0x700 [ 821.937849][T14886] alloc_page_interleave+0x22/0x1c0 [ 821.943067][T14886] new_slab+0xbb/0x4b0 [ 821.947156][T14886] ___slab_alloc+0x6f6/0xe10 [ 821.951749][T14886] __kmalloc+0x1c9/0x300 [ 821.955993][T14886] usb_alloc_urb+0x36/0x130 [ 821.960517][T14886] usb_control_msg+0x185/0x4c0 [ 821.965278][T14886] hub_probe+0xe35/0x3590 [ 821.969604][T14886] usb_probe_interface+0x5c0/0xaf0 [ 821.974716][T14886] really_probe+0x24e/0xb60 [ 821.979212][T14886] __driver_probe_device+0x1a2/0x3d0 [ 821.984527][T14886] driver_probe_device+0x50/0x420 [ 821.989546][T14886] __device_attach_driver+0x2b9/0x500 [ 821.994913][T14886] bus_for_each_drv+0x183/0x200 [ 821.999755][T14886] __device_attach+0x359/0x570 [ 822.004516][T14886] page last free stack trace: [ 822.009176][T14886] free_unref_page_prepare+0xc34/0xcf0 [ 822.014633][T14886] free_unref_page_list+0x1f7/0x8e0 [ 822.019841][T14886] release_pages+0x1bb9/0x1f40 [ 822.024602][T14886] tlb_finish_mmu+0x177/0x320 [ 822.029274][T14886] exit_mmap+0x3cd/0x620 [ 822.033600][T14886] __mmput+0x112/0x3b0 [ 822.037752][T14886] free_bprm+0x135/0x2f0 [ 822.041988][T14886] kernel_execve+0x3bd/0x9b0 [ 822.046576][T14886] call_usermodehelper_exec_async+0x22f/0x370 [ 822.052639][T14886] ret_from_fork+0x1f/0x30 [ 822.057053][T14886] [ 822.059370][T14886] Memory state around the buggy address: [ 822.064988][T14886] ffff888023aa5300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.073037][T14886] ffff888023aa5380: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 822.081089][T14886] >ffff888023aa5400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 822.089135][T14886] ^ [ 822.095016][T14886] ffff888023aa5480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 822.103067][T14886] ffff888023aa5500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.111287][T14886] ================================================================== [ 822.119339][T14886] Disabling lock debugging due to kernel taint [ 822.127600][T14886] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 822.134817][T14886] CPU: 0 PID: 14886 Comm: syz.5.2600 Tainted: G B 5.15.180-syzkaller #0 [ 822.144457][T14886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 822.154520][T14886] Call Trace: [ 822.157804][T14886] [ 822.160743][T14886] dump_stack_lvl+0x1e3/0x2d0 [ 822.165441][T14886] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 822.171095][T14886] ? panic+0x860/0x860 [ 822.175176][T14886] ? preempt_schedule_common+0xa6/0xd0 [ 822.180650][T14886] ? preempt_schedule+0xd9/0xe0 [ 822.185500][T14886] panic+0x318/0x860 [ 822.189387][T14886] ? check_panic_on_warn+0x1d/0xa0 [ 822.194497][T14886] ? fb_is_primary_device+0xd0/0xd0 [ 822.199688][T14886] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 822.205665][T14886] ? _raw_spin_unlock+0x40/0x40 [ 822.210510][T14886] check_panic_on_warn+0x7e/0xa0 [ 822.215441][T14886] ? ax25_fillin_cb+0x460/0x660 [ 822.220289][T14886] end_report+0x6d/0xf0 [ 822.224442][T14886] kasan_report+0x18e/0x1c0 [ 822.229036][T14886] ? ax25_fillin_cb+0x460/0x660 [ 822.233883][T14886] ax25_fillin_cb+0x460/0x660 [ 822.238559][T14886] ax25_setsockopt+0xab7/0xe70 [ 822.243327][T14886] ? ax25_shutdown+0x10/0x10 [ 822.247914][T14886] ? aa_sock_opt_perm+0x79/0x110 [ 822.252850][T14886] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 822.258390][T14886] ? security_socket_setsockopt+0x7d/0xa0 [ 822.264104][T14886] ? ax25_shutdown+0x10/0x10 [ 822.268688][T14886] __sys_setsockopt+0x57e/0x990 [ 822.273537][T14886] ? __ia32_sys_recv+0xb0/0xb0 [ 822.278301][T14886] ? syscall_enter_from_user_mode+0x2e/0x240 [ 822.284278][T14886] __x64_sys_setsockopt+0xb1/0xc0 [ 822.289299][T14886] do_syscall_64+0x3b/0xb0 [ 822.293713][T14886] ? clear_bhb_loop+0x15/0x70 [ 822.298385][T14886] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 822.304273][T14886] RIP: 0033:0x7f226058c169 [ 822.308684][T14886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.328384][T14886] RSP: 002b:00007f225e3f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 822.336795][T14886] RAX: ffffffffffffffda RBX: 00007f22607a4fa0 RCX: 00007f226058c169 [ 822.344760][T14886] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000007 [ 822.352722][T14886] RBP: 00007f226060d990 R08: 0000000000000010 R09: 0000000000000000 [ 822.360684][T14886] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.368651][T14886] R13: 0000000000000000 R14: 00007f22607a4fa0 R15: 00007ffce340a748 [ 822.376627][T14886] [ 822.379917][T14886] Kernel Offset: disabled [ 822.384267][T14886] Rebooting in 86400 seconds..