last executing test programs: 2m48.520346407s ago: executing program 0 (id=668): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYRES32=r6, @ANYBLOB="2e003300d0000000ffffffffffff080211000000505050505050"], 0x4c}}, 0x0) 2m48.355431865s ago: executing program 0 (id=670): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newtfilter={0x80, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r5, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_EMATCHES={0x18, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0xfffe}, {0x0, 0x5}}}]}]}, @TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) 2m48.197962517s ago: executing program 0 (id=672): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_mpls={0x30, 0xb, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x0) 2m47.432985977s ago: executing program 0 (id=674): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000780)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r5, 0x5, &(0x7f0000000200)={0x1}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000001280)={&(0x7f0000000800)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x6, 0x20, 0x2, 0x120, 0x0, 0xc0, 0x0, 0x0, 0x4, 0x8}}, &(0x7f00000001c0)={0x18, 0x0, 0x7fffffffffffffff, {0x7}}, &(0x7f0000000880)={0x18, 0x0, 0x4, {0x6}}, &(0x7f00000008c0)={0x18, 0xfffffffffffffffe, 0x1, {0x7}}, &(0x7f0000000900)={0x18, 0x0, 0x3, {0x3}}, &(0x7f0000000940)={0x28, 0x0, 0x81, {{0xc, 0x0, 0x0, r4}}}, &(0x7f0000000980)={0x60, 0x0, 0x9000000, {{0xfffffffffffff001, 0x2, 0x0, 0x2, 0x15, 0x7ff, 0x0, 0x8000}}}, &(0x7f0000000a00)={0x18, 0xffffffffffffffda, 0xdb, {0xb}}, &(0x7f0000000a40)={0x11, 0x0, 0xcf, {'\x00'}}, &(0x7f0000000a80)={0x20, 0x729b0469527c15f0, 0x0, {0x0, 0x10}}, &(0x7f0000000c00)={0x78, 0x0, 0x6, {0xc92, 0x9, 0x0, {0x2, 0x0, 0x9, 0xa3b9, 0xca92, 0x0, 0x9, 0x1789, 0x84f, 0x2000, 0x9, 0x0, r3, 0x6, 0x3}}}, &(0x7f0000000c80)={0x90, 0x0, 0xb, {0x5, 0x2, 0xe, 0x4, 0x4, 0x4, {0x6, 0xd, 0x1, 0x6, 0x0, 0x7, 0x2, 0x7, 0x0, 0xc000, 0xe1, r2, r3, 0x8001, 0x7}}}, &(0x7f0000000d40)={0x88, 0x0, 0x6, [{0x6, 0x3, 0x0, 0x5}, {0x0, 0x7ff, 0x8, 0x6, '\xe8\xda\xb9\x924\xbb1.'}, {0x5, 0x1000, 0x21, 0xffffffff, 'abcdefghijklmnopqrstuvwxyz0123456'}]}, &(0x7f0000000e00)={0x210, 0x0, 0x6, [{{0x5, 0x1, 0x5, 0x8, 0x6, 0x2, {0x2, 0x0, 0x2, 0xfff, 0x9, 0x800, 0x0, 0x5, 0x4, 0x6000, 0x6, r2, r3, 0x40, 0x1}}, {0x3, 0x1, 0x3, 0x8, '+\xb0{'}}, {{0x6, 0x2, 0x7, 0x3, 0x5, 0xb, {0x4, 0x7, 0x3, 0x3, 0x7, 0x1, 0x10000, 0x1, 0x6f95, 0x8000, 0xf3, r2, r3, 0x2, 0xfff}}, {0x5, 0x10, 0x21, 0x6, 'abcdefghijklmnopqrstuvwxyz0123456'}}, {{0x5, 0x2, 0x5e5, 0x5, 0x9, 0x7fffffff, {0x2, 0x10000000200000, 0x2, 0x8, 0x10001, 0x75, 0xfffffea3, 0x6, 0x8, 0x6000, 0x3, r2, r3, 0x1ff, 0xfffffffc}}, {0x3, 0x7, 0x1, 0x9, '\x00'}}]}, &(0x7f0000001040)={0xa0, 0xffffffffffffffda, 0x80, {{0x2, 0x0, 0x7, 0x8, 0xc, 0x4f, {0x2, 0x2, 0xe, 0x4, 0x1000, 0x81, 0x1400, 0x6cc8, 0x7, 0xc000, 0x5, r2, r3, 0x7, 0x2}}, {0x0, 0x3}}}, &(0x7f0000001100)={0x20, 0xfffffffffffffff5, 0xd266, {0x3, 0x4, 0x200, 0x6}}, &(0x7f0000001140)={0x130, 0x0, 0x5000000, {0x6, 0x4, 0x0, '\x00', {0x80, 0x2d, 0x1d, 0x9, r2, r3, 0x6000, '\x00', 0x8000000000000001, 0x1, 0x8, 0x5, {0x8, 0x15dc0000}, {0x7f, 0xfffffff8}, {0x7fff}, {0x7f, 0x4}, 0x0, 0xfffffffa, 0x5, 0x7fffffff}}}}) 2m44.260109877s ago: executing program 0 (id=715): r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = open(0x0, 0x0, 0x0) mkdirat(r4, &(0x7f0000000100)='./control\x00', 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x0) 2m43.611585645s ago: executing program 0 (id=724): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x1a2, &(0x7f0000000280)="$eJzs0L9rE2Ecx/H397nLjwpVouJQwQYsnheqyV3VwSk4RciBg4tg0JDGppio6WWwpYUuUpBq/wWd6qiCTiIKzsVBcNBz6Sa9oTiIg0Tu8kTwb/B5wd3nvh+453l4OmE/zAG/91dbVElZHOQjgg1My6hTapSv9fxd59YouKTnTZ3PdE6Fyyu3m91ue6l4sUjhnwL4kXZ/q/AFxxSxUEU+76+2mnIzYFilp+YDCnVKj7Aa9N3HTNmTHL2BxdDZ5LKiL04dDpUHvXvlcHnlzGKvudBeaN/x/bkLlXOVynm/fGux2668QtyHonjCGm5ALmDCXSPT4MGOfYBZQdyOiiwpxWQbbO1Yp0/Oxih3jyHCOycm99XuFNVVTpG/nhy+xhHhKVbATJ0JhU26UQ25ol6KZ3+yf2YU+XXLOtu6253fuKbkV3a7Knt58XbJOB5+yWMuuRoO856NiJmIWsR2xO43puVNssv4Xu315P1cT8c5AVnuNweDJS8LH8QJ8JOnAJPpcio9VwHe6n908GX8YRiGYRiGYRiGYfwH/gQAAP//lKZkGA==") bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0xfffffffffffffe72) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8953, &(0x7f0000000280)) 2m43.500092493s ago: executing program 32 (id=724): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x1a2, &(0x7f0000000280)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0xfffffffffffffe72) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8953, &(0x7f0000000280)) 2m38.167931436s ago: executing program 5 (id=781): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = dup(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) 2m38.102016111s ago: executing program 5 (id=783): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@errors_remount}, {@inode_readahead_blks}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000080)='./file2\x00', 0x80000100) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x440, 0x160) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="08000000020000000f"], 0x0) 2m37.967043949s ago: executing program 5 (id=785): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 2m37.583016675s ago: executing program 5 (id=793): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000f00)=ANY=[@ANYBLOB="6c617374626c6f636b3d30303030303030303030303030303030303030302c756d61736b3d30303030303030303030303030303030303030303030302c756e64656c6574652c6c6f6e6761642c73686f727461642c7569643d666f726765742c756e64656c6574652c696f636861727365743d757466382c73686f727461642c696f636861727365743d64656661756c742c7569643d666f726765742c6e6f7374726963742c73657373696f6e3d30303030303030303030303030303030303030302c706172746974696f6e3d30303030303030303030303030303030303030362c00b2e01f5c0b5c8fb2623d8f888e41dfceb3ecf959d23d90b071660660b17884bd109d37086024cf83fa"], 0x2, 0xc2d, &(0x7f0000001040)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 2m37.345933575s ago: executing program 5 (id=798): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x8, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x0, 0x2000, {0x23}}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) 2m36.695386305s ago: executing program 5 (id=802): semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) setresuid(0xee01, 0x0, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100) r1 = socket(0x25, 0x80000, 0x8) keyctl$setperm(0x5, 0x0, 0x2042000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00'}) semop(0x0, &(0x7f00000000c0)=[{}, {}], 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000000b0601020000008000000000030000000900020073797a3000000000050001000700000004000780"], 0x2c}}, 0x0) semop(0x0, &(0x7f0000000180)=[{0x4, 0x100}], 0x1) semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f00000002c0)=""/102) semget$private(0x0, 0x2, 0x100) semctl$GETZCNT(0x0, 0x3, 0xf, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x1070c0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f00000002c0)={0xc, r7}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r4, 0x3ba0, &(0x7f0000000400)={0x48, 0xb, r5, 0x0, r7}) socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m36.602440837s ago: executing program 33 (id=802): semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) setresuid(0xee01, 0x0, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100) r1 = socket(0x25, 0x80000, 0x8) keyctl$setperm(0x5, 0x0, 0x2042000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00'}) semop(0x0, &(0x7f00000000c0)=[{}, {}], 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000000b0601020000008000000000030000000900020073797a3000000000050001000700000004000780"], 0x2c}}, 0x0) semop(0x0, &(0x7f0000000180)=[{0x4, 0x100}], 0x1) semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f00000002c0)=""/102) semget$private(0x0, 0x2, 0x100) semctl$GETZCNT(0x0, 0x3, 0xf, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x1070c0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f00000002c0)={0xc, r7}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r4, 0x3ba0, &(0x7f0000000400)={0x48, 0xb, r5, 0x0, r7}) socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m5.937323479s ago: executing program 2 (id=916): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509", 0x4e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1001}) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2000) 1m35.44741287s ago: executing program 2 (id=916): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509", 0x4e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1001}) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2000) 1m21.77412378s ago: executing program 2 (id=916): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509", 0x4e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1001}) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2000) 57.746019805s ago: executing program 2 (id=916): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509", 0x4e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1001}) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2000) 46.853378358s ago: executing program 2 (id=916): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509", 0x4e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1001}) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2000) 23.142593945s ago: executing program 2 (id=916): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509", 0x4e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1001}) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2000) 14.50672257s ago: executing program 4 (id=1683): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r1, &(0x7f0000000000)='2\x00', 