last executing test programs: 45.72490146s ago: executing program 4 (id=1049): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000002000e9"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 45.67966932s ago: executing program 4 (id=1050): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[], 0x10) 45.63522396s ago: executing program 4 (id=1051): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000000a00)=@deltfilter={0x38, 0x2d, 0x0, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x0, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x38}}, 0xc080) 44.951297676s ago: executing program 4 (id=1057): bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x1) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000003000000000000000100010081120d000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x141842, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000380)) ioctl$PPPIOCSACTIVE(r1, 0x40047459, 0x0) readv(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) bind$vsock_stream(r4, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0xee00}, {}, {0x0, 0x401}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@loopback, 0x3506, 0x1, 0x0, 0xb7, 0xae, 0xfffffffb}}, 0xe8) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r7) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000076000d0b00000008000000000300000000000000080001000100000008000a0000000000080005"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r9 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r9, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 21.675644403s ago: executing program 4 (id=1057): bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x1) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000003000000000000000100010081120d000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x141842, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000380)) ioctl$PPPIOCSACTIVE(r1, 0x40047459, 0x0) readv(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) bind$vsock_stream(r4, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0xee00}, {}, {0x0, 0x401}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@loopback, 0x3506, 0x1, 0x0, 0xb7, 0xae, 0xfffffffb}}, 0xe8) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r7) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000076000d0b00000008000000000300000000000000080001000100000008000a0000000000080005"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r9 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r9, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.334456092s ago: executing program 4 (id=1057): bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x1) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000003000000000000000100010081120d000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x141842, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000380)) ioctl$PPPIOCSACTIVE(r1, 0x40047459, 0x0) readv(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) bind$vsock_stream(r4, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0xee00}, {}, {0x0, 0x401}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@loopback, 0x3506, 0x1, 0x0, 0xb7, 0xae, 0xfffffffb}}, 0xe8) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r7) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000076000d0b00000008000000000300000000000000080001000100000008000a0000000000080005"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r9 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r9, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.106037043s ago: executing program 1 (id=1364): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="800000001000030500000d000000e0ffffff0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000600012800b0001006970366772650000500002800600020004000000050008000800000004001200060002000600000006000300"], 0x80}}, 0xc0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1405, 0x302, 0x70bd2d, 0x25dfdbfc, "", [{{0x8}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x6000005) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001480)={0x18, 0x140c, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b0001006970366772650000300002801400070020010000000000000000000014000600fc020000000000000000000000000000040012"], 0x8c}}, 0x20000000) 3.787418492s ago: executing program 1 (id=1368): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000140)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/209, 0xd1, 0xa, 0xffff, 0x5, 0x9, 0x10001}}, 0x120) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10c, 0x10c, 0xa, [@struct={0x3, 0x8, 0x0, 0x4, 0x0, 0x80000001, [{0x9, 0x2, 0xffff}, {0x1, 0x3, 0x357}, {0x0, 0x3, 0x8}, {0x3, 0x0, 0x8}, {0x1, 0x1, 0x5}, {0x0, 0x4, 0x9}, {0x8, 0x3, 0x8}, {0x5, 0x2, 0xfffffffa}]}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x7, 0x3}, {0x10, 0x2}, {}, {0x8}, {0xa, 0x4}, {0x10, 0x4}, {0xb, 0x3}]}, @union={0x8, 0x2, 0x0, 0x5, 0x0, 0x3, [{0x7, 0x2, 0x8001}, {0xf, 0x2, 0x7fffffff}]}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0xae3c, [{0x8, 0x4, 0x7}]}, @var={0x6, 0x0, 0x0, 0xe, 0x2}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x2, 0x3}]}, {0x0, [0x5f, 0x61, 0x0, 0x422665e6e836700f, 0x5f, 0x2e, 0x30, 0x30]}}, &(0x7f00000003c0)=""/38, 0x12e, 0x26, 0x1, 0x1efea0e8, 0x0, @void, @value}, 0x28) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x111081) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000480)={{0x2, 0x3, 0x6, 0x3, 0x5}, 0x6, 0x5, 0x8}) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f00000005c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000540)=""/91, 0x5b, 0xcdd, 0x5, 0x200, 0x6}}, 0x120) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) close_range(r4, r0, 0x0) write$UHID_CREATE(r3, &(0x7f0000001740)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740)=""/4096, 0x1000, 0x8000, 0x8001, 0xffffff31, 0x2, 0x10000}}, 0x120) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001880), 0x100000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000018c0)={0x80000001, 0x1, {0x3, 0x3, 0x41, 0x1, 0x355}, 0x800}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001940), 0x200000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000001980)={0xfffffffffffffffe, 0x2, 0xe707, 0x0, 0x6}) r7 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000019c0)={'batadv_slave_0\x00', 0x0}) socket$tipc(0x1e, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001a00), 0x404401) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a40)={0x1b, 0x0, 0x0, 0xfff, 0x0, 0x1, 0x0, '\x00', r8, r1, 0x4, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, r4, {0x5}}, './file0\x00'}) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001b00)={0xffffffffffffffff, 0x3, 0x8}, 0xc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001d40)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r13 = syz_open_dev$mouse(&(0x7f0000001d80), 0x7, 0x181800) r14 = openat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0\x00', 0x101840, 0xc0) r15 = signalfd4(r5, &(0x7f0000001e00)={[0x4]}, 0x8, 0x80000) r16 = syz_open_dev$vcsa(&(0x7f0000001e40), 0xfffffffffffff48b, 0x10000) r17 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001e80), 0x8080, 0x0) r18 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001ec0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, r1, 0x3, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r19 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001f40)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xd040, '\x00', 0x0, r1, 0x5, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000020c0)=@bpf_ext={0x1c, 0x20, &(0x7f0000001b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @map_val={0x18, 0x9, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001c40)='syzkaller\x00', 0x3, 0x4, &(0x7f0000001c80)=""/4, 0x41100, 0x7a, '\x00', r8, 0x0, r1, 0x8, &(0x7f0000001cc0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x5, 0x9, 0x3, 0x37b8}, 0x10, 0x20199, r12, 0x3, &(0x7f0000002040)=[r13, r14, r0, r15, r16, r17, r18, r19, 0xffffffffffffffff], &(0x7f0000002080)=[{0x3, 0x1, 0xa, 0x4}, {0x3, 0x1, 0x7, 0x8}, {0x3, 0x1, 0x3, 0x8}], 0x10, 0x9, @void, @value}, 0x94) 3.116377058s ago: executing program 2 (id=1374): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x40}, 0x3a, 0x10, &(0x7f0000000340), 0xffffffffffffffae, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80800) read(r2, &(0x7f00000006c0)=""/93, 0x5d) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9f9f179be6b8af44ff83f767eb01001806000000000000eedbc0963a1d99f7d089fdea1c5316000000002800000007000000100000000100008400006000050000000200000003000000080000000000000e01000000"], &(0x7f00000002c0)=""/80, 0x47, 0x50, 0x1, 0x6, 0x0, @void, @value}, 0x28) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x6a0400, 0x0) fcntl$getflags(r3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000009a8a0000008400000100000000000000", @ANYRES32=0x1, @ANYBLOB="0001000000000000000004800000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000008000"/28], 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r4, 0x0, 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000380)={r4, 0x0, 0x20000000, 0x2}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) semtimedop(0xffffffffffffffff, 0x0, 0x1f4, &(0x7f0000000f80)={0x77359400}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001800010028bd7000fedbdf251d01070015000200030000c001020000d5dd2b40a78713a206000e00150003000100008007010000d3698ac66006130604000000"], 0x44}, 0x1, 0x0, 0x0, 0xde50a9659187563d}, 0x40000c0) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r4, 0x0, 0x20000000}, 0x20) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x34, &(0x7f0000000100)=0x401, 0x4) unshare(0x400) r7 = openat(r3, &(0x7f0000000480)='./file0\x00', 0x80c40, 0xa4) fsync(r7) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r9 = socket$inet6(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000440)='dctcp\x00', 0x6) sendto$inet6(r9, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784004000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 2.856533717s ago: executing program 0 (id=1378): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x8a0420, &(0x7f00000000c0)={[{@conv}, {@grpquota}, {@nolargeio}, {@jdev={'jdev', 0x3d, './file0'}}]}, 0xfd, 0x1114, &(0x7f0000000640)="$eJzs2bFqFUEUBuB/dldNt7L2iyCIhQTlPoGFwm1ttREJCKZKQFAsfAnfwEew8xUklbUhvRYBS2Fl3bsmSkAlN4HA98G9c/bsGc5sOTMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUZN8Kcm1KunmXJWkJH2/tzxI0s/5qx/rKiUPt5a793cWD3aT1D/Ly6P3N6eSkqS7e2OjW3SLrlnNe/nq+ZPt7a2dzDV99g/X+hVl/quP58paewAAAMCFNZxam7cvhn/odPnz2fQHAAAA/mb9JwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2doj+JuDqokJen7veVBkv6EeZfOaX0AAADA6ZVUedyelJ+OAY7czqe2/MqP47cyxm/yrk1pzm/JAAAAcOE8+/Db43BlFRy/X/8+TMZ996000758Y3p3PU02N6d4NeTrvaROcuePXvuHr5/OvzLUrvABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjBDhwIAAAAAAjytx7kAgAAAAAAAAAAAAAAAAAAAAAA2CsAAP//+pfh3Q==") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fddbdf251400000018000180140002006e657464657673696d3000000000000008001400adf4b75c080010000007020008000f000000010008000e"], 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2.755995376s ago: executing program 1 (id=1379): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r1, 0x0, 0x0, 0xa6, 0x6) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000000d0a01080000bf03000000000000000a0900010073797a300000000900020073797a320000800000"], 0x2c}, 0x1, 0x0, 0x0, 0x40480c0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_netdev_private(r3, 0x89b0, &(0x7f00000010c0)="99803939e155fce925f4b101173a") 2.755789266s ago: executing program 2 (id=1380): recvmmsg(0xffffffffffffffff, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/246, 0xf6}], 0x1}}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x200e7d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}, &(0x7f0000001500), &(0x7f0000001540)) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.516599155s ago: executing program 0 (id=1383): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc804}, 0x0) 2.430077244s ago: executing program 0 (id=1384): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 2.187450743s ago: executing program 0 (id=1385): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x84, 0x30, 0xb, 0x5, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ea32d9c3eada5bb4feefd4bf8818faba"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6c}, @void, @val={0xc, 0x99, {0x8, 0x28}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x28040064}, 0x4040000) 2.187092742s ago: executing program 2 (id=1386): set_mempolicy(0x0, 0x0, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)='$', 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) pipe2$9p(&(0x7f0000000240), 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r1) r2 = memfd_create(&(0x7f0000000540)='v\xa6\xf5lj6,\x95\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb9!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84#\xac)\x81\x1e\x8a\f\xf5C\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x87\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSC\xeaJY\xbde\xff[\x93Bj\x8b\xbff\xcf\xe1oB\xb9\xa6\x97__\xb3\x1f\xe5\xe1\x18^H\x1c\xa3Og\x17\x1e\xf0\x01\x1c\x9akP\"\xf3L\x80\x18\x80*\x17\x96\xf1\x10\xa2\xb6\xb26\xe8\xd6\xe2\xe9l~\xbb\xc9\xb1\x9b\xce\xf4\xa0\xc6\x1d\xcd\x14\xed#9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x84\x93\x06\xd1\xa0\x1c\xa5\xd0\x7f\xfd\xc9\xa3rt\xf4c\aX\xe2\x81\r\xbf\\\fc\x87\xc2Rn\x89/p\xfe\xdeF\xb3E\xe7!k\xca\\?\x91\xad``\"\x15\x05\xc9\xa4\xba\xf2_\xd1Y\xbd\xd6\x13\xce\xf9\x04\x18\xfa\x8f\xc8\x9c`\xe2\x02<\xb1C\x1a-\xc9\xc2}\xb7\x8eA\x95\x13\xed_\xe9\xe6f\xd5\x05\a\xaf\xdd\x01\x8aKg\xbf\xf5\x86#\xc6\xd5\xe5\x8a\xe1\xd5\xfd\x19m=\xd4\xec\x14x\xc8/\x9d\r\xb3\xf7\xd7SG&X}\x8c{\x85\x1dN\xc5;<}\v\xe2k>\xa1\xb22n\x81<\xf3G\xa9j\xb8ET\xd9\x85a78KS0xffffffffffffffff}) ioctl$sock_netdev_private(r0, 0x89b0, &(0x7f00000010c0)="99803939e155fce925f4b101173a") (fail_nth: 4) 2.015776392s ago: executing program 0 (id=1390): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000940)={r0}, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40086602, &(0x7f00000000c0)={@desc={0x4091, 0x0, @desc3}}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000980), 0x2c040, 0x0) (async) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000980), 0x2c040, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0xffffffffffffffff, 0x3, 0x8}, 0xc) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0xffffffffffffffff, 0x3, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x9, 0x1d, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, @ldst={0x0, 0x1, 0x3, 0x7, 0x4, 0x4, 0xfffffffffffffff1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, @tail_call, @jmp={0x5, 0x0, 0x8, 0x2, 0x0, 0x80, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='syzkaller\x00', 0x5, 0xed, &(0x7f00000007c0)=""/237, 0x41000, 0x21, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x3, &(0x7f0000000a00)=[r2, r3, r4], &(0x7f0000000a40)=[{0x2, 0x4, 0x5, 0x8}, {0x1, 0x2, 0x10, 0xb}, {0x1, 0x2, 0x0, 0x5}], 0x10, 0x8, @void, @value}, 0x94) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x20000080) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) (async) bind$bt_l2cap(r6, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) unshare(0x22020400) (async) unshare(0x22020400) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, r9, 0x1, 0x0, 0x80, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}]}, 0x2c}}, 0x40000) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r10, &(0x7f0000000440)="0f22f6a2d90610af6103d627fcd2c8f70dfa2a003377a59a72350a893f19fd10cdb80d8a47c408", 0x27) (async) write(r10, &(0x7f0000000440)="0f22f6a2d90610af6103d627fcd2c8f70dfa2a003377a59a72350a893f19fd10cdb80d8a47c408", 0x27) r11 = openat$cgroup_int(r5, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) r13 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r13, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff, 0x401, 0x0, 0x0, 0x6], [0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2], [0xe, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x4]], '\x00', [{0x0, 0x1, 0x1}, {0xc3}, {0x800}, {0xfffffffc, 0xfffffffc}, {0x0, 0x8}, {}, {}, {0x0, 0x1}, {0x1ff}]}) bind$alg(r12, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-generic)\x00'}, 0x58) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) (async) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) r14 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r14, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x44, r15, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x44084) io_uring_setup(0x6b6e, &(0x7f0000000080)={0x0, 0x54c1, 0x2, 0xfffffffd, 0x1}) 1.976519052s ago: executing program 2 (id=1391): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040), 0x4) 1.80793094s ago: executing program 1 (id=1392): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB='bs=00000000000000001022,noadinicb,iocharset=koi8-u,gid=ignore,dmode=00000000000000000000003,rootdir=00000000000000000005,iocharset=cp949,nostrict,umask=00000000000000000000001,uud=ignore,anchor=00000000000000000206,\x00'], 