0x2) 2.273609422s ago: executing program 4 (id=1713): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2.259299408s ago: executing program 1 (id=1714): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d00010000000000000000000a001000010000000000f000"], 0x1c}}, 0x0) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) write(r4, &(0x7f0000000040)="05000000010000", 0x7) 2.163792855s ago: executing program 4 (id=1716): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x700, 0x0}, 0x0) 2.079675797s ago: executing program 1 (id=1718): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2], 0xb4}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.956103178s ago: executing program 1 (id=1721): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x2, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6ac6acd41ff800"}}, 0x48}}, 0x20000400) sendmsg$can_bcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000008001000000000018"], 0x48}}, 0x0) 1.847313386s ago: executing program 1 (id=1723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1.768933003s ago: executing program 1 (id=1724): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000e00), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3332be2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r5, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c0007"], 0x40c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7, 0x0, 0x2}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r9, 0x0, 0xcc, 0x0, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbf9, {0x5}}, 0x14}}, 0x0) ioctl$sock_bt_hci(r6, 0x800448d3, &(0x7f00000000c0)) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000e"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x1, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r3, 0x7, 0x0, 0x0, {{0x8}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000040)=0x1000, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 1.539525537s ago: executing program 1 (id=1728): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d00010000000000000000000a001000010000000000f000"], 0x1c}}, 0x0) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) write(r4, &(0x7f0000000040)="05000000010000", 0x7) 1.175596482s ago: executing program 3 (id=1734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1.141718349s ago: executing program 3 (id=1736): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@delchain={0x24, 0x66, 0xf31, 0x2, 0x0, {0x0, 0x0, 0x0, r3, {0x9, 0x2}, {0x0, 0xffff}, {0x6, 0x6}}}, 0x24}}, 0x0) 1.137385843s ago: executing program 6 (id=1737): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.056809848s ago: executing program 4 (id=1738): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000600)={0xfffffffc, 0xd, 0x2, {0xb, @win={{0x0, 0x2f2f502c, 0x0, 0x4}, 0x0, 0x6cb, 0x0, 0x0, 0x0}}, 0x1}) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x20, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf7}]}]}, 0x20}}, 0x0) dup3(r2, r0, 0x80000) 1.05598055s ago: executing program 6 (id=1739): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000", @ANYRES16=0x0, @ANYBLOB="010000000000000000009f000000040001"], 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 1.03496358s ago: executing program 3 (id=1740): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001100)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 1.014649088s ago: executing program 4 (id=1741): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffe, 0x0, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, 0xfffffffffffffffe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) read(r4, 0x0, 0x0) r5 = syz_open_dev$vivid(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000001c0)={0x3, 0xa07, 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x52, @empty, @mcast1, 0x0, 0x8000, 0x101}}) openat$vnet(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) 953.52171ms ago: executing program 6 (id=1742): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x1404, 0x8, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="adffa88800000000600012800b0001006772657461700000500002800800140006000000050016000200000006000e0000000000060018000400000004"], 0x90}, 0x1, 0x0, 0x0, 0x4001050}, 0x4048884) 877.410338ms ago: executing program 6 (id=1743): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2], 0xb4}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 835.995178ms ago: executing program 3 (id=1744): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 591.90362ms ago: executing program 6 (id=1745): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@txtime={{0x14, 0x1, 0x3d, 0x3}}], 0x14}}], 0x1, 0x8840) 91.269549ms ago: executing program 3 (id=1746): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @link_local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xf}, {0x0, 0xc}, {0x6, 0x1}}}, 0x24}}, 0x0) 50.09981ms ago: executing program 6 (id=1747): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 43.142469ms ago: executing program 4 (id=1748): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="67d8908a807d9e246743bff362e38a733b2400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb78160", 0x5e}, {&(0x7f0000000900)="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", 0x423}], 0x2, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=1749): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x700, 0x0}, 0x0) kernel console output (not intermixed with test programs): with driver cdc_acm failed with error -22 [ 104.139404][ T8010] capability: warning: `syz.1.542' uses deprecated v2 capabilities in a way that may be insecure [ 104.293237][ T6434] usb 1-1: USB disconnect, device number 2 [ 104.319775][ T8025] netlink: 'syz.2.548': attribute type 1 has an invalid length. [ 104.410626][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.552'. [ 105.529753][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.562'. [ 105.537147][ T8060] netlink: 'syz.2.563': attribute type 1 has an invalid length. [ 106.602989][ T8096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.576'. [ 106.647318][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'. [ 106.663718][ T8100] netlink: 'syz.1.577': attribute type 1 has an invalid length. [ 106.974997][ T8115] loop4: detected capacity change from 0 to 512 [ 107.012742][ T8115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.036724][ T6455] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.413369][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.590'. [ 107.500873][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 107.554326][ T8136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.592'. [ 107.581386][ T8146] bridge0: port 3(syz_tun) entered blocking state [ 107.583546][ T8146] bridge0: port 3(syz_tun) entered disabled state [ 107.588016][ T8146] syz_tun: entered allmulticast mode [ 107.591721][ T8146] syz_tun: entered promiscuous mode [ 107.602400][ T8146] bridge0: port 3(syz_tun) entered blocking state [ 107.604823][ T8146] bridge0: port 3(syz_tun) entered forwarding state [ 107.677942][ T8148] netlink: 48 bytes leftover after parsing attributes in process `syz.4.596'. [ 107.716770][ T8155] loop3: detected capacity change from 0 to 128 [ 107.744350][ T8155] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.750995][ T8158] netlink: 'syz.2.599': attribute type 1 has an invalid length. [ 107.876995][ T8164] netlink: 32 bytes leftover after parsing attributes in process `syz.1.603'. [ 107.913830][ T6450] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.631468][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.604'. [ 108.658612][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.606'. [ 108.793825][ T8193] netlink: 48 bytes leftover after parsing attributes in process `syz.4.613'. [ 108.911240][ T8207] loop4: detected capacity change from 0 to 1024 [ 108.931423][ T8207] hfsplus: xattr search failed [ 109.654121][ T8267] loop2: detected capacity change from 0 to 16 [ 110.542337][ T8267] erofs (device loop2): mounted with root inode @ nid 36. [ 110.563186][ T8264] syz.2.624: attempt to access beyond end of device [ 110.563186][ T8264] loop2: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 111.325736][ T8321] loop2: detected capacity change from 0 to 2048 [ 111.367738][ T8321] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.678869][ T8357] loop1: detected capacity change from 0 to 256 [ 111.680987][ T8357] exfat: Bad value for 'uid' [ 111.682297][ T8357] exfat: Bad value for 'uid' [ 111.717527][ T8362] loop2: detected capacity change from 0 to 128 [ 111.720675][ T8357] __nla_validate_parse: 6 callbacks suppressed [ 111.720687][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.642'. [ 111.740742][ T8362] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.808397][ T6443] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.815590][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'. [ 111.955067][ T6641] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 112.114363][ T6641] usb 1-1: unable to get BOS descriptor or descriptor too short [ 112.117543][ T6641] usb 1-1: not running at top speed; connect to a high speed hub [ 112.120969][ T6641] usb 1-1: config 219 has an invalid descriptor of length 0, skipping remainder of the config [ 112.123840][ T6641] usb 1-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 112.141182][ T6641] usb 1-1: config 219 interface 0 has no altsetting 0 [ 112.143614][ T6641] usb 1-1: config 219 interface 0 has no altsetting 1 [ 112.159994][ T6641] usb 1-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 112.164254][ T6641] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.175081][ T6641] usb 1-1: Product: syz [ 112.179841][ T6641] usb 1-1: Manufacturer: syz [ 112.181116][ T6641] usb 1-1: SerialNumber: syz [ 112.484956][ T6641] snd-usb-audio 1-1:219.0: probe with driver snd-usb-audio failed with error -22 [ 112.490944][ T6641] usb 1-1: USB disconnect, device number 3 [ 112.503449][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 112.777420][ T7540] udevd[7540]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:219.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.363062][ T8435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.409230][ T8435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.423344][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'. [ 114.254325][ T8445] loop0: detected capacity change from 0 to 128 [ 114.283749][ T8445] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.646915][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.682'. [ 114.897734][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.685'. [ 115.056214][ T8485] loop1: detected capacity change from 0 to 512 [ 115.062605][ T8487] loop2: detected capacity change from 0 to 128 [ 115.151385][ T8485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.209849][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.408277][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'. [ 115.465425][ T8504] loop1: detected capacity change from 0 to 128 [ 115.647960][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.697'. [ 115.773012][ T8515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.781082][ T8515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.503855][ T8520] loop2: detected capacity change from 0 to 1024 [ 116.533540][ T8520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.669760][ T8530] loop4: detected capacity change from 0 to 1024 [ 116.709255][ T8530] hfsplus: xattr search failed [ 116.744819][ T8520] usb usb8: usbfs: process 8520 (syz.2.701) did not claim interface 6 before use [ 116.789051][ T6443] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.874245][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.710'. [ 116.902994][ T8543] loop2: detected capacity change from 0 to 128 [ 117.393916][ T6444] EXT4-fs error (device loop0): ext4_readdir:221: inode #11: comm syz-executor: path /132/file0/lost+found: directory fails checksum at offset 1024 [ 117.400884][ T6444] EXT4-fs error (device loop0): ext4_readdir:221: inode #11: comm syz-executor: path /132/file0/lost+found: directory fails checksum at offset 8192 [ 117.408440][ T6444] EXT4-fs error (device loop0): ext4_empty_dir:3124: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 117.413885][ T6444] EXT4-fs error (device loop0): ext4_readdir:221: inode #11: comm syz-executor: path /132/file0/lost+found: directory fails checksum at offset 1024 [ 117.418512][ T6444] EXT4-fs error (device loop0): ext4_readdir:221: inode #11: comm syz-executor: path /132/file0/lost+found: directory fails checksum at offset 8192 [ 117.422934][ T6444] EXT4-fs error (device loop0): ext4_empty_dir:3124: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 117.428007][ T6444] EXT4-fs error (device loop0): ext4_readdir:221: inode #11: comm syz-executor: path /132/file0/lost+found: directory fails checksum at offset 1024 [ 117.432320][ T6444] EXT4-fs error (device loop0): ext4_readdir:221: inode #11: comm syz-executor: path /132/file0/lost+found: directory fails checksum at offset 8192 [ 117.439218][ T6444] EXT4-fs error (device loop0): ext4_empty_dir:3124: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 117.443042][ T6444] EXT4-fs error (device loop0): ext4_readdir:221: inode #11: comm syz-executor: path /132/file0/lost+found: directory fails checksum at offset 1024 [ 117.806363][ T6444] bridge0: port 3(syz_tun) entered disabled state [ 117.861701][ T6444] syz_tun (unregistering): left allmulticast mode [ 117.863594][ T6444] syz_tun (unregistering): left promiscuous mode [ 117.873420][ T6444] bridge0: port 3(syz_tun) entered disabled state [ 117.940755][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'. [ 117.965659][ T6444] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.052532][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'. [ 118.063665][ T8570] loop3: detected capacity change from 0 to 128 [ 118.296095][ T6459] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.299845][ T6459] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.302439][ T6459] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.316982][ T6459] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.319881][ T6459] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 118.322676][ T6459] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.946316][ T8582] chnl_net:caif_netlink_parms(): no params data found [ 119.037782][ T8582] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.044216][ T8582] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.053247][ T8582] bridge_slave_0: entered allmulticast mode [ 119.064779][ T8582] bridge_slave_0: entered promiscuous mode [ 119.082359][ T8582] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.091158][ T8582] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.093342][ T8582] bridge_slave_1: entered allmulticast mode [ 119.107208][ T8582] bridge_slave_1: entered promiscuous mode [ 119.148098][ T8582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.169415][ T8582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.231504][ T8616] loop4: detected capacity change from 0 to 128 [ 119.231895][ T8582] team0: Port device team_slave_0 added [ 119.239903][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.735'. [ 119.245587][ T8582] team0: Port device team_slave_1 added [ 119.247708][ T8611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.436546][ T8611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.580439][ T8620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.591739][ T8620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.713840][ T8582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.715879][ T8582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.733187][ T8582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.744129][ T8582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.758179][ T8582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.770080][ T8582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.811763][ T8582] hsr_slave_0: entered promiscuous mode [ 119.829978][ T8582] hsr_slave_1: entered promiscuous mode [ 119.832452][ T8582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.834443][ T8582] Cannot create hsr debugfs directory [ 120.035795][ T8582] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 120.043468][ T8582] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 120.053816][ T8582] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 120.061042][ T8582] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 120.122930][ T8582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.151448][ T8582] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.157860][ T500] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.160206][ T500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.164169][ T627] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.166091][ T627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.279410][ T8635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.283264][ T8635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.368677][ T8582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.383787][ T6454] Bluetooth: hci1: command tx timeout [ 121.178743][ T8653] loop4: detected capacity change from 0 to 128 [ 121.196870][ T8582] veth0_vlan: entered promiscuous mode [ 121.207876][ T8582] veth1_vlan: entered promiscuous mode [ 121.228834][ T8655] loop2: detected capacity change from 0 to 1024 [ 121.233024][ T8655] EXT4-fs: Ignoring removed bh option [ 121.237336][ T8582] veth0_macvtap: entered promiscuous mode [ 121.241571][ T8582] veth1_macvtap: entered promiscuous mode [ 121.253717][ T8582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.258468][ T8582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.260979][ T8582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.278309][ T8655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.291616][ T8582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.294286][ T8582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.318096][ T8582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.320700][ T8582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.323328][ T8582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.339706][ T8582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.352285][ T8582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.363629][ T6443] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.375671][ T8582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.378932][ T8582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.381797][ T8582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.384351][ T8582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.418788][ T8582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.431944][ T8582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.463857][ T8582] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.470042][ T8582] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.477977][ T8582] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.480747][ T8582] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.367401][ T8259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.369656][ T8259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.391146][ T8678] IPv6: NLM_F_CREATE should be specified when creating new route [ 122.394779][ T8678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 122.396849][ T8678] IPv6: NLM_F_CREATE should be set when creating new route [ 122.408734][ T8262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.411598][ T8262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.415053][ T6454] Bluetooth: hci1: command tx timeout [ 122.441472][ T8681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.443793][ T8681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.500617][ T8683] loop1: detected capacity change from 0 to 1024 [ 122.576862][ T8259] hfsplus: b-tree write err: -5, ino 8 [ 122.614379][ T8689] loop5: detected capacity change from 0 to 2048 [ 122.626625][ T8689] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.639287][ T8691] loop1: detected capacity change from 0 to 128 [ 122.671009][ T8693] loop2: detected capacity change from 0 to 1024 [ 122.702968][ T8693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.792746][ T6443] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.946090][ T8705] loop5: detected capacity change from 0 to 2048 [ 122.957160][ T8705] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.171851][ T8722] loop4: detected capacity change from 0 to 1024 [ 123.182236][ T8723] loop5: detected capacity change from 0 to 128 [ 123.187761][ T8722] hfsplus: xattr search failed [ 123.196380][ T8725] netlink: 28 bytes leftover after parsing attributes in process `syz.3.775'. [ 123.273700][ T8728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.776'. [ 123.397543][ T8733] input: syz0 as /devices/virtual/input/input2 [ 123.580390][ T8743] loop5: detected capacity change from 0 to 1024 [ 123.585840][ T8743] EXT4-fs: Ignoring removed nobh option [ 123.611159][ T8743] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.673366][ T8747] loop3: detected capacity change from 0 to 1024 [ 123.682328][ T8582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.703791][ T8747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.809259][ T8756] loop1: detected capacity change from 0 to 128 [ 123.812599][ T8754] netlink: 28 bytes leftover after parsing attributes in process `syz.2.786'. [ 123.836350][ T6450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.120185][ T8771] loop5: detected capacity change from 0 to 2048 [ 124.179280][ T8771] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.186937][ T8779] loop3: detected capacity change from 0 to 1024 [ 124.193359][ T8779] EXT4-fs: Ignoring removed i_version option [ 124.200773][ T8779] EXT4-fs: inline encryption not supported [ 124.204470][ T8779] EXT4-fs (loop3): Test dummy encryption mode enabled [ 124.210910][ T8779] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 124.226692][ T8779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.289570][ T8582] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh [ 124.299844][ T8582] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh [ 124.332855][ T8786] loop2: detected capacity change from 0 to 128 [ 124.494663][ T6454] Bluetooth: hci1: command tx timeout [ 124.588387][ T8789] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 124.615815][ T8791] loop2: detected capacity change from 0 to 512 [ 124.629609][ T8791] EXT4-fs (loop2): Test dummy encryption mode enabled [ 124.640905][ T8791] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 124.673666][ T8791] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 124.695444][ T8791] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.800: bad orphan inode 131083 [ 124.719965][ T8791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.762868][ T8791] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 124.842255][ T6443] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.892463][ T8795] netlink: 28 bytes leftover after parsing attributes in process `syz.2.801'. [ 125.081553][ T6450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.118817][ T8800] loop3: detected capacity change from 0 to 256 [ 125.120964][ T8800] exfat: Unknown parameter 'fd' [ 125.218185][ T44] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.274759][ T6459] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 125.285160][ T6459] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 125.295422][ T6459] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 125.311131][ T6459] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 125.313446][ T6459] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 125.316204][ T6459] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 125.451429][ T8819] loop2: detected capacity change from 0 to 128 [ 125.457969][ T44] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.802748][ T44] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.934936][ T2367] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.936936][ T2367] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.288164][ T8831] loop2: detected capacity change from 0 to 1024 [ 126.290349][ T8831] EXT4-fs: Ignoring removed i_version option [ 126.291913][ T8831] EXT4-fs: inline encryption not supported [ 126.320140][ T8831] EXT4-fs (loop2): Test dummy encryption mode enabled [ 126.322265][ T8831] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 126.372608][ T8831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.387098][ T44] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.392524][ T8839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.817'. [ 126.414307][ T8803] chnl_net:caif_netlink_parms(): no params data found [ 126.417028][ T8841] loop1: detected capacity change from 0 to 512 [ 126.419139][ T8841] EXT4-fs: Ignoring removed oldalloc option [ 126.441613][ T8841] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b842e02d, mo2=0002] [ 126.443691][ T8841] System zones: 1-12 [ 126.453503][ T8841] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.816: invalid indirect mapped block 1 (level 1) [ 126.466781][ T8841] EXT4-fs (loop1): Remounting filesystem read-only [ 126.469257][ T8841] EXT4-fs (loop1): 1 truncate cleaned up [ 126.471195][ T8841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.505700][ T8841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.816'. [ 126.540936][ T8803] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.543204][ T8803] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.544783][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.546461][ T8803] bridge_slave_0: entered allmulticast mode [ 126.550006][ T8803] bridge_slave_0: entered promiscuous mode [ 126.553318][ T8803] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.555318][ T8803] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.557540][ T8803] bridge_slave_1: entered allmulticast mode [ 126.559663][ T8803] bridge_slave_1: entered promiscuous mode [ 126.618562][ T8803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.637017][ T8803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.769407][ T8803] team0: Port device team_slave_0 added [ 126.775210][ T44] bridge_slave_1: left allmulticast mode [ 126.779219][ T44] bridge_slave_1: left promiscuous mode [ 126.781927][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.917563][ T8859] loop3: detected capacity change from 0 to 128 [ 127.228100][ T44] bridge_slave_0: left allmulticast mode [ 127.232581][ T6443] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.234612][ T44] bridge_slave_0: left promiscuous mode [ 127.236567][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.376137][ T6459] Bluetooth: hci1: command tx timeout [ 127.591541][ T8870] netlink: 28 bytes leftover after parsing attributes in process `syz.1.827'. [ 128.054166][ T8874] netlink: 28 bytes leftover after parsing attributes in process `syz.3.828'. [ 128.697731][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.759766][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.795941][ T44] bond0 (unregistering): Released all slaves [ 128.803248][ T8803] team0: Port device team_slave_1 added [ 128.942985][ T8803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.945248][ T8803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.961685][ T8803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.022959][ T8894] loop2: detected capacity change from 0 to 128 [ 129.082918][ T8900] loop3: detected capacity change from 0 to 1024 [ 129.092553][ T8900] EXT4-fs: Ignoring removed i_version option [ 129.094322][ T8900] EXT4-fs: inline encryption not supported [ 129.104146][ T8900] EXT4-fs (loop3): Test dummy encryption mode enabled [ 129.110849][ T8900] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 129.141840][ T8900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.187766][ T8803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.190965][ T8803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.206786][ T8803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.403493][ T8803] hsr_slave_0: entered promiscuous mode [ 129.415098][ T8803] hsr_slave_1: entered promiscuous mode [ 129.436628][ T8803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.449487][ T8803] Cannot create hsr debugfs directory [ 129.454760][ T6459] Bluetooth: hci1: command tx timeout [ 129.711626][ T8914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.717314][ T8914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.766825][ T44] hsr_slave_0: left promiscuous mode [ 129.773250][ T44] hsr_slave_1: left promiscuous mode [ 129.777287][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.780039][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.783733][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.787440][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.808527][ T44] veth1_macvtap: left promiscuous mode [ 129.810569][ T44] veth0_macvtap: left promiscuous mode [ 129.816427][ T44] veth1_vlan: left promiscuous mode [ 129.820093][ T44] veth0_vlan: left promiscuous mode [ 130.193205][ T8933] loop4: detected capacity change from 0 to 1024 [ 130.677900][ T8933] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.093086][ T8945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.534748][ T6459] Bluetooth: hci1: command tx timeout [ 131.557604][ T8935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.845963][ T6450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.918870][ T8953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.843'. [ 132.968290][ T44] team0 (unregistering): Port device team_slave_1 removed [ 133.156892][ T44] team0 (unregistering): Port device team_slave_0 removed [ 133.614657][ T6459] Bluetooth: hci1: command tx timeout [ 135.418942][ T8963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.449531][ T8964] loop1: detected capacity change from 0 to 128 [ 135.454834][ T8963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.599158][ T8975] loop1: detected capacity change from 0 to 512 [ 135.623510][ T8975] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 135.640570][ T8803] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 135.648581][ T8975] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2842c018, mo2=0002] [ 135.650770][ T8975] System zones: 0-2, 18-18, 34-35 [ 135.652606][ T8975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.657509][ T8803] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 135.669831][ T8803] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 135.694839][ T8803] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 135.712756][ T8982] loop4: detected capacity change from 0 to 1024 [ 135.732314][ T8803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.758172][ T8982] EXT4-fs: Ignoring removed i_version option [ 135.759873][ T8982] EXT4-fs: inline encryption not supported [ 135.772122][ T8803] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.775799][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.779341][ T8982] EXT4-fs (loop4): Test dummy encryption mode enabled [ 135.781275][ T8982] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 135.793776][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.795815][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.805620][ T8982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.825589][ T524] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.827517][ T524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.121161][ T8998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.123525][ T8998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.151842][ T8803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.419369][ T9028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.857'. [ 136.419525][ T8803] veth0_vlan: entered promiscuous mode [ 136.449523][ T8803] veth1_vlan: entered promiscuous mode [ 136.495931][ T8803] veth0_macvtap: entered promiscuous mode [ 136.502639][ T8803] veth1_macvtap: entered promiscuous mode [ 136.521148][ T8803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.524231][ T8803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.532113][ T8803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.538824][ T8803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.541631][ T8803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.548439][ T8803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.553297][ T8803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.561707][ T8803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.570331][ T8803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.580949][ T8803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.592869][ T8803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.614223][ T8803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.628314][ T8803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.638610][ T8803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.649562][ T8803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.665383][ T8803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.689781][ T8803] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.710123][ T8803] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.727388][ T8803] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.740506][ T8803] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.878463][ T9040] loop2: detected capacity change from 0 to 128 [ 136.886952][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.898590][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.985747][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.997455][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.208214][ T9058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.232291][ T9058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.412491][ T9072] Driver unsupported XDP return value 0 on prog (id 30) dev N/A, expect packet loss! [ 137.501182][ T6455] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.504844][ T9079] loop1: detected capacity change from 0 to 128 [ 137.920630][ T9106] loop2: detected capacity change from 0 to 1024 [ 137.922852][ T9106] EXT4-fs: Ignoring removed i_version option [ 137.931718][ T9106] EXT4-fs: inline encryption not supported [ 137.941826][ T9106] EXT4-fs (loop2): Test dummy encryption mode enabled [ 137.943767][ T9106] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 137.962565][ T9106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.131127][ T9116] loop1: detected capacity change from 0 to 128 [ 139.020873][ T9128] netlink: 60 bytes leftover after parsing attributes in process `syz.1.881'. [ 139.023807][ T9125] netlink: 60 bytes leftover after parsing attributes in process `syz.1.881'. [ 139.027951][ T9128] netlink: 60 bytes leftover after parsing attributes in process `syz.1.881'. [ 139.887085][ T9145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.886'. [ 140.188790][ T9162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.210787][ T9160] loop6: detected capacity change from 0 to 128 [ 140.210835][ T9162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.686094][ T6443] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.725252][ T9190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.727563][ T9190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.701658][ T9219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.903'. [ 141.801892][ T9227] loop1: detected capacity change from 0 to 1024 [ 141.804292][ T9227] EXT4-fs: Ignoring removed i_version option [ 141.812552][ T9227] EXT4-fs: inline encryption not supported [ 141.823370][ T9227] EXT4-fs (loop1): Test dummy encryption mode enabled [ 141.830241][ T9227] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 141.908393][ T9227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.799092][ T9247] loop4: detected capacity change from 0 to 128 [ 143.462792][ T9264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.917'. [ 143.526027][ T6454] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 143.530210][ T6454] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 143.533285][ T6454] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 143.540531][ T6454] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 143.542900][ T6454] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 143.547740][ T6454] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 143.631683][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.757560][ T9276] netlink: 48 bytes leftover after parsing attributes in process `syz.4.920'. [ 144.108401][ T9293] netlink: 'syz.6.925': attribute type 29 has an invalid length. [ 144.113470][ T9293] netlink: 'syz.6.925': attribute type 29 has an invalid length. [ 144.144224][ T9266] chnl_net:caif_netlink_parms(): no params data found [ 144.530886][ T9304] loop4: detected capacity change from 0 to 1024 [ 144.552347][ T9304] EXT4-fs: Ignoring removed i_version option [ 144.554000][ T9304] EXT4-fs: inline encryption not supported [ 144.567249][ T9304] EXT4-fs (loop4): Test dummy encryption mode enabled [ 144.575217][ T9304] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 144.598545][ T9304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.708576][ T9266] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.710551][ T9266] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.742068][ T9266] bridge_slave_0: entered allmulticast mode [ 144.754845][ T9266] bridge_slave_0: entered promiscuous mode [ 144.774149][ T9266] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.779538][ T9266] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.781466][ T9266] bridge_slave_1: entered allmulticast mode [ 144.795846][ T9309] loop3: detected capacity change from 0 to 128 [ 144.809467][ T9266] bridge_slave_1: entered promiscuous mode [ 145.469320][ T6455] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.520280][ T9266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.537858][ T9266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.587392][ T9266] team0: Port device team_slave_0 added [ 145.594462][ T9266] team0: Port device team_slave_1 added [ 145.613795][ T9266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.615947][ T6459] Bluetooth: hci0: command tx timeout [ 145.620762][ T9266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.628322][ T9266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.633193][ T9266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.635834][ T9266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.643054][ T9266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.670980][ T9266] hsr_slave_0: entered promiscuous mode [ 145.672715][ T9317] Bluetooth: MGMT ver 1.23 [ 145.680764][ T9317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.683729][ T9317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.684045][ T9266] hsr_slave_1: entered promiscuous mode [ 145.690843][ T9266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.700315][ T9266] Cannot create hsr debugfs directory [ 145.797208][ T9330] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.936'. [ 145.803113][ T9329] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.936'. [ 145.929485][ T9266] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.932782][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.935'. [ 145.951624][ T9340] netlink: 16 bytes leftover after parsing attributes in process `syz.6.939'. [ 146.067504][ T9346] loop4: detected capacity change from 0 to 1024 [ 146.076137][ T9346] EXT4-fs: Ignoring removed i_version option [ 146.081400][ T9346] EXT4-fs: inline encryption not supported [ 146.099114][ T9266] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.103014][ T9346] EXT4-fs (loop4): Test dummy encryption mode enabled [ 146.110136][ T9346] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 146.133578][ T9346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.934874][ T9266] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.989122][ T6455] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.177282][ T9266] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.183261][ T9367] netlink: 208292 bytes leftover after parsing attributes in process `syz.4.947'. [ 147.333669][ T9376] netlink: 16 bytes leftover after parsing attributes in process `syz.1.951'. [ 147.407240][ T9266] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 147.432440][ T9266] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 147.513675][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.952'. [ 147.550745][ T9266] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 147.562885][ T9266] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 147.664242][ T9397] netlink: 'syz.4.958': attribute type 12 has an invalid length. [ 147.670760][ T9397] netlink: 248 bytes leftover after parsing attributes in process `syz.4.958'. [ 147.694746][ T6459] Bluetooth: hci0: command tx timeout [ 147.749742][ T9266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.769772][ T9266] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.782723][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.784610][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.800904][ T9403] netlink: 'syz.4.961': attribute type 10 has an invalid length. [ 147.826685][ T9403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.830410][ T9403] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 147.839980][ T8299] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.841933][ T8299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.930042][ T9406] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.962'. [ 148.032766][ T9266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.053330][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.964'. [ 148.086143][ T9266] veth0_vlan: entered promiscuous mode [ 148.113106][ T9266] veth1_vlan: entered promiscuous mode [ 148.152940][ T9266] veth0_macvtap: entered promiscuous mode [ 148.160482][ T9266] veth1_macvtap: entered promiscuous mode [ 148.172928][ T9266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.180702][ T9266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.183394][ T9266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.190495][ T9266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.200961][ T9266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.206202][ T9418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.208620][ T9418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.223409][ T9266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.228140][ T9266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.246805][ T9266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.250650][ T9266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.253570][ T9266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.260256][ T9266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.264164][ T9266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.269690][ T9266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.287415][ T9266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.290375][ T9266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.293023][ T9266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.297257][ T9266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.299832][ T9266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.302531][ T9266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.306690][ T9266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.311172][ T9266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.313541][ T9266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.317233][ T9266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.319774][ T9266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.206491][ T8262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.213035][ T8262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.304872][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.311424][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.340707][ T9441] netlink: 'syz.3.974': attribute type 10 has an invalid length. [ 149.377126][ T9441] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 149.774614][ T6459] Bluetooth: hci0: command tx timeout [ 152.432310][ T9518] netlink: 20 bytes leftover after parsing attributes in process `syz.6.992'. [ 154.423498][ T9562] loop6: detected capacity change from 0 to 1024 [ 154.471256][ T9562] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.694461][ T9586] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1005'. [ 154.732551][ T8803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.794267][ T9592] netlink: 'syz.3.1009': attribute type 1 has an invalid length. [ 154.805196][ T9592] netlink: 7084 bytes leftover after parsing attributes in process `syz.3.1009'. [ 154.817123][ T9595] loop1: detected capacity change from 0 to 1024 [ 154.830185][ T9595] EXT4-fs: Ignoring removed i_version option [ 154.831787][ T9595] EXT4-fs: inline encryption not supported [ 154.839644][ T9595] EXT4-fs (loop1): Test dummy encryption mode enabled [ 154.844851][ T9595] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 154.858198][ T9595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.729672][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.846536][ T8262] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.016068][ T8262] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.071241][ T9637] loop1: detected capacity change from 0 to 1024 [ 156.081533][ T6459] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.097818][ T6459] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.101607][ T6459] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.105475][ T6459] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.107868][ T6459] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 156.109932][ T6459] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.161858][ T9637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.177042][ T8262] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.340216][ T8262] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.387440][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.459824][ T9670] loop1: detected capacity change from 0 to 1024 [ 156.483397][ T9670] EXT4-fs: Ignoring removed i_version option [ 156.493881][ T9670] EXT4-fs: inline encryption not supported [ 156.504033][ T9670] EXT4-fs (loop1): Test dummy encryption mode enabled [ 156.513787][ T9670] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 156.958202][ T9670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.732583][ T9697] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.744932][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.174634][ T6454] Bluetooth: hci0: command tx timeout [ 160.254692][ T6454] Bluetooth: hci0: command tx timeout [ 162.334623][ T6454] Bluetooth: hci0: command tx timeout [ 163.858561][ T6449] Bluetooth: hci3: command 0x0406 tx timeout [ 163.860396][ T6454] Bluetooth: hci2: command 0x0406 tx timeout [ 164.414664][ T53] Bluetooth: hci0: command tx timeout [ 168.323137][ T9638] chnl_net:caif_netlink_parms(): no params data found [ 168.332214][ T9716] loop4: detected capacity change from 0 to 1024 [ 168.354110][ T9727] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1035'. [ 168.354986][ T9716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.376006][ T8262] bridge_slave_1: left allmulticast mode [ 168.377640][ T8262] bridge_slave_1: left promiscuous mode [ 168.379194][ T8262] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.425434][ T8262] bridge_slave_0: left allmulticast mode [ 168.427008][ T8262] bridge_slave_0: left promiscuous mode [ 168.428579][ T8262] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.581540][ T9747] loop1: detected capacity change from 0 to 1024 [ 168.591973][ T9747] EXT4-fs: Ignoring removed i_version option [ 168.600380][ T9747] EXT4-fs: inline encryption not supported [ 168.611427][ T9747] EXT4-fs (loop1): Test dummy encryption mode enabled [ 168.623283][ T9747] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 168.645073][ T9747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.695351][ T9730] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set [ 169.562563][ T9758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1038'. [ 169.573962][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.707601][ T8262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.749394][ T8262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.796017][ T8262] bond0 (unregistering): Released all slaves [ 170.869586][ T6455] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.920637][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1041'. [ 170.948937][ T9760] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.131912][ T9765] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1041'. [ 171.210498][ T9760] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.224881][ T9638] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.226864][ T9638] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.230552][ T9638] bridge_slave_0: entered allmulticast mode [ 171.232696][ T9638] bridge_slave_0: entered promiscuous mode [ 171.250326][ T9638] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.252399][ T9638] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.254443][ T9638] bridge_slave_1: entered allmulticast mode [ 171.275185][ T9638] bridge_slave_1: entered promiscuous mode [ 171.325503][ T9787] loop3: detected capacity change from 0 to 1024 [ 171.345040][ T9787] EXT4-fs: Ignoring removed i_version option [ 171.346593][ T9787] EXT4-fs: inline encryption not supported [ 171.355883][ T9787] EXT4-fs (loop3): Test dummy encryption mode enabled [ 171.364830][ T9787] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 171.372427][ T9760] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.381267][ T9787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.491604][ T9808] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1050'. [ 172.658338][ T9638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.746352][ T9760] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.780775][ T9638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.788283][ T6450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.878294][ T9814] loop3: detected capacity change from 0 to 1024 [ 172.890509][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1052'. [ 172.920562][ T8262] hsr_slave_0: left promiscuous mode [ 172.922711][ T8262] hsr_slave_1: left promiscuous mode [ 172.924961][ T8262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.926998][ T8262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.929925][ T8262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.931966][ T8262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.941808][ T9814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.947034][ T8262] veth1_macvtap: left promiscuous mode [ 172.948688][ T8262] veth0_macvtap: left promiscuous mode [ 172.950403][ T8262] veth1_vlan: left promiscuous mode [ 172.951945][ T8262] veth0_vlan: left promiscuous mode [ 174.648824][ T8262] team0 (unregistering): Port device team_slave_1 removed [ 174.835817][ T8262] team0 (unregistering): Port device team_slave_0 removed [ 176.912234][ T9638] team0: Port device team_slave_0 added [ 176.925734][ T9638] team0: Port device team_slave_1 added [ 176.985525][ T9638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.987340][ T9638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.996567][ T9826] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1056'. [ 177.013469][ T9638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.017120][ T6450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.034147][ T9638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.047793][ T9638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.062089][ T9638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.101557][ T9760] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.193816][ T9760] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.219458][ T9638] hsr_slave_0: entered promiscuous mode [ 177.221622][ T9638] hsr_slave_1: entered promiscuous mode [ 177.223381][ T9638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.234636][ T9638] Cannot create hsr debugfs directory [ 177.260629][ T9760] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.300943][ T9760] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.321588][ T9851] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1062'. [ 177.359697][ T9854] loop6: detected capacity change from 0 to 1024 [ 177.367204][ T9854] EXT4-fs: Ignoring removed i_version option [ 177.368792][ T9854] EXT4-fs: inline encryption not supported [ 177.370864][ T9854] EXT4-fs (loop6): Test dummy encryption mode enabled [ 177.392900][ T9854] EXT4-fs (loop6): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 177.403668][ T9854] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.218961][ T9883] loop3: detected capacity change from 0 to 1024 [ 179.299074][ T9883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.318668][ T8803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.516977][ T9909] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1074'. [ 179.540963][ T6450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.609756][ T9906] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.705804][ T9906] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.768021][ T9922] loop4: detected capacity change from 0 to 1024 [ 179.775073][ T9922] EXT4-fs: Ignoring removed i_version option [ 179.776732][ T9922] EXT4-fs: inline encryption not supported [ 179.798230][ T9922] EXT4-fs (loop4): Test dummy encryption mode enabled [ 179.800323][ T9906] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.850928][ T9922] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 180.416381][ T9922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.506283][ T9906] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.628243][ T9638] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 181.079411][ T9638] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 181.122755][ T9638] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 181.135720][ T9638] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 181.166549][ T9946] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1084'. [ 181.223179][ T6455] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.361361][ T9638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.378531][ T9959] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1089'. [ 181.380144][ T9638] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.423618][ T9638] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 181.452165][ T9638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.468313][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.470345][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.474259][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.476253][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.379026][ T9638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.440530][ T9638] veth0_vlan: entered promiscuous mode [ 182.476606][ T9638] veth1_vlan: entered promiscuous mode [ 182.611179][ T9638] veth0_macvtap: entered promiscuous mode [ 182.657492][ T9638] veth1_macvtap: entered promiscuous mode [ 182.664440][ T9638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.851003][ T9638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.854034][ T9638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.894797][ T9638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.908153][ T9638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.913786][T10001] loop4: detected capacity change from 0 to 1024 [ 182.920902][ T9638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.924802][ T9638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.927551][ T9638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.930133][ T9638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.932767][ T9638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.936417][T10001] EXT4-fs: Ignoring removed i_version option [ 182.938245][T10001] EXT4-fs: inline encryption not supported [ 182.953030][T10001] EXT4-fs (loop4): Test dummy encryption mode enabled [ 182.956526][T10001] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 182.959675][ T9638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.963459][ T9638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.967780][ T9638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.977323][T10001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.981945][ T9638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.989054][ T9638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.991736][ T9638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.995006][ T9638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.997583][ T9638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.000214][ T9638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.004638][ T9638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.008266][ T9638] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.010684][ T9638] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.013097][ T9638] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.016332][ T9638] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.143457][ T8262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.147347][ T8262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.159350][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.161408][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.845899][ T6455] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.930168][T10029] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1102'. [ 184.290096][ T9906] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.313664][ T9906] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.331488][ T9906] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.345462][ T9906] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.764999][T10062] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1114'. [ 185.342792][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1118'. [ 185.343596][T10077] netlink: 'syz.1.1119': attribute type 1 has an invalid length. [ 185.360390][T10077] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.466786][T10077] macvlan2: entered promiscuous mode [ 185.468274][T10077] macvlan2: entered allmulticast mode [ 185.470635][T10077] bond_slave_0: entered promiscuous mode [ 185.472355][T10077] bond_slave_1: entered promiscuous mode [ 185.473763][T10077] bond0: entered allmulticast mode [ 185.501051][T10077] bond_slave_0: entered allmulticast mode [ 185.504312][T10077] bond_slave_1: entered allmulticast mode [ 185.510419][T10077] bond0: entered promiscuous mode [ 185.513458][T10077] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 185.524331][T10085] netlink: 'syz.6.1120': attribute type 39 has an invalid length. [ 185.532092][T10077] bond2: (slave macvlan2): making interface the new active one [ 185.540765][T10077] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 185.706384][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1124'. [ 185.760875][T10094] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1125'. [ 186.509399][ T6459] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 186.515314][ T6459] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 186.518247][ T6459] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 186.521526][ T6459] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 186.523804][ T6459] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 186.527165][ T6459] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.549061][ T466] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.682499][ T466] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.788582][ T466] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.998615][ T466] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.015562][T10119] chnl_net:caif_netlink_parms(): no params data found [ 187.145463][T10119] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.147450][T10119] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.163495][T10119] bridge_slave_0: entered allmulticast mode [ 187.171773][T10119] bridge_slave_0: entered promiscuous mode [ 187.197309][T10119] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.218259][T10119] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.220400][T10119] bridge_slave_1: entered allmulticast mode [ 187.222517][T10119] bridge_slave_1: entered promiscuous mode [ 187.226806][T10143] netlink: 'syz.1.1141': attribute type 39 has an invalid length. [ 187.375492][ T2367] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.377411][ T2367] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.405247][T10119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.414773][T10119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.493333][T10119] team0: Port device team_slave_0 added [ 187.517789][T10119] team0: Port device team_slave_1 added [ 187.663774][ T466] bridge_slave_1: left allmulticast mode [ 187.665879][ T466] bridge_slave_1: left promiscuous mode [ 187.667444][ T466] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.671265][ T466] bridge_slave_0: left allmulticast mode [ 187.672816][ T466] bridge_slave_0: left promiscuous mode [ 187.674317][ T466] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.916649][T10165] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1149'. [ 188.574667][ T6459] Bluetooth: hci0: command tx timeout [ 189.170717][ T466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.206816][ T466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.266347][ T466] bond0 (unregistering): Released all slaves [ 189.287113][T10119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.288971][T10119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.296878][T10119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.345028][T10119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.346938][T10119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.357544][T10119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.430485][T10119] hsr_slave_0: entered promiscuous mode [ 189.435432][T10119] hsr_slave_1: entered promiscuous mode [ 189.437275][T10119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.452469][T10119] Cannot create hsr debugfs directory [ 190.149404][ T466] hsr_slave_0: left promiscuous mode [ 190.154277][ T466] hsr_slave_1: left promiscuous mode [ 190.160593][ T466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.166923][ T466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.173796][ T466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.186150][ T466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.194984][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1162'. [ 190.222864][ T466] veth1_macvtap: left promiscuous mode [ 190.226898][ T466] veth0_macvtap: left promiscuous mode [ 190.230768][ T466] veth1_vlan: left promiscuous mode [ 190.233427][ T466] veth0_vlan: left promiscuous mode [ 190.655098][ T6459] Bluetooth: hci0: command tx timeout [ 192.092029][ T466] team0 (unregistering): Port device team_slave_1 removed [ 192.288395][ T466] team0 (unregistering): Port device team_slave_0 removed [ 192.740124][ T6459] Bluetooth: hci0: command tx timeout [ 194.698677][T10237] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.1167'. [ 194.824643][ T6459] Bluetooth: hci0: command tx timeout [ 194.858484][T10247] netlink: 'syz.3.1171': attribute type 39 has an invalid length. [ 195.413171][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1179'. [ 195.530560][T10119] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 195.548161][T10119] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 195.570601][T10119] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 195.618608][T10119] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 195.827003][T10304] xt_nfacct: accounting object `syz1' does not exists [ 195.840649][T10119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.871700][T10119] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.882699][T10308] netlink: 'syz.4.1189': attribute type 39 has an invalid length. [ 195.937505][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'. [ 196.011403][ T466] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.013431][ T466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.021107][ T466] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.023104][ T466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.315916][T10342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1197'. [ 196.319807][T10119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.437298][T10119] veth0_vlan: entered promiscuous mode [ 196.442223][T10119] veth1_vlan: entered promiscuous mode [ 196.616858][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1204'. [ 197.147235][T10119] veth0_macvtap: entered promiscuous mode [ 197.166433][T10119] veth1_macvtap: entered promiscuous mode [ 197.192060][T10119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.196674][T10119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.199505][T10119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.206854][T10119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.212470][T10119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.218768][T10119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.222554][T10119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.228885][T10119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.232743][T10119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.241213][T10119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.246068][T10119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.249970][T10119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.256143][T10119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.417617][T10119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.420462][T10119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.423130][T10119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.427646][T10119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.430258][T10119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.432944][T10119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.439164][T10119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.447310][T10119] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.449543][T10119] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.451820][T10119] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.454126][T10119] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.669943][T10401] netlink: 'syz.1.1214': attribute type 3 has an invalid length. [ 197.733106][ T550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.764638][ T550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.811413][ T550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.813652][ T550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.927932][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1217'. [ 198.272426][T10430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.275054][T10430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.646643][T10445] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1226'. [ 198.829425][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1229'. [ 199.028288][T10463] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1233'. [ 199.115445][T10467] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1235'. [ 199.124077][T10467] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1235'. [ 199.133551][T10467] gretap1: entered promiscuous mode [ 199.137648][T10467] gretap1: entered