0x1, 0xc39, &(0x7f0000000240)="$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") socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', r3, 0x4, 0x9, 0x60, 0x6, 0x28, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0xa8, 0x40, 0x1, 0x8001}}) unshare(0x22020400) io_setup(0x3, &(0x7f0000000000)=0x0) r7 = openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = eventfd2(0xa, 0x80000) io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x6829, r7, 0x0, 0x0, 0x0, 0x0, 0x1, r8}]) sendmsg$nl_route_sched(r2, &(0x7f0000000f00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=@gettclass={0x24, 0x2a, 0x8, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x10}, {0x0, 0xd}, {0x3, 0xffff}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000890) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x80044940, &(0x7f0000001980)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000001b80)=ANY=[@ANYRES16=r13, @ANYRES64=r12, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRES32=0x0, @ANYRESDEC=r10, @ANYRESHEX=r11, @ANYRES8=r12, @ANYBLOB="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", @ANYRES8, @ANYRESOCT], 0x0, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001380)={{r10, 0x0, 0x1, 0xfffffffffffffff8, 0x10001, 0x44a4, 0x2, 0x9, 0x7, 0x7ff, 0x5, 0x3, 0x6, 0x0, 0x8000000000000001}}) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) 1.75603403s ago: executing program 3 (id=1393): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (fail_nth: 5) 1.755874s ago: executing program 2 (id=1394): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={0x0}, 0x1, 0x0, 0x0, 0xc804}, 0x0) 1.75110047s ago: executing program 0 (id=1395): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 1.6296884s ago: executing program 2 (id=1396): recvmmsg(0xffffffffffffffff, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/246, 0xf6}], 0x1}}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x200e7d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}, &(0x7f0000001500), &(0x7f0000001540)) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.535955839s ago: executing program 3 (id=1397): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1802000007000000000000000000000085000000ce00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045002, &(0x7f0000000080)=0x9) read$dsp(r0, &(0x7f0000001500)=""/4096, 0x1000) read$dsp(r0, &(0x7f00000000c0)=""/96, 0x60) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x4008031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_netdev_private(r1, 0x89b0, &(0x7f00000010c0)="99803939e155fce925f4b101173a") 1.127718157s ago: executing program 3 (id=1398): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x9, 0x10001, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/98}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/89}, 0x20) 1.051769256s ago: executing program 3 (id=1399): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000c00), &(0x7f00000003c0)=0x8) 971.841736ms ago: executing program 3 (id=1400): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000040)=0x633, 0x4) recvfrom(r1, 0x0, 0x0, 0x8020, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0)="01fb94d37b663374", 0x8, 0x20040080, &(0x7f0000000200), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r5 = syz_pidfd_open(r2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) fcntl$dupfd(r3, 0x406, r5) shutdown(r0, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=1401): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000240)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@inode64}, {@heartbeat_none}, {@inode64}]}, 0x0, 0x4703, &(0x7f0000004800)="$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") setxattr$incfs_metadata(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f00000010c0)="c7a848", 0x3, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000680)=@known='user.incfs.metadata\x00', 0x0, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000240)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@inode64}, {@heartbeat_none}, {@inode64}]}, 0x0, 0x4703, &(0x7f0000004800)="$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") (async) setxattr$incfs_metadata(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f00000010c0)="c7a848", 0x3, 0x0) (async) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000680)=@known='user.incfs.metadata\x00', 0x0, 0x2) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r4, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) (async) kernel console output (not intermixed with test programs): [ 40.470486][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.472627][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.487318][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.489311][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.491262][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.493948][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.501344][ T4304] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.504083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.506097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.510257][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.521338][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.524165][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.530534][ T4300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.538297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.540362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.548652][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.550057][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.553011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.555076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.557070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.571425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.574108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.576297][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.577667][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.579359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.582513][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.593196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.596804][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.598935][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.618945][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.621148][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.623929][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.626090][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.629978][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.648197][ T4300] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.672561][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.674615][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.676479][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.678191][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.694623][ T4299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.708420][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.710339][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.712914][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.714923][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.716374][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.718108][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.720249][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.723129][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.724803][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.726360][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.728458][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.730570][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.733971][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.739616][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.741598][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.744265][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.758664][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.760761][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.763860][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.765912][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.767894][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.769871][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.772495][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.774087][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.777957][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.779988][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.793857][ T4298] device veth0_vlan entered promiscuous mode [ 40.798341][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.800269][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.803124][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.806476][ T4294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.815083][ T4299] device veth0_vlan entered promiscuous mode [ 40.819783][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.823423][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.825782][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.827812][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.830840][ T4298] device veth1_vlan entered promiscuous mode [ 40.837668][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.840179][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.852683][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.857949][ T4300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.860386][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.869549][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.871594][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.880419][ T4299] device veth1_vlan entered promiscuous mode [ 40.910018][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.912560][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.948341][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.950351][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.958731][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.960986][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.968192][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.970297][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.974174][ T4294] device veth0_vlan entered promiscuous mode [ 40.980612][ T4299] device veth0_macvtap entered promiscuous mode [ 40.988664][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.990674][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.993972][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.998153][ T4294] device veth1_vlan entered promiscuous mode [ 41.004703][ T4298] device veth0_macvtap entered promiscuous mode [ 41.010170][ T4299] device veth1_macvtap entered promiscuous mode [ 41.020460][ T4298] device veth1_macvtap entered promiscuous mode [ 41.031177][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.033588][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.035588][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.037514][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.039408][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.041391][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.045417][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.049695][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.054632][ T4304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.061683][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.064476][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.067133][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.068682][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.077507][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.086920][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.089005][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.091006][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.097436][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.101072][ T4294] device veth0_macvtap entered promiscuous mode [ 41.106472][ T4300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.114890][ T4294] device veth1_macvtap entered promiscuous mode [ 41.119464][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.121561][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.125569][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.128239][ T4299] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.130032][ T4299] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.131772][ T4299] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.135094][ T4299] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.139425][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.141427][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.144114][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.146123][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.161695][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.164594][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.167317][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.169717][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.171767][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.175506][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.178250][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.193977][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.196104][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.197974][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.199959][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.203803][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.210204][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.212487][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.216587][ T4298] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.218323][ T4298] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.219965][ T4298] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.221594][ T4298] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.230794][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.235644][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.237526][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.239543][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.242468][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.254123][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.256107][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.258194][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.260113][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.263052][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.264986][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.268192][ T4300] device veth0_vlan entered promiscuous mode [ 41.299779][ T4294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.301499][ T4294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.304020][ T4294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.305674][ T4294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.319080][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.321145][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.328378][ T4300] device veth1_vlan entered promiscuous mode [ 41.390371][ T179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.390529][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.392789][ T179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.394170][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.398205][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.401128][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.407590][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.409622][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.415292][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.417368][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.431023][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.433773][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.435757][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.437766][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.457918][ T4304] device veth0_vlan entered promiscuous mode [ 41.472158][ T4297] Bluetooth: hci0: command 0x041b tx timeout [ 41.487690][ T4300] device veth0_macvtap entered promiscuous mode [ 41.494365][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.495961][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.512311][ T4300] device veth1_macvtap entered promiscuous mode [ 41.517214][ T4304] device veth1_vlan entered promiscuous mode [ 41.519139][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.521084][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.528344][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.530413][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.537274][ T179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.539013][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.540500][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.540771][ T179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.544178][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.551992][ T4297] Bluetooth: hci4: command 0x041b tx timeout [ 41.552876][ T47] Bluetooth: hci2: command 0x041b tx timeout [ 41.553208][ T4297] Bluetooth: hci3: command 0x041b tx timeout [ 41.557505][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.559578][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.561458][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.563847][ T4297] Bluetooth: hci1: command 0x041b tx timeout [ 41.564768][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.566943][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.568978][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.573055][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.578200][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.580174][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.583147][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.614200][ T222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.615842][ T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.618208][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.620324][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.637055][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.639146][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.641147][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.644825][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.646826][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.648851][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.651896][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.656978][ T4300] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.658770][ T4300] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.660423][ T4300] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.663580][ T4300] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.669572][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.671702][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.759022][ T4304] device veth0_macvtap entered promiscuous mode [ 41.767532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.769579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.783940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.816748][ T4304] device veth1_macvtap entered promiscuous mode [ 41.834536][ T4377] Zero length message leads to an empty skb [ 41.839312][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 41.857799][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.859447][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.861772][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.864123][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.869994][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.887825][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.889938][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.906162][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.908551][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.910861][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.913939][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.916710][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.920987][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.961308][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.963885][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.966592][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.968601][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.970658][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.980829][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.984341][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.986368][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.988191][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.991423][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.001675][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.029419][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.031487][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.054939][ T4304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.056801][ T4304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.058556][ T4304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.060131][ T4304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.088862][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.093431][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.105774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.229828][ T4396] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969) [ 42.232367][ T4396] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 42.240325][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.242021][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.259385][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.293554][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.295280][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.300168][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.584967][ T4407] bridge0: port 3(vlan2) entered blocking state [ 42.586433][ T4407] bridge0: port 3(vlan2) entered disabled state [ 42.680901][ T4411] netlink: 'syz.3.16': attribute type 1 has an invalid length. [ 42.682725][ T4411] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 42.684363][ T4411] IPv6: NLM_F_CREATE should be set when creating new route [ 42.736286][ T4415] netlink: 152 bytes leftover after parsing attributes in process `syz.3.18'. [ 43.037458][ T4427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24'. [ 43.047459][ T4427] bridge0: port 3(vlan2) entered blocking state [ 43.049029][ T4427] bridge0: port 3(vlan2) entered disabled state [ 43.064103][ T4427] device vlan2 entered promiscuous mode [ 43.066497][ T4427] device syz_tun entered promiscuous mode [ 43.069273][ T4427] bridge0: port 3(vlan2) entered blocking state [ 43.070755][ T4427] bridge0: port 3(vlan2) entered forwarding state [ 43.537340][ T4452] device lo entered promiscuous mode [ 43.552344][ T4307] Bluetooth: hci0: command 0x040f tx timeout [ 43.631907][ T4297] Bluetooth: hci2: command 0x040f tx timeout [ 43.631960][ T4307] Bluetooth: hci4: command 0x040f tx timeout [ 43.642025][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 43.643302][ T47] Bluetooth: hci3: command 0x040f tx timeout [ 43.926541][ T4479] netlink: 'syz.1.43': attribute type 4 has an invalid length. [ 44.133021][ T4491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.48'. [ 44.265944][ T4497] device syzkaller1 entered promiscuous mode [ 44.400247][ T4503] netlink: 104 bytes leftover after parsing attributes in process `syz.0.55'. [ 44.413226][ T4502] delete_channel: no stack [ 44.534926][ T4513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.57'. [ 44.601310][ T4517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.60'. [ 44.625719][ T4520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.61'. [ 44.647575][ T4517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.60'. [ 44.649509][ T4517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.651088][ T4517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.654448][ T4517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.656071][ T4517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.749323][ T4521] netlink: 40 bytes leftover after parsing attributes in process `syz.0.60'. [ 45.550832][ T4558] syz.3.77 uses obsolete (PF_INET,SOCK_PACKET) [ 45.632968][ T4307] Bluetooth: hci0: command 0x0419 tx timeout [ 45.712398][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 45.713773][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 45.715005][ T47] Bluetooth: hci4: command 0x0419 tx timeout [ 45.716253][ T47] Bluetooth: hci2: command 0x0419 tx timeout [ 45.777381][ T4570] netlink: 'syz.2.82': attribute type 10 has an invalid length. [ 45.779021][ T4570] netlink: 2 bytes leftover after parsing attributes in process `syz.2.82'. [ 45.780875][ T4570] device team0 entered promiscuous mode [ 45.782629][ T4570] device team_slave_0 entered promiscuous mode [ 45.783988][ T4570] device team_slave_1 entered promiscuous mode [ 45.785467][ T4570] bridge0: port 3(team0) entered blocking state [ 45.786993][ T4570] bridge0: port 3(team0) entered disabled state [ 45.790054][ T4570] bridge0: port 3(team0) entered blocking state [ 45.791309][ T4570] bridge0: port 3(team0) entered forwarding state [ 46.297305][ T4594] sock: sock_set_timeout: `syz.0.90' (pid 4594) tries to set negative timeout [ 46.608155][ T4612] IPVS: Scheduler module ip_vs_sip not found [ 46.610153][ T4612] IPVS: length: 24 != 3221225496 [ 47.274290][ T4601] team0 (unregistering): Port device team_slave_0 removed [ 47.283819][ T4601] team0 (unregistering): Port device team_slave_1 removed [ 47.549142][ T4643] netlink: 'syz.1.107': attribute type 10 has an invalid length. [ 47.924724][ T4669] __nla_validate_parse: 5 callbacks suppressed [ 47.924759][ T4669] netlink: 2 bytes leftover after parsing attributes in process `syz.3.118'. [ 48.225033][ T4657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.115'. [ 48.227012][ T4657] netlink: 16 bytes leftover after parsing attributes in process `syz.4.115'. [ 48.231111][ T4657] device batadv0 entered promiscuous mode [ 48.235028][ T4657] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 48.404844][ T4678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'. [ 48.431140][ T4680] Bluetooth: MGMT ver 1.22 [ 48.450405][ T4682] tc_dump_action: action bad kind [ 48.712954][ T4701] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 48.736604][ T4701] netlink: 'syz.3.130': attribute type 1 has an invalid length. [ 48.881350][ T4705] netlink: 80 bytes leftover after parsing attributes in process `syz.0.135'. [ 48.946076][ T4711] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 49.232002][ T4724] netlink: 'syz.4.136': attribute type 4 has an invalid length. [ 49.248114][ T4724] ip6t_srh: unknown srh invflags 4000 [ 49.415788][ T4731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.145'. [ 49.789824][ T4749] device batadv_slave_1 entered promiscuous mode [ 49.856120][ T4745] device batadv_slave_1 left promiscuous mode [ 50.118651][ T4764] device syzkaller0 entered promiscuous mode [ 61.197410][ T4797] netlink: 'syz.3.173': attribute type 2 has an invalid length. [ 61.340029][ T4813] device gretap1 entered promiscuous mode [ 61.359283][ T4814] sctp: [Deprecated]: syz.4.178 (pid 4814) Use of struct sctp_assoc_value in delayed_ack socket option. [ 61.359283][ T4814] Use struct sctp_sack_info instead [ 61.533225][ T4825] netlink: 108 bytes leftover after parsing attributes in process `syz.2.185'. [ 61.545920][ T4825] device syzkaller0 entered promiscuous mode [ 61.559627][ T4825] netlink: 32 bytes leftover after parsing attributes in process `syz.2.185'. [ 61.561703][ T4825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.185'. [ 62.044682][ T4854] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 3, id = 0 [ 62.142600][ T4856] netlink: 'syz.2.199': attribute type 10 has an invalid length. [ 62.149353][ T4856] device syz_tun entered promiscuous mode [ 62.164971][ T4856] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 62.491048][ T4884] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 62.752254][ T4908] netlink: 96 bytes leftover after parsing attributes in process `syz.4.221'. [ 62.999523][ T4912] netlink: 'syz.0.222': attribute type 10 has an invalid length. [ 63.017932][ T4912] device syz_tun entered promiscuous mode [ 63.039828][ T27] audit: type=1107 audit(63.000:2): pid=4919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='/u%Å¿;/ÖüyL÷kä»e2×koU‹h.*dñ†¡)ƒÈQä$þŠÚÍ”*m~ñaï&gäô"$f_Af{è€ „«ZÓæ¹/×C©k¥«S¥Á°D' [ 63.059277][ T4912] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 63.105684][ T4927] netlink: 36 bytes leftover after parsing attributes in process `syz.1.226'. [ 63.372998][ T4936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'. [ 63.538862][ T4943] device vlan0 entered promiscuous mode [ 63.578180][ T4943] team0: Port device vlan0 added [ 64.516088][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.517579][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.657447][ T4987] device veth0_to_bridge entered promiscuous mode [ 64.659638][ T4986] device veth0_to_bridge left promiscuous mode [ 64.695899][ T4990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.246'. [ 64.789137][ T4998] netlink: 52 bytes leftover after parsing attributes in process `syz.3.248'. [ 64.852877][ T5004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'. [ 65.026199][ T5021] netlink: 24 bytes leftover after parsing attributes in process `syz.3.254'. [ 65.583264][ T5081] bond0: (slave syz_tun): Releasing backup interface [ 65.625362][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 65.627528][ T5081] bridge0: port 3(team0) entered disabled state [ 65.795486][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.797343][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.805373][ T5081] device bridge_slave_0 left promiscuous mode [ 65.807094][ T5081] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.856223][ T5081] device bridge_slave_1 left promiscuous mode [ 65.857487][ T5081] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.897367][ T5081] bond0: (slave bond_slave_0): Releasing backup interface [ 65.947953][ T5081] bond0: (slave bond_slave_1): Releasing backup interface [ 66.004963][ T5081] device team_slave_0 left promiscuous mode [ 66.026223][ T5081] team0: Port device team_slave_0 removed [ 66.028013][ T5081] device team_slave_1 left promiscuous mode [ 66.057957][ T5081] team0: Port device team_slave_1 removed [ 66.065656][ T5081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.075168][ T5081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.081556][ T5081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.088134][ T5081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.124757][ T5081] team0: Port device vlan0 removed [ 66.129118][ T5085] netlink: 'syz.2.263': attribute type 10 has an invalid length. [ 66.225189][ T5085] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 66.964434][ T5110] __nla_validate_parse: 1 callbacks suppressed [ 66.964448][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.274'. [ 67.238788][ T5125] device netdevsim0 entered promiscuous mode [ 67.370954][ T5134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.286'. [ 67.642860][ T5152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.289'. [ 67.683464][ T5154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.294'. [ 67.977145][ T5168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.299'. [ 68.465988][ T5185] netlink: 32 bytes leftover after parsing attributes in process `syz.4.306'. [ 68.476911][ T5185] netlink: 32 bytes leftover after parsing attributes in process `syz.4.306'. [ 68.743161][ T5195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.309'. [ 68.887255][ T5197] netlink: 'syz.3.310': attribute type 10 has an invalid length. [ 68.919373][ T5197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.923513][ T5197] team0: Port device batadv0 added [ 69.429906][ T5228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'. [ 69.524623][ T5231] netlink: 24 bytes leftover after parsing attributes in process `syz.2.325'. [ 69.543317][ T5231] device bridge0 entered promiscuous mode [ 69.544713][ T5231] device macvlan2 entered promiscuous mode [ 69.564062][ T5231] device bridge0 left promiscuous mode [ 69.635163][ T14] cfg80211: failed to load regulatory.db [ 70.085697][ T5254] dccp_invalid_packet: P.Data Offset(0) too small [ 70.361302][ T5262] netlink: 'syz.3.339': attribute type 29 has an invalid length. [ 70.374704][ T5262] netlink: 'syz.3.339': attribute type 29 has an invalid length. [ 70.377902][ T5262] netlink: 'syz.3.339': attribute type 29 has an invalid length. [ 70.487066][ T5268] netlink: 'syz.4.342': attribute type 3 has an invalid length. [ 70.891270][ T5285] device veth0_to_team entered promiscuous mode [ 71.107571][ T5291] team0: Port device batadv0 removed [ 71.109027][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.135046][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.137960][ T5291] device bridge_slave_0 left promiscuous mode [ 71.140748][ T5291] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.189171][ T5291] device bridge_slave_1 left promiscuous mode [ 71.190511][ T5291] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.235620][ T5291] bond0: (slave bond_slave_0): Releasing backup interface [ 71.293874][ T5291] bond0: (slave bond_slave_1): Releasing backup interface [ 71.359308][ T5291] team0: Port device team_slave_0 removed [ 71.398055][ T5291] team0: Port device team_slave_1 removed [ 71.399767][ T5291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.411037][ T5291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.453849][ T5291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.455273][ T5291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.271594][ T5340] __nla_validate_parse: 4 callbacks suppressed [ 72.271607][ T5340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 72.276489][ T5340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'. [ 72.282173][ T5340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'. [ 72.548323][ T5356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'. [ 72.759172][ T5366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.382'. [ 72.769056][ T5368] device netdevsim0 entered promiscuous mode [ 72.786961][ T5368] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 73.020866][ T5380] tipc: Started in network mode [ 73.029338][ T5380] tipc: Node identity 0e6cc31de5fc, cluster identity 4711 [ 73.032636][ T5380] tipc: Enabled bearer , priority 0 [ 73.056189][ T5380] device syzkaller0 entered promiscuous mode [ 73.060422][ T5380] tipc: Resetting bearer [ 73.067812][ T5379] tipc: Resetting bearer [ 74.042389][ T7] tipc: Node number set to 3952132893 [ 74.429727][ T5406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 84.079896][ T5379] tipc: Disabling bearer [ 84.102205][ T5390] tipc: Enabling of bearer rejected, failed to enable media [ 84.364898][ T5442] smc: net device bond0 applied user defined pnetid S [ 84.367222][ T5442] smc: net device bond0 erased user defined pnetid S [ 84.641135][ T5462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.414'. [ 84.699994][ T5465] lo speed is unknown, defaulting to 1000 [ 84.703816][ T5465] lo speed is unknown, defaulting to 1000 [ 84.707158][ T5465] lo speed is unknown, defaulting to 1000 [ 84.766585][ T5465] infiniband syz0: set active [ 84.766600][ T7] lo speed is unknown, defaulting to 1000 [ 84.767779][ T5465] infiniband syz0: added lo [ 84.789314][ T5465] RDS/IB: syz0: added [ 84.790827][ T5465] smc: adding ib device syz0 with port count 1 [ 84.794241][ T5470] netlink: 'syz.3.417': attribute type 1 has an invalid length. [ 84.795900][ T5470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.417'. [ 84.796503][ T5465] smc: ib device syz0 port 1 has pnetid [ 84.799940][ T7] lo speed is unknown, defaulting to 1000 [ 84.802966][ T5465] lo speed is unknown, defaulting to 1000 [ 84.850344][ T5465] lo speed is unknown, defaulting to 1000 [ 84.888031][ T5465] lo speed is unknown, defaulting to 1000 [ 84.925508][ T5465] lo speed is unknown, defaulting to 1000 [ 84.960165][ T5465] lo speed is unknown, defaulting to 1000 [ 85.080212][ T5472] lo speed is unknown, defaulting to 1000 [ 85.211233][ T5480] netlink: 'syz.4.422': attribute type 3 has an invalid length. [ 85.506199][ T5472] netlink: 28 bytes leftover after parsing attributes in process `syz.0.418'. [ 85.523396][ T5472] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 85.661406][ T5506] netlink: 68 bytes leftover after parsing attributes in process `syz.1.429'. [ 85.682621][ T5508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.433'. [ 85.948283][ T5521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.436'. [ 86.576442][ T5541] netlink: 'syz.3.444': attribute type 11 has an invalid length. [ 86.625279][ T5542] netlink: 32 bytes leftover after parsing attributes in process `syz.2.442'. [ 87.077020][ T5540] device erspan0 entered promiscuous mode [ 87.078818][ T5540] device vlan2 entered promiscuous mode [ 87.086226][ T5550] Unknown status report in ack skb [ 87.224139][ T5560] ieee802154 phy0 wpan0: encryption failed: -22 [ 87.248278][ T5557] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.334571][ T5563] IPVS: set_ctl: invalid protocol: 58 172.30.0.1:20002 [ 88.396066][ T5618] netlink: 'syz.1.471': attribute type 11 has an invalid length. [ 88.510421][ T5620] lo speed is unknown, defaulting to 1000 [ 88.748714][ T5639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'. [ 88.883277][ T5646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.478'. [ 88.886794][ T5646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.478'. [ 88.934818][ T5646] device team0 entered promiscuous mode [ 88.936045][ T5646] device team_slave_0 entered promiscuous mode [ 88.937453][ T5646] device team_slave_1 entered promiscuous mode [ 88.972592][ T5646] device team0 left promiscuous mode [ 88.973808][ T5646] device team_slave_0 left promiscuous mode [ 88.975121][ T5646] device team_slave_1 left promiscuous mode [ 89.042911][ T5620] device geneve0 entered promiscuous mode [ 89.406725][ T5680] device syzkaller0 entered promiscuous mode [ 89.914327][ T5718] netlink: 'syz.2.497': attribute type 10 has an invalid length. [ 89.916860][ T5718] device veth0_macvtap left promiscuous mode [ 89.971695][ T5718] batman_adv: batadv0: Adding interface: macvtap0 [ 89.979378][ T5718] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.990415][ T5718] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 101.287883][ T5731] bond0: option arp_validate: invalid value (1906805626) [ 102.526087][ T5827] __nla_validate_parse: 2 callbacks suppressed [ 102.526101][ T5827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.541'. [ 102.641721][ T5838] IPVS: Error joining to the multicast group [ 102.866207][ T5854] lo speed is unknown, defaulting to 1000 [ 103.150575][ T5865] netlink: 'syz.4.556': attribute type 10 has an invalid length. [ 103.213444][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.216053][ T5865] bond0: (slave team0): Enslaving as an active interface with an up link [ 103.488333][ T5881] device syzkaller0 entered promiscuous mode [ 103.620604][ T5888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'. [ 103.654598][ T5890] netlink: 48 bytes leftover after parsing attributes in process `syz.3.567'. [ 104.529736][ T5841] Set syz1 is full, maxelem 65536 reached [ 115.086685][ T5896] batman_adv: batadv0: Adding interface: dummy0 [ 115.088064][ T5896] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.093158][ T5896] batman_adv: batadv0: Interface activated: dummy0 [ 115.117954][ T5897] batadv0: mtu less than device minimum [ 115.122116][ T5897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.127202][ T5897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.132122][ T5897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.137048][ T5897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.141963][ T5897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.146845][ T5897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.151717][ T5897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.156656][ T5897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.161487][ T5897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.245328][ T5899] device vlan2 entered promiscuous mode [ 115.459600][ T5922] Illegal XDP return value 4294967294 on prog (id 33) dev N/A, expect packet loss! [ 115.731971][ T5938] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 116.197847][ T5959] syz.3.598 sent an empty control message without MSG_MORE. [ 116.286573][ T5967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 116.387677][ T5971] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.420121][ T5971] bond0: (slave bond1): Enslaving as an active interface with an up link [ 116.486352][ T5976] lo speed is unknown, defaulting to 1000 [ 116.496082][ T5983] netlink: 20 bytes leftover after parsing attributes in process `syz.0.608'. [ 116.628489][ T5990] lo speed is unknown, defaulting to 1000 [ 116.933209][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'. [ 116.993024][ T6007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.099837][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.619'. [ 117.792056][ T4307] Bluetooth: hci0: command 0x0c20 tx timeout [ 118.253382][ T6014] device veth0_to_team left promiscuous mode [ 118.970470][ T6014] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.974384][ T6014] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.976258][ T6014] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.978223][ T6014] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.013929][ T6014] device netdevsim0 left promiscuous mode [ 119.361364][ T6027] netlink: 32 bytes leftover after parsing attributes in process `syz.2.625'. [ 119.618738][ T6053] xt_TCPMSS: Only works on TCP SYN packets [ 120.450719][ T6084] ieee802154 phy0 wpan0: encryption failed: -22 [ 120.667583][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'. [ 120.866015][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'. [ 120.886609][ T6113] bridge: RTM_NEWNEIGH with invalid ether address [ 120.898167][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.660'. [ 121.150314][ T27] audit: type=1107 audit(121.110:3): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='/u%Å¿;/ÖüyL÷kä»e2×koU‹h.*dñ†¡)ƒÈQä$þŠÚÍ”*m~ñaï&gäô"$f_Af{è€ „«ZÓæ¹/×C©k¥«S¥Á°D' [ 121.212205][ T6138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.666'. [ 121.298718][ T6144] device veth0_to_bridge entered promiscuous mode [ 121.305153][ T6143] device veth0_to_bridge left promiscuous mode [ 121.415982][ T6152] ieee802154 phy0 wpan0: encryption failed: -22 [ 121.425822][ T6154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.678'. [ 121.608179][ T6167] netlink: 'syz.2.682': attribute type 1 has an invalid length. [ 121.620871][ T6167] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.665686][ T6167] bond1: (slave gretap2): making interface the new active one [ 121.670329][ T6167] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 121.740544][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 121.805646][ T6181] xt_CT: No such helper "snmp" [ 122.026738][ T6196] netlink: 168 bytes leftover after parsing attributes in process `syz.3.694'. [ 122.577635][ T6216] tipc: Enabling not permitted [ 122.578955][ T6216] tipc: Enabling of bearer rejected, failed to enable media [ 122.857134][ T6232] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.023592][ T6232] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.029209][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.718'. [ 123.175589][ T6232] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.273512][ T6232] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.347589][ T6271] netlink: 'syz.4.726': attribute type 10 has an invalid length. [ 123.363543][ T6271] bond0: (slave team0): Releasing backup interface [ 123.403270][ T6271] batman_adv: batadv0: Adding interface: team0 [ 123.404521][ T6271] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.409330][ T6271] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 123.532271][ T6232] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.550932][ T6232] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.569868][ T6278] 8021q: VLANs not supported on hsr0 [ 123.571639][ T6277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.587207][ T6232] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.627363][ T6232] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.770633][ T6294] netlink: 20 bytes leftover after parsing attributes in process `syz.3.733'. [ 124.006077][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.724'. [ 124.338578][ T6334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.749'. [ 124.350109][ T6334] device team0 entered promiscuous mode [ 124.352562][ T6334] device team_slave_0 entered promiscuous mode [ 124.353972][ T6334] device team_slave_1 entered promiscuous mode [ 124.361960][ T6334] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 124.364425][ T6334] device team0 left promiscuous mode [ 124.365483][ T6334] device team_slave_0 left promiscuous mode [ 124.366659][ T6334] device team_slave_1 left promiscuous mode [ 124.414219][ T6337] raw_sendmsg: syz.4.750 forgot to set AF_INET. Fix it! [ 124.638887][ T6344] device syz_tun left promiscuous mode [ 124.643639][ T6344] bridge0: port 3(vlan2) entered disabled state [ 124.707796][ T6343] net_ratelimit: 11 callbacks suppressed [ 124.707808][ T6343] blackhole_netdev_xmit(): Dropping skb. [ 124.763534][ T6344] device vlan2 left promiscuous mode [ 124.764715][ T6344] bridge0: port 3(vlan2) entered disabled state [ 124.868390][ T6355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.756'. [ 124.870295][ T6355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.756'. [ 124.899006][ T6355] device bond0 entered promiscuous mode [ 124.900137][ T6355] device bond1 entered promiscuous mode [ 124.944568][ T6355] device bridge0 entered promiscuous mode [ 125.002313][ T6355] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 125.005509][ T6355] hsr1: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 125.202652][ T6377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.766'. [ 125.205755][ T6377] infiniband syz0: set active [ 125.207641][ T6377] infiniband syz0: set active [ 125.221157][ T6377] device syz_tun left promiscuous mode [ 125.226283][ T6377] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 125.228376][ T6377] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 125.231167][ T6377] device team0 left promiscuous mode [ 125.282117][ T6377] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.286018][ T3874] lo speed is unknown, defaulting to 1000 [ 125.287903][ T7] lo speed is unknown, defaulting to 1000 [ 125.356124][ T6388] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 125.675371][ T6405] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.756065][ T6415] netlink: 20 bytes leftover after parsing attributes in process `syz.3.783'. [ 125.778313][ T6405] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.893585][ T6405] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.952939][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.954235][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.015707][ T6405] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.160766][ T6405] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.176471][ T6405] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.247467][ T6405] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.258490][ T6405] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.406066][ T6445] netlink: 'syz.4.795': attribute type 4 has an invalid length. [ 126.553922][ T6456] netlink: 32 bytes leftover after parsing attributes in process `syz.0.802'. [ 127.118109][ T6486] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 127.783025][ T6529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.833'. [ 127.831724][ T6531] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 127.878768][ T6535] device batadv_slave_0 entered promiscuous mode [ 127.880953][ T6534] device batadv_slave_0 left promiscuous mode [ 127.900802][ T6538] netlink: 25 bytes leftover after parsing attributes in process `syz.2.834'. [ 127.903820][ T6538] infiniband syz0: set active [ 127.904797][ T4347] lo speed is unknown, defaulting to 1000 [ 128.007787][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.838'. [ 128.009641][ T6541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.838'. [ 128.398820][ T6564] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 128.412488][ T6564] netlink: 'syz.4.845': attribute type 1 has an invalid length. [ 128.430204][ T6568] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 128.603400][ T6577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.852'. [ 128.606045][ T6578] netlink: 32 bytes leftover after parsing attributes in process `syz.1.854'. [ 128.650125][ T6580] device netdevsim0 entered promiscuous mode [ 129.024903][ T6600] netlink: 'syz.2.863': attribute type 1 has an invalid length. [ 129.033798][ T6600] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.046384][ T6600] bond2: (slave gretap3): making interface the new active one [ 129.049309][ T6600] bond2: (slave gretap3): Enslaving as an active interface with an up link [ 129.059411][ T6600] bond2: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 129.124962][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 129.129874][ T6603] lo speed is unknown, defaulting to 1000 [ 129.293419][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.867'. [ 129.407796][ T6616] netlink: 48 bytes leftover after parsing attributes in process `syz.2.870'. [ 129.941519][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.879'. [ 130.220451][ T6666] sctp: [Deprecated]: syz.1.888 (pid 6666) Use of int in max_burst socket option. [ 130.220451][ T6666] Use struct sctp_assoc_value instead [ 130.816653][ T6690] device sit0 entered promiscuous mode [ 130.824411][ T6690] netlink: 'syz.4.896': attribute type 1 has an invalid length. [ 131.279981][ T6722] netlink: 'syz.1.909': attribute type 3 has an invalid length. [ 131.312463][ T6724] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 131.987844][ T6720] device syz_tun left promiscuous mode [ 132.089062][ T6720] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.091193][ T6720] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.409941][ T6720] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.411531][ T6720] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.413700][ T6720] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.415509][ T6720] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.664037][ T6720] device vlan2 left promiscuous mode [ 133.668033][ T6722] bridge0: port 3(vlan0) entered blocking state [ 133.669453][ T6722] bridge0: port 3(vlan0) entered disabled state [ 133.901163][ T6799] __nla_validate_parse: 4 callbacks suppressed [ 133.901176][ T6799] netlink: 16 bytes leftover after parsing attributes in process `syz.0.931'. [ 134.189006][ T6829] smc: net device wg0 applied user defined pnetid SYZ0 [ 134.307295][ T6841] netlink: 60 bytes leftover after parsing attributes in process `syz.2.944'. [ 134.824537][ T6867] netlink: 'syz.4.956': attribute type 21 has an invalid length. [ 134.826423][ T6867] netlink: 132 bytes leftover after parsing attributes in process `syz.4.956'. [ 135.312445][ T6875] netlink: 96 bytes leftover after parsing attributes in process `syz.0.959'. [ 135.314328][ T6877] device bridge0 entered promiscuous mode [ 135.315761][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.960'. [ 135.317617][ T6878] device bridge_slave_1 left promiscuous mode [ 135.318908][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.379955][ T6878] device bridge_slave_0 left promiscuous mode [ 135.381373][ T6878] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.514929][ T6878] device bridge0 left promiscuous mode [ 135.567609][ T6881] lo speed is unknown, defaulting to 1000 [ 135.875068][ T6907] netlink: 'syz.3.971': attribute type 29 has an invalid length. [ 135.876858][ T6907] netlink: 'syz.3.971': attribute type 29 has an invalid length. [ 135.963322][ T6913] netlink: 'syz.2.973': attribute type 10 has an invalid length. [ 135.974279][ T6913] device syz_tun entered promiscuous mode [ 136.007901][ T6913] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 137.056127][ T6973] netlink: 'syz.2.997': attribute type 3 has an invalid length. [ 137.057786][ T6973] netlink: 132 bytes leftover after parsing attributes in process `syz.2.997'. [ 137.069200][ T6973] bridge0: port 1(vlan3) entered blocking state [ 137.070707][ T6973] bridge0: port 1(vlan3) entered disabled state [ 137.091472][ T6978] netlink: 'syz.3.998': attribute type 8 has an invalid length. [ 137.094455][ T6978] netlink: 16 bytes leftover after parsing attributes in process `syz.3.998'. [ 137.321675][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1005'. [ 137.384253][ T6999] lo speed is unknown, defaulting to 1000 [ 137.439056][ T7006] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1010'. [ 137.500063][ T7005] delete_channel: no stack [ 137.790994][ T7028] lo speed is unknown, defaulting to 1000 [ 138.052591][ T7035] device netdevsim0 left promiscuous mode [ 138.156921][ T7040] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1022'. [ 138.192720][ T7041] netlink: 'syz.0.1023': attribute type 3 has an invalid length. [ 138.208545][ T7041] bridge0: port 3(vlan3) entered blocking state [ 138.209955][ T7041] bridge0: port 3(vlan3) entered disabled state [ 138.663493][ T7066] infiniband syz0: set down [ 139.056445][ T7066] device syz_tun left promiscuous mode [ 139.993415][ T7066] device vlan0 left promiscuous mode [ 140.240846][ T7066] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.242731][ T7066] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.244423][ T7066] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.246155][ T7066] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.294306][ T7066] device netdevsim0 left promiscuous mode [ 140.499538][ T7066] device gretap1 left promiscuous mode [ 140.513204][ T7066] device vlan2 left promiscuous mode [ 140.582175][ T7071] __nla_validate_parse: 1 callbacks suppressed [ 140.582186][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1036'. [ 140.597731][ T22] lo speed is unknown, defaulting to 1000 [ 140.599095][ T22] lo speed is unknown, defaulting to 1000 [ 140.644934][ T7097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1043'. [ 141.550513][ T7114] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1049'. [ 141.694145][ T7107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.720924][ T7107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.027924][ T7107] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.029729][ T7107] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.031502][ T7107] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.033306][ T7107] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.589530][ T4307] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 142.600925][ T4307] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 142.610423][ T4307] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 142.638784][ T4307] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 142.659346][ T4307] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 142.664841][ T4307] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 142.848907][ T7143] lo speed is unknown, defaulting to 1000 [ 142.924689][ T7161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1065'. [ 142.926667][ T7161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1065'. [ 142.928440][ T7161] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1065'. [ 143.337046][ T7143] chnl_net:caif_netlink_parms(): no params data found [ 143.440494][ T7143] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.442666][ T7143] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.445689][ T7143] device bridge_slave_0 entered promiscuous mode [ 143.456830][ T7143] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.458862][ T7143] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.460950][ T7143] device bridge_slave_1 entered promiscuous mode [ 143.474641][ T7143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.478473][ T7143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.536933][ T7143] team0: Port device team_slave_0 added [ 143.549085][ T7143] team0: Port device team_slave_1 added [ 143.593665][ T7143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.599202][ T7143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.607627][ T7143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.610994][ T7143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.612717][ T7143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.617835][ T7143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.753866][ T7143] device hsr_slave_0 entered promiscuous mode [ 143.792152][ T7143] device hsr_slave_1 entered promiscuous mode [ 143.831950][ T7143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.834067][ T7143] Cannot create hsr debugfs directory [ 144.107048][ T7143] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.118855][ T7223] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.134607][ T7226] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 144.429054][ T7143] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.495365][ T7143] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.509546][ T7237] lo speed is unknown, defaulting to 1000 [ 144.673105][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1100'. [ 144.751935][ T4307] Bluetooth: hci4: command 0x0409 tx timeout [ 144.753425][ T7143] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.760457][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1100'. [ 144.762777][ T7255] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1100'. [ 144.875010][ T7259] netlink: 'syz.0.1100': attribute type 4 has an invalid length. [ 144.878530][ T7259] ip6t_srh: unknown srh invflags 4000 [ 144.951606][ T7256] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1099'. [ 146.831874][ T47] Bluetooth: hci4: command 0x041b tx timeout [ 148.911941][ T4307] Bluetooth: hci4: command 0x040f tx timeout [ 150.992210][ T4307] Bluetooth: hci4: command 0x0419 tx timeout [ 155.893275][ T7143] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 155.953548][ T7143] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 156.035327][ T7143] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 156.128053][ T7281] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1108'. [ 156.159285][ T7143] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 156.359070][ T7300] lo speed is unknown, defaulting to 1000 [ 156.525065][ T7143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.587052][ T7143] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.615549][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.617545][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.619424][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.621515][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.631667][ T5058] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.633172][ T5058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.635192][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.637243][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.640660][ T5058] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.642112][ T5058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.962039][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.964129][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.966458][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.968595][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.980170][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.982880][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.985256][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.987573][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.989815][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.992902][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.054713][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.056725][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.063106][ T7143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.119190][ T7351] device bond0 entered promiscuous mode [ 157.129167][ T7351] device bond_slave_0 entered promiscuous mode [ 157.130536][ T7351] device bond_slave_1 entered promiscuous mode [ 157.139963][ T7348] device bond0 left promiscuous mode [ 157.141042][ T7348] device bond_slave_0 left promiscuous mode [ 157.150108][ T7348] device bond_slave_1 left promiscuous mode [ 157.159839][ T7353] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1131'. [ 157.161595][ T7353] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 157.303091][ T5066] device hsr_slave_0 left promiscuous mode [ 157.342369][ T5066] device hsr_slave_1 left promiscuous mode [ 157.426979][ T5066] batman_adv: batadv0: Removing interface: team0 [ 157.429679][ T5066] batman_adv: batadv0: Interface deactivated: dummy0 [ 157.431048][ T5066] batman_adv: batadv0: Removing interface: dummy0 [ 157.433515][ T5066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.435233][ T5066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.446902][ T7373] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.448792][ T5066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.458480][ T5066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.464009][ T5066] device bridge_slave_1 left promiscuous mode [ 157.469187][ T5066] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.526987][ T5066] device bridge_slave_0 left promiscuous mode [ 157.528243][ T5066] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.615648][ T5066] device batadv0 left promiscuous mode [ 157.702338][ T5066] device veth1_macvtap left promiscuous mode [ 157.703843][ T5066] device veth0_macvtap left promiscuous mode [ 157.705053][ T5066] device veth1_vlan left promiscuous mode [ 157.706435][ T5066] device veth0_vlan left promiscuous mode [ 158.107796][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1157'. [ 159.734711][ T5066] team0 (unregistering): Port device team_slave_1 removed [ 159.922820][ T5066] team0 (unregistering): Port device team_slave_0 removed [ 160.082534][ T5066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.294592][ T5066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.733792][ T5066] bond0 (unregistering): Released all slaves [ 162.976868][ T7424] ip6t_srh: unknown srh match flags 4000 [ 163.116487][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.118139][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.130316][ T7143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.648341][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.667851][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.681480][ T7143] device veth0_vlan entered promiscuous mode [ 163.696533][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.698577][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.701588][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.711233][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.718813][ T7476] ip6tnl0: Master is either lo or non-ether device [ 163.747345][ T7143] device veth1_vlan entered promiscuous mode [ 163.793435][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 163.795589][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 163.799140][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.827378][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.840178][ T7143] device veth0_macvtap entered promiscuous mode [ 163.880303][ T4307] Bluetooth: hci2: command 0x0406 tx timeout [ 163.880333][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 163.881489][ T4307] Bluetooth: hci3: command 0x0406 tx timeout [ 163.886348][ T7143] device veth1_macvtap entered promiscuous mode [ 163.905948][ T7143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.916650][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.918920][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.921496][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.941537][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.964790][ T7143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.979817][ T7143] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.981581][ T7143] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.984190][ T7143] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.991880][ T7143] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.003741][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.005905][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.080604][ T7493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1176'. [ 164.087053][ T7493] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1176'. [ 164.097957][ T7493] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1176'. [ 164.101221][ T5074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.103636][ T5074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.106805][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.152565][ T5074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.154331][ T5074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.157540][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 164.634044][ T7510] lo speed is unknown, defaulting to 1000 [ 165.857357][ T7580] netlink: 'syz.0.1193': attribute type 1 has an invalid length. [ 166.062831][ T4307] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 166.069947][ T4307] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 166.078323][ T4307] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 166.080599][ T4307] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 166.083492][ T4307] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 166.085180][ T4307] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.214656][ T5066] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.229869][ T7600] ip6tnl0: Master is either lo or non-ether device [ 166.294661][ T7606] device veth0_to_team entered promiscuous mode [ 166.297253][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1201'. [ 166.341070][ T7590] lo speed is unknown, defaulting to 1000 [ 166.506012][ T5066] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.586562][ T7622] device veth0_to_bond entered promiscuous mode [ 166.643857][ T5066] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.754120][ T7636] IPVS: length: 118 != 24 [ 166.773733][ T5066] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.951169][ T7643] lo speed is unknown, defaulting to 1000 [ 166.951268][ T7590] chnl_net:caif_netlink_parms(): no params data found [ 167.085642][ T7590] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.087135][ T7590] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.089187][ T7590] device bridge_slave_0 entered promiscuous mode [ 167.091764][ T7590] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.114726][ T7590] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.116855][ T7590] device bridge_slave_1 entered promiscuous mode [ 167.196703][ T7590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.216977][ T7648] Cannot find del_set index 286 as target [ 167.218148][ T7590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.300172][ T7660] can: request_module (can-proto-0) failed. [ 167.469460][ T7590] team0: Port device team_slave_0 added [ 167.486624][ T7590] team0: Port device team_slave_1 added [ 167.613255][ T7590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.614729][ T7590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.624862][ T7590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.635890][ T7590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.642100][ T7590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.659441][ T7590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.924761][ T7590] device hsr_slave_0 entered promiscuous mode [ 167.972210][ T7590] device hsr_slave_1 entered promiscuous mode [ 167.994407][ T7590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.995921][ T7590] Cannot create hsr debugfs directory [ 168.016840][ T7692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1222'. [ 168.018878][ T7692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1222'. [ 168.064083][ T7692] device syz_tun entered promiscuous mode [ 168.066238][ T7692] device syz_tun left promiscuous mode [ 168.116226][ T4307] Bluetooth: hci4: command 0x0409 tx timeout [ 168.623774][ T7720] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1229'. [ 169.738386][ T7753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1237'. [ 170.011290][ T7590] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 170.063871][ T7590] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 170.103433][ T7590] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 170.135521][ T7590] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 170.191889][ T4297] Bluetooth: hci4: command 0x041b tx timeout [ 170.193846][ T5066] device hsr_slave_0 left promiscuous mode [ 170.232523][ T5066] device hsr_slave_1 left promiscuous mode [ 170.293847][ T5066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.295312][ T5066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.300348][ T5066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.306908][ T5066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.311139][ T5066] device bridge_slave_1 left promiscuous mode [ 170.324672][ T5066] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.376491][ T5066] device bridge_slave_0 left promiscuous mode [ 170.377875][ T5066] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.512907][ T5066] device veth1_macvtap left promiscuous mode [ 170.514268][ T5066] device veth0_macvtap left promiscuous mode [ 170.515487][ T5066] device veth1_vlan left promiscuous mode [ 170.516641][ T5066] device veth0_vlan left promiscuous mode [ 172.254862][ T5066] team0 (unregistering): Port device team_slave_1 removed [ 172.271921][ T4297] Bluetooth: hci4: command 0x040f tx timeout [ 172.433062][ T5066] team0 (unregistering): Port device team_slave_0 removed [ 172.593564][ T5066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.792589][ T5066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.351936][ T4307] Bluetooth: hci4: command 0x0419 tx timeout [ 175.173448][ T5066] bond0 (unregistering): Released all slaves [ 175.512786][ T7590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.534262][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.537426][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.546066][ T7590] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.548609][ T7846] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1265'. [ 175.553009][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.555081][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.557166][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.558791][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.587153][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.589474][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.591521][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.602352][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.603806][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.618515][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.621057][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.634786][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.639362][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.647870][ T7590] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.650094][ T7590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.668662][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.670703][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.674466][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.676885][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.684490][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.689306][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.695878][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.698035][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.707943][ T7852] netlink: 'syz.1.1266': attribute type 4 has an invalid length. [ 176.004429][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.006090][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.022092][ T7590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.786188][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.788701][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.848552][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.850552][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.853452][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.855265][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.861363][ T7590] device veth0_vlan entered promiscuous mode [ 176.892714][ T7590] device veth1_vlan entered promiscuous mode [ 176.929420][ T7931] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1289'. [ 176.949679][ T7590] device veth0_macvtap entered promiscuous mode [ 176.955635][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 176.957700][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 176.959702][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.961715][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.966703][ T7590] device veth1_macvtap entered promiscuous mode [ 176.973529][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.975578][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.989162][ T7590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.011033][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.013585][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.113047][ T7590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.116437][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.118525][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.128713][ T7590] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.130417][ T7590] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.133197][ T7590] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.134985][ T7590] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.154414][ T7946] netlink: 'syz.0.1295': attribute type 1 has an invalid length. [ 177.156000][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1295'. [ 177.246948][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.248600][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.252131][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 177.291557][ T27] audit: type=1107 audit(177.250:4): pid=7950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Àïï' [ 177.304022][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.305732][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.309620][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 177.454930][ T7969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.852970][ T8001] sock: sock_set_timeout: `syz.1.1310' (pid 8001) tries to set negative timeout [ 177.871582][ T8001] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1310'. [ 178.170268][ T8026] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1316'. [ 178.639209][ T8063] netlink: 'syz.1.1322': attribute type 8 has an invalid length. [ 178.880362][ T8081] Cannot find del_set index 286 as target [ 180.195997][ T8118] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1342'. [ 180.222795][ T4307] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 180.225362][ T4307] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 180.227397][ T4307] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.230065][ T4307] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.233329][ T4307] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 180.234985][ T4307] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.289433][ T8101] loop2: detected capacity change from 0 to 32768 [ 180.305493][ T8101] ======================================================= [ 180.305493][ T8101] WARNING: The mand mount option has been deprecated and [ 180.305493][ T8101] and is ignored by this kernel. Remove the mand [ 180.305493][ T8101] option from the mount to silence this warning. [ 180.305493][ T8101] ======================================================= [ 180.334778][ T4357] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.400941][ T8101] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 180.490014][ T8130] loop0: detected capacity change from 0 to 2048 [ 180.552975][ T8119] lo speed is unknown, defaulting to 1000 [ 180.586380][ T8130] loop0: p2 p3 p7 [ 180.735895][ T7839] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 180.756650][ T7924] udevd[7924]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 180.772334][ T8130] loop0: detected capacity change from 0 to 64 [ 180.783249][ T8130] hfs: unable to parse mount options [ 180.798158][ T8140] bridge0: port 1(veth0_to_bridge) entered blocking state [ 180.799765][ T8140] bridge0: port 1(veth0_to_bridge) entered disabled state [ 180.801762][ T8140] device veth0_to_bridge entered promiscuous mode [ 180.808426][ T8140] loop3: detected capacity change from 0 to 256 [ 180.820884][ T7839] udevd[7839]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 180.859326][ T8141] udevd[8141]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 180.969404][ T8127] loop1: detected capacity change from 0 to 32768 [ 180.978876][ T8119] chnl_net:caif_netlink_parms(): no params data found [ 181.003321][ T8101] netlink: 'syz.2.1337': attribute type 62 has an invalid length. [ 181.005684][ T8101] Injecting memory failure for pfn 0x138dc5 at process virtual address 0x20000000 [ 181.018044][ T8101] Memory failure: 0x138dc5: recovery action for dirty LRU page: Recovered [ 181.069670][ T8119] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.090847][ T8119] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.108605][ T8119] device bridge_slave_0 entered promiscuous mode [ 181.116064][ T8119] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.117523][ T8119] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.121494][ T8133] JBD2: Detected IO errors while flushing file data on loop2-75 [ 181.129889][ T8133] JBD2: Detected IO errors while flushing file data on loop2-75 [ 181.132845][ T8119] device bridge_slave_1 entered promiscuous mode [ 181.172420][ T8119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.180020][ T8119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.229363][ T8119] team0: Port device team_slave_0 added [ 181.240503][ T8119] team0: Port device team_slave_1 added [ 181.288175][ T8119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.293239][ T8119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.298222][ T8119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.301574][ T4300] ocfs2: Unmounting device (7,2) on (node local) [ 181.311968][ T8119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.313371][ T8119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.318223][ T8119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.981807][ C1] sched: RT throttling activated [ 182.002256][ T7839] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 182.004336][ T7924] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 182.009579][ T8140] loop3: detected capacity change from 0 to 2048 [ 182.029839][ T8119] device hsr_slave_0 entered promiscuous mode [ 182.065219][ T8140] NILFS (loop3): unrecognized mount option "./file2" [ 182.089268][ T8119] device hsr_slave_1 entered promiscuous mode [ 182.122707][ T8119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.124467][ T8119] Cannot create hsr debugfs directory [ 182.449033][ T4307] Bluetooth: hci4: command 0x0409 tx timeout [ 182.495566][ T4357] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.649071][ T4357] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.682642][ T8166] FAULT_INJECTION: forcing a failure. [ 182.682642][ T8166] name failslab, interval 1, probability 0, space 0, times 1 [ 182.685117][ T8166] CPU: 0 PID: 8166 Comm: syz.1.1355 Not tainted 6.1.123-syzkaller #0 [ 182.686634][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 182.688562][ T8166] Call trace: [ 182.689208][ T8166] dump_backtrace+0x1c8/0x1f4 [ 182.690134][ T8166] show_stack+0x2c/0x3c [ 182.690937][ T8166] dump_stack_lvl+0x108/0x170 [ 182.691877][ T8166] dump_stack+0x1c/0x58 [ 182.692694][ T8166] should_fail_ex+0x3c0/0x51c [ 182.693643][ T8166] __should_failslab+0xc8/0x128 [ 182.694603][ T8166] should_failslab+0x10/0x28 [ 182.695523][ T8166] __kmem_cache_alloc_node+0x80/0x388 [ 182.696589][ T8166] __kmalloc+0xc4/0x1c4 [ 182.697417][ T8166] tomoyo_encode+0x270/0x4b0 [ 182.698358][ T8166] tomoyo_realpath_from_path+0x478/0x4cc [ 182.699471][ T8166] tomoyo_path_number_perm+0x1dc/0x688 [ 182.700551][ T8166] tomoyo_file_ioctl+0x2c/0x3c [ 182.701497][ T8166] security_file_ioctl+0x80/0xbc [ 182.702473][ T8166] __arm64_sys_ioctl+0xa8/0x1c8 [ 182.703451][ T8166] invoke_syscall+0x98/0x2bc [ 182.704373][ T8166] el0_svc_common+0x138/0x258 [ 182.705309][ T8166] do_el0_svc+0x58/0x13c [ 182.706152][ T8166] el0_svc+0x58/0x168 [ 182.706950][ T8166] el0t_64_sync_handler+0x84/0xf0 [ 182.707946][ T8166] el0t_64_sync+0x18c/0x190 [ 182.761122][ T8166] ERROR: Out of memory at tomoyo_realpath_from_path. [ 182.764220][ T4357] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.876835][ T8177] FAULT_INJECTION: forcing a failure. [ 182.876835][ T8177] name failslab, interval 1, probability 0, space 0, times 0 [ 182.906716][ T8177] CPU: 0 PID: 8177 Comm: syz.1.1359 Not tainted 6.1.123-syzkaller #0 [ 182.908332][ T8177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 182.910253][ T8177] Call trace: [ 182.910875][ T8177] dump_backtrace+0x1c8/0x1f4 [ 182.911798][ T8177] show_stack+0x2c/0x3c [ 182.912593][ T8177] dump_stack_lvl+0x108/0x170 [ 182.913513][ T8177] dump_stack+0x1c/0x58 [ 182.914336][ T8177] should_fail_ex+0x3c0/0x51c [ 182.915253][ T8177] __should_failslab+0xc8/0x128 [ 182.916208][ T8177] should_failslab+0x10/0x28 [ 182.917103][ T8177] __kmem_cache_alloc_node+0x80/0x388 [ 182.918168][ T8177] __kmalloc+0xc4/0x1c4 [ 182.918994][ T8177] tomoyo_encode+0x270/0x4b0 [ 182.919888][ T8177] tomoyo_realpath_from_path+0x478/0x4cc [ 182.921002][ T8177] tomoyo_path_number_perm+0x1dc/0x688 [ 182.922075][ T8177] tomoyo_file_ioctl+0x2c/0x3c [ 182.923025][ T8177] security_file_ioctl+0x80/0xbc [ 182.924005][ T8177] __arm64_sys_ioctl+0xa8/0x1c8 [ 182.924969][ T8177] invoke_syscall+0x98/0x2bc [ 182.925878][ T8177] el0_svc_common+0x138/0x258 [ 182.926809][ T8177] do_el0_svc+0x58/0x13c [ 182.927633][ T8177] el0_svc+0x58/0x168 [ 182.928422][ T8177] el0t_64_sync_handler+0x84/0xf0 [ 182.929409][ T8177] el0t_64_sync+0x18c/0x190 [ 182.963322][ T8177] ERROR: Out of memory at tomoyo_realpath_from_path. [ 183.077705][ T8187] loop2: detected capacity change from 0 to 512 [ 183.132584][ T8187] FAT-fs (loop2): bogus sectors per cluster 69 [ 183.134012][ T8187] FAT-fs (loop2): Can't find a valid FAT filesystem [ 183.147118][ T8161] loop3: detected capacity change from 0 to 32768 [ 183.221940][ T8161] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 183.341016][ T8198] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1364'. [ 183.343299][ T8161] (syz.3.1354,8161,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 183.346683][ T8200] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1364'. [ 183.346707][ T8200] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1364'. [ 183.353953][ T8161] (syz.3.1354,8161,1):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -2 [ 183.355664][ T8161] (syz.3.1354,8161,1):ocfs2_mknod:298 ERROR: status = -2 [ 183.357259][ T8161] (syz.3.1354,8161,1):ocfs2_mknod:502 ERROR: status = -2 [ 183.358709][ T8161] (syz.3.1354,8161,1):ocfs2_create:676 ERROR: status = -2 [ 183.382344][ T8206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1367'. [ 183.550685][ T4298] ocfs2: Unmounting device (7,3) on (node local) [ 183.573682][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.575471][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.576919][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.578294][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.579721][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.581346][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.616402][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.622381][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.627297][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.633584][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.638454][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.644946][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.650028][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.654925][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.666972][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.668546][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.669992][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.671535][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.691879][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.693516][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.695037][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.696560][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.708339][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.709878][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.711278][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.728599][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.730056][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.731469][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.738727][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.740198][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.741595][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.754661][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.756279][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.758109][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.762230][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.763824][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.765344][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.766733][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.768272][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.789255][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.792673][ T8220] FAULT_INJECTION: forcing a failure. [ 183.792673][ T8220] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 183.795415][ T8220] CPU: 1 PID: 8220 Comm: syz.3.1369 Not tainted 6.1.123-syzkaller #0 [ 183.797001][ T8220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 183.798857][ T8220] Call trace: [ 183.799462][ T8220] dump_backtrace+0x1c8/0x1f4 [ 183.800360][ T8220] show_stack+0x2c/0x3c [ 183.801122][ T8220] dump_stack_lvl+0x108/0x170 [ 183.802008][ T8220] dump_stack+0x1c/0x58 [ 183.802809][ T8220] should_fail_ex+0x3c0/0x51c [ 183.803850][ T8220] should_fail+0x14/0x24 [ 183.804656][ T8220] should_fail_usercopy+0x20/0x30 [ 183.805732][ T8220] ax25_rt_ioctl+0x154/0x138c [ 183.806804][ T8220] ax25_ioctl+0x8f4/0x1e28 [ 183.807738][ T8220] sock_do_ioctl+0x134/0x2dc [ 183.808757][ T8220] sock_ioctl+0x4ec/0x858 [ 183.809692][ T8220] __arm64_sys_ioctl+0x14c/0x1c8 [ 183.810743][ T8220] invoke_syscall+0x98/0x2bc [ 183.811716][ T8220] el0_svc_common+0x138/0x258 [ 183.812735][ T8220] do_el0_svc+0x58/0x13c [ 183.813586][ T8220] el0_svc+0x58/0x168 [ 183.814395][ T8220] el0t_64_sync_handler+0x84/0xf0 [ 183.815460][ T8220] el0t_64_sync+0x18c/0x190 [ 183.818355][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.818880][ T8222] loop2: detected capacity change from 0 to 1024 [ 183.819801][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.822955][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.824486][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.825940][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.832284][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.833882][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.835293][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.836830][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.848657][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.850112][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.851542][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.857063][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.858517][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.861488][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.870217][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.872506][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.874119][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.875672][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.876995][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.878655][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.880225][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.889094][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.890597][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.892993][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.894472][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.895989][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.897592][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.898957][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.908820][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.916846][ T8207] loop0: detected capacity change from 0 to 32768 [ 183.922099][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.923803][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.925239][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.926780][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.928260][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.929718][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.931236][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.937430][ T8207] (syz.0.1367,8207,1):ocfs2_verify_volume:2347 ERROR: found superblock with incorrect block size: found 4096, should be 512 [ 183.939919][ T8207] (syz.0.1367,8207,1):ocfs2_verify_volume:2385 ERROR: status = -22 [ 183.941384][ T8207] (syz.0.1367,8207,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 183.943549][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.945209][ T8207] (syz.0.1367,8207,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 183.947202][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.948567][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.949987][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.951422][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.961845][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.963415][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.964792][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.966443][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.967862][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.969251][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.970678][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 183.996330][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.002796][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.004349][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.005779][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.014581][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.016048][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.028497][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.030001][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.031371][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.039054][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.040482][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.049250][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.050743][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.052585][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.054087][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.058871][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.060436][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.078360][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.079983][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.081399][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.090113][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.091562][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.096036][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.097478][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.098881][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.110072][ T8119] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 184.121689][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.131839][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.133346][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.134795][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.136166][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.137549][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.141506][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.149015][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.150493][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.151934][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.171071][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.172721][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.174399][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.175820][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.177203][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.178656][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.180063][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.181525][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.194610][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.196130][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.197539][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.198900][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.203824][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.210535][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.219360][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.220938][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.226362][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.227770][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.229247][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.230669][ T8243] FAULT_INJECTION: forcing a failure. [ 184.230669][ T8243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.230698][ T8243] CPU: 0 PID: 8243 Comm: syz.0.1375 Not tainted 6.1.123-syzkaller #0 [ 184.230710][ T8243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 184.230716][ T8243] Call trace: [ 184.230720][ T8243] dump_backtrace+0x1c8/0x1f4 [ 184.236386][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.236840][ T8243] show_stack+0x2c/0x3c [ 184.237505][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.238403][ T8243] dump_stack_lvl+0x108/0x170 [ 184.239855][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.240653][ T8243] dump_stack+0x1c/0x58 [ 184.242105][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.242958][ T8243] should_fail_ex+0x3c0/0x51c [ 184.244568][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.245181][ T8243] should_fail+0x14/0x24 [ 184.246585][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.247462][ T8243] should_fail_usercopy+0x20/0x30 [ 184.248989][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.249836][ T8243] get_user_ifreq+0x74/0x350 [ 184.251321][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.252348][ T8243] sock_do_ioctl+0x17c/0x2dc [ 184.252364][ T8243] sock_ioctl+0x4ec/0x858 [ 184.252374][ T8243] __arm64_sys_ioctl+0x14c/0x1c8 [ 184.253795][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.254682][ T8243] invoke_syscall+0x98/0x2bc [ 184.254698][ T8243] el0_svc_common+0x138/0x258 [ 184.254710][ T8243] do_el0_svc+0x58/0x13c [ 184.254721][ T8243] el0_svc+0x58/0x168 [ 184.254731][ T8243] el0t_64_sync_handler+0x84/0xf0 [ 184.256227][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.257010][ T8243] el0t_64_sync+0x18c/0x190 [ 184.257960][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.270321][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.271737][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.273392][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.275017][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.276795][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.278454][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.280037][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.289236][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.290777][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.294373][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.299705][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.301347][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.303195][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.304727][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.306289][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.307886][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.310714][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.312547][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.314267][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.315928][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.317390][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.319041][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.321102][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.322850][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.324763][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.326358][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.328009][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.329649][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.331230][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.332896][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.334375][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.336130][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.337735][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.339328][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.340857][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.346285][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.348914][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.350470][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.352213][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.353912][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.355583][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.357206][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.358776][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.360250][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.362765][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.364335][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.365897][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.367645][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.369251][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.376859][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.379572][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.382135][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.384765][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.387409][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.391170][ T22] hid-generic 000A:FFFF:0005.0001: unknown main item tag 0x0 [ 184.406183][ T22] hid-generic 000A:FFFF:0005.0001: hidraw0: HID v0.09 Device [syz0] on syz1 [ 184.408632][ T8119] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 184.424235][ T8119] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 184.509680][ T8254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1379'. [ 184.512069][ T4307] Bluetooth: hci4: command 0x041b tx timeout [ 184.544795][ T8257] FAULT_INJECTION: forcing a failure. [ 184.544795][ T8257] name failslab, interval 1, probability 0, space 0, times 0 [ 184.547543][ T8257] CPU: 0 PID: 8257 Comm: syz.3.1381 Not tainted 6.1.123-syzkaller #0 [ 184.549186][ T8257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 184.551200][ T8257] Call trace: [ 184.551858][ T8257] dump_backtrace+0x1c8/0x1f4 [ 184.552730][ T8257] show_stack+0x2c/0x3c [ 184.553558][ T8257] dump_stack_lvl+0x108/0x170 [ 184.554437][ T8257] dump_stack+0x1c/0x58 [ 184.555326][ T8257] should_fail_ex+0x3c0/0x51c [ 184.556302][ T8257] __should_failslab+0xc8/0x128 [ 184.557314][ T8257] should_failslab+0x10/0x28 [ 184.558198][ T8257] __kmem_cache_alloc_node+0x80/0x388 [ 184.559298][ T8257] kmalloc_trace+0x48/0x94 [ 184.560298][ T8257] ax25_rt_ioctl+0xcf0/0x138c [ 184.561243][ T8257] ax25_ioctl+0x8f4/0x1e28 [ 184.562137][ T8257] sock_do_ioctl+0x134/0x2dc [ 184.563099][ T8257] sock_ioctl+0x4ec/0x858 [ 184.564039][ T8257] __arm64_sys_ioctl+0x14c/0x1c8 [ 184.565263][ T8257] invoke_syscall+0x98/0x2bc [ 184.566233][ T8257] el0_svc_common+0x138/0x258 [ 184.567270][ T8257] do_el0_svc+0x58/0x13c [ 184.568189][ T8257] el0_svc+0x58/0x168 [ 184.569064][ T8257] el0t_64_sync_handler+0x84/0xf0 [ 184.570118][ T8257] el0t_64_sync+0x18c/0x190 [ 184.583713][ T8119] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 184.602417][ T8252] loop0: detected capacity change from 0 to 8192 [ 184.649400][ T8261] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1380'. [ 184.669158][ T8149] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 184.815883][ T8267] loop3: detected capacity change from 0 to 512 [ 184.831097][ T8267] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 184.834206][ T8267] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 184.856299][ T8267] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 184.859809][ T8267] EXT4-fs (loop3): 1 truncate cleaned up [ 184.861370][ T8267] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 185.121450][ T8274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1386'. [ 185.166152][ T4298] EXT4-fs (loop3): unmounting filesystem. [ 185.238990][ T8287] FAULT_INJECTION: forcing a failure. [ 185.238990][ T8287] name failslab, interval 1, probability 0, space 0, times 0 [ 185.241591][ T8287] CPU: 1 PID: 8287 Comm: syz.1.1389 Not tainted 6.1.123-syzkaller #0 [ 185.243192][ T8287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 185.245176][ T8287] Call trace: [ 185.245816][ T8287] dump_backtrace+0x1c8/0x1f4 [ 185.246729][ T8287] show_stack+0x2c/0x3c [ 185.247544][ T8287] dump_stack_lvl+0x108/0x170 [ 185.248462][ T8287] dump_stack+0x1c/0x58 [ 185.249271][ T8287] should_fail_ex+0x3c0/0x51c [ 185.250195][ T8287] __should_failslab+0xc8/0x128 [ 185.251148][ T8287] should_failslab+0x10/0x28 [ 185.252047][ T8287] __kmem_cache_alloc_node+0x80/0x388 [ 185.253092][ T8287] kmalloc_trace+0x48/0x94 [ 185.253950][ T8287] __request_module+0x364/0xad8 [ 185.254886][ T8287] dev_load+0x194/0x1ec [ 185.255696][ T8287] dev_ioctl+0x4c0/0xd34 [ 185.256558][ T8287] sock_do_ioctl+0x1dc/0x2dc [ 185.257450][ T8287] sock_ioctl+0x4ec/0x858 [ 185.258291][ T8287] __arm64_sys_ioctl+0x14c/0x1c8 [ 185.259260][ T8287] invoke_syscall+0x98/0x2bc [ 185.260137][ T8287] el0_svc_common+0x138/0x258 [ 185.261094][ T8287] do_el0_svc+0x58/0x13c [ 185.261905][ T8287] el0_svc+0x58/0x168 [ 185.262669][ T8287] el0t_64_sync_handler+0x84/0xf0 [ 185.263641][ T8287] el0t_64_sync+0x18c/0x190 [ 185.323208][ T8285] loop3: detected capacity change from 0 to 4096 [ 185.324983][ T8285] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 185.338369][ T8285] ntfs: (device loop3): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 185.340325][ T8285] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 185.358432][ T8285] ntfs: volume version 3.1. [ 185.410642][ T8119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.427757][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.429627][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.446470][ T8119] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.489305][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.491329][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.493305][ T5058] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.494697][ T5058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.531290][ T8297] loop1: detected capacity change from 0 to 2048 [ 185.533949][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.543493][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.545575][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.552083][ T5058] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.553587][ T5058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.559742][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.567552][ T8301] FAULT_INJECTION: forcing a failure. [ 185.567552][ T8301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.569766][ T4294] cgroup: fork rejected by pids controller in [ 185.570437][ T8301] CPU: 1 PID: 8301 Comm: syz.3.1393 Not tainted 6.1.123-syzkaller #0 [ 185.570563][ T4294] /syz0 [ 185.571601][ T8301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 185.575846][ T8301] Call trace: [ 185.576472][ T8301] dump_backtrace+0x1c8/0x1f4 [ 185.577377][ T8301] show_stack+0x2c/0x3c [ 185.578190][ T8301] dump_stack_lvl+0x108/0x170 [ 185.579084][ T8301] dump_stack+0x1c/0x58 [ 185.579943][ T8301] should_fail_ex+0x3c0/0x51c [ 185.580869][ T8301] should_fail+0x14/0x24 [ 185.581672][ T8301] should_fail_usercopy+0x20/0x30 [ 185.582627][ T8301] simple_read_from_buffer+0xd4/0x248 [ 185.582647][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.583659][ T8301] proc_fail_nth_read+0x198/0x234 [ 185.586114][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.586899][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.587693][ T8301] vfs_read+0x280/0x8b4 [ 185.590021][ T8301] ksys_read+0x15c/0x26c [ 185.590820][ T8301] __arm64_sys_read+0x7c/0x90 [ 185.591816][ T8301] invoke_syscall+0x98/0x2bc [ 185.592709][ T8301] el0_svc_common+0x138/0x258 [ 185.593600][ T8301] do_el0_svc+0x58/0x13c [ 185.594445][ T8301] el0_svc+0x58/0x168 [ 185.595249][ T8301] el0t_64_sync_handler+0x84/0xf0 [ 185.596184][ T8301] el0t_64_sync+0x18c/0x190 [ 185.601401][ T8119] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 185.607619][ T4294] [ 185.612761][ T8119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.615656][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.617637][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.620018][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.633148][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.636350][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.648223][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.650246][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.660924][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.669041][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1392'. [ 185.689025][ T4357] device hsr_slave_0 left promiscuous mode [ 185.730442][ T4357] device hsr_slave_1 left promiscuous mode [ 185.782063][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.783642][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.793311][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.794825][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.796851][ T4357] device bridge_slave_1 left promiscuous mode [ 185.798214][ T4357] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.812654][ T8313] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1396'. [ 185.853602][ T4357] device bridge_slave_0 left promiscuous mode [ 185.855087][ T4357] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.002087][ T4357] device veth1_macvtap left promiscuous mode [ 186.003516][ T4357] device veth0_macvtap left promiscuous mode [ 186.004817][ T4357] device veth1_vlan left promiscuous mode [ 186.005916][ T4357] device veth0_vlan left promiscuous mode [ 186.635437][ T4297] Bluetooth: hci4: command 0x040f tx timeout [ 187.393020][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.394284][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.458331][ T8329] loop3: detected capacity change from 0 to 32768 [ 187.461649][ T8329] (syz.3.1401,8329,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 187.464617][ T8329] (syz.3.1401,8329,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 187.480671][ T8329] JBD2: Ignoring recovery information on journal [ 187.503732][ T8329] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 187.519207][ T8329] [ 187.519782][ T8329] ====================================================== [ 187.521260][ T8329] WARNING: possible circular locking dependency detected [ 187.522733][ T8329] 6.1.123-syzkaller #0 Not tainted [ 187.523811][ T8329] ------------------------------------------------------ [ 187.525142][ T8329] syz.3.1401/8329 is trying to acquire lock: [ 187.526363][ T8329] ffff0000f4ea9808 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_xattr_set+0xb80/0x1478 [ 187.528828][ T8329] [ 187.528828][ T8329] but task is already holding lock: [ 187.530468][ T8329] ffff0000f4e33ff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x4e4/0x1478 [ 187.532459][ T8329] [ 187.532459][ T8329] which lock already depends on the new lock. [ 187.532459][ T8329] [ 187.534655][ T8329] [ 187.534655][ T8329] the existing dependency chain (in reverse order) is: [ 187.536536][ T8329] [ 187.536536][ T8329] -> #2 (&oi->ip_xattr_sem){++++}-{3:3}: [ 187.538039][ T8329] down_read+0x64/0x308 [ 187.538997][ T8329] ocfs2_init_acl+0x2c8/0x764 [ 187.540136][ T8329] ocfs2_mknod+0x1574/0x2560 [ 187.541182][ T8329] ocfs2_create+0x1a8/0x560 [ 187.542238][ T8329] path_openat+0xeac/0x2548 [ 187.543262][ T8329] do_filp_open+0x1bc/0x3cc [ 187.544200][ T8329] do_sys_openat2+0x128/0x3e0 [ 187.545272][ T8329] __arm64_sys_openat+0x1f0/0x240 [ 187.546526][ T8329] invoke_syscall+0x98/0x2bc [ 187.547543][ T8329] el0_svc_common+0x138/0x258 [ 187.548585][ T8329] do_el0_svc+0x58/0x13c [ 187.549642][ T8329] el0_svc+0x58/0x168 [ 187.550523][ T8329] el0t_64_sync_handler+0x84/0xf0 [ 187.551646][ T8329] el0t_64_sync+0x18c/0x190 [ 187.552659][ T8329] [ 187.552659][ T8329] -> #1 (jbd2_handle){++++}-{0:0}: [ 187.554178][ T8329] jbd2_journal_lock_updates+0xbc/0x324 [ 187.555385][ T8329] __ocfs2_flush_truncate_log+0x2a0/0x1260 [ 187.556699][ T8329] ocfs2_flush_truncate_log+0x4c/0x6c [ 187.557872][ T8329] ocfs2_sync_fs+0x110/0x31c [ 187.558966][ T8329] sync_filesystem+0x1a0/0x218 [ 187.559993][ T8329] generic_shutdown_super+0x70/0x328 [ 187.561153][ T8329] kill_block_super+0x70/0xdc [ 187.562209][ T8329] deactivate_locked_super+0xac/0x124 [ 187.563377][ T8329] deactivate_super+0xf0/0x110 [ 187.564450][ T8329] cleanup_mnt+0x394/0x41c [ 187.565499][ T8329] __cleanup_mnt+0x20/0x30 [ 187.566556][ T8329] task_work_run+0x240/0x2f0 [ 187.567669][ T8329] do_notify_resume+0x2080/0x2cb8 [ 187.568760][ T8329] el0_svc+0x9c/0x168 [ 187.569690][ T8329] el0t_64_sync_handler+0x84/0xf0 [ 187.570852][ T8329] el0t_64_sync+0x18c/0x190 [ 187.571886][ T8329] [ 187.571886][ T8329] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 187.574151][ T8329] __lock_acquire+0x3338/0x7680 [ 187.575259][ T8329] lock_acquire+0x26c/0x7cc [ 187.576218][ T8329] down_write+0x5c/0x88 [ 187.577187][ T8329] ocfs2_xattr_set+0xb80/0x1478 [ 187.578259][ T8329] ocfs2_xattr_user_set+0xc0/0xe8 [ 187.579409][ T8329] __vfs_setxattr+0x388/0x3a4 [ 187.580501][ T8329] __vfs_setxattr_noperm+0x110/0x528 [ 187.581678][ T8329] __vfs_setxattr_locked+0x1ec/0x218 [ 187.582839][ T8329] vfs_setxattr+0x1a8/0x344 [ 187.583837][ T8329] setxattr+0x230/0x294 [ 187.584772][ T8329] path_setxattr+0x17c/0x258 [ 187.585855][ T8329] __arm64_sys_setxattr+0xbc/0xd8 [ 187.587006][ T8329] invoke_syscall+0x98/0x2bc [ 187.587981][ T8329] el0_svc_common+0x138/0x258 [ 187.589029][ T8329] do_el0_svc+0x58/0x13c [ 187.590042][ T8329] el0_svc+0x58/0x168 [ 187.590993][ T8329] el0t_64_sync_handler+0x84/0xf0 [ 187.592184][ T8329] el0t_64_sync+0x18c/0x190 [ 187.593195][ T8329] [ 187.593195][ T8329] other info that might help us debug this: [ 187.593195][ T8329] [ 187.595264][ T8329] Chain exists of: [ 187.595264][ T8329] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 --> jbd2_handle --> &oi->ip_xattr_sem [ 187.595264][ T8329] [ 187.598550][ T8329] Possible unsafe locking scenario: [ 187.598550][ T8329] [ 187.600011][ T8329] CPU0 CPU1 [ 187.601076][ T8329] ---- ---- [ 187.602247][ T8329] lock(&oi->ip_xattr_sem); [ 187.603176][ T8329] lock(jbd2_handle); [ 187.604508][ T8329] lock(&oi->ip_xattr_sem); [ 187.605968][ T8329] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 187.607404][ T8329] [ 187.607404][ T8329] *** DEADLOCK *** [ 187.607404][ T8329] [ 187.609097][ T8329] 3 locks held by syz.3.1401/8329: [ 187.610060][ T8329] #0: ffff0000f82a0460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 187.611950][ T8329] #1: ffff0000f4e342c8 (&type->i_mutex_dir_key#8){+.+.}-{3:3}, at: vfs_setxattr+0x17c/0x344 [ 187.613924][ T8329] #2: ffff0000f4e33ff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x4e4/0x1478 [ 187.615929][ T8329] [ 187.615929][ T8329] stack backtrace: [ 187.617136][ T8329] CPU: 0 PID: 8329 Comm: syz.3.1401 Not tainted 6.1.123-syzkaller #0 [ 187.618780][ T8329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 187.620697][ T8329] Call trace: [ 187.621321][ T8329] dump_backtrace+0x1c8/0x1f4 [ 187.622265][ T8329] show_stack+0x2c/0x3c [ 187.623146][ T8329] dump_stack_lvl+0x108/0x170 [ 187.624042][ T8329] dump_stack+0x1c/0x58 [ 187.624884][ T8329] print_circular_bug+0x150/0x1b8 [ 187.625941][ T8329] check_noncircular+0x2cc/0x378 [ 187.626954][ T8329] __lock_acquire+0x3338/0x7680 [ 187.627936][ T8329] lock_acquire+0x26c/0x7cc [ 187.628828][ T8329] down_write+0x5c/0x88 [ 187.629642][ T8329] ocfs2_xattr_set+0xb80/0x1478 [ 187.630676][ T8329] ocfs2_xattr_user_set+0xc0/0xe8 [ 187.631660][ T8329] __vfs_setxattr+0x388/0x3a4 [ 187.632565][ T8329] __vfs_setxattr_noperm+0x110/0x528 [ 187.633633][ T8329] __vfs_setxattr_locked+0x1ec/0x218 [ 187.634701][ T8329] vfs_setxattr+0x1a8/0x344 [ 187.635668][ T8329] setxattr+0x230/0x294 [ 187.636476][ T8329] path_setxattr+0x17c/0x258 [ 187.637486][ T8329] __arm64_sys_setxattr+0xbc/0xd8 [ 187.638480][ T8329] invoke_syscall+0x98/0x2bc [ 187.639456][ T8329] el0_svc_common+0x138/0x258 [ 187.640427][ T8329] do_el0_svc+0x58/0x13c [ 187.641270][ T8329] el0_svc+0x58/0x168 [ 187.642036][ T8329] el0t_64_sync_handler+0x84/0xf0 [ 187.643107][ T8329] el0t_64_sync+0x18c/0x190 [ 188.681934][ T4297] Bluetooth: hci4: command 0x0419 tx timeout [ 188.762565][ T4357] team0 (unregistering): Port device team_slave_1 removed [ 188.932495][ T4357] team0 (unregistering): Port device team_slave_0 removed [ 189.092514][ T4357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.292406][ T4357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.613823][ T4357] bond0 (unregistering): Released all slaves [ 191.872849][ T4294] bond0: (slave syz_tun): Releasing backup interface [ 191.920790][ T8297] netlink: 'syz.1.1392': attribute type 10 has an invalid length. [ 191.922481][ T8297] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1392'. [ 191.952063][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.953731][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.956327][ T4298] ocfs2: Unmounting device (7,3) on (node local) [ 191.976551][ T8119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.119836][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 192.121623][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.127073][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.128992][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.131031][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.133562][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.136362][ T8119] device veth0_vlan entered promiscuous mode [ 192.140964][ T8119] device veth1_vlan entered promiscuous mode [ 192.150069][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 192.151955][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 192.153764][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.155624][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.159560][ T8119] device veth0_macvtap entered promiscuous mode [ 192.162977][ T8119] device veth1_macvtap entered promiscuous mode [ 192.169746][ T8119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.171210][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 192.175994][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 192.177827][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.182994][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.186325][ T8119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.189067][ T8119] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.190722][ T8119] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.192870][ T8119] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.194554][ T8119] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.196957][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.198907][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.211544][ T8119] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 192.223485][ T5066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.225054][ T5066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.226522][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 192.231313][ T8119] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 192.244941][ T5066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.246487][ T5066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.247995][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 194.992826][ T4357] device hsr_slave_0 left promiscuous mode [ 195.053585][ T4357] device hsr_slave_1 left promiscuous mode [ 195.161941][ T4357] device bridge_slave_1 left promiscuous mode [ 195.163377][ T4357] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.204570][ T4357] device bridge_slave_0 left promiscuous mode [ 195.205894][ T4357] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.004672][ T4357] team0 (unregistering): Port device team_slave_1 removed [ 197.184681][ T4357] team0 (unregistering): Port device team_slave_0 removed [ 197.365256][ T4357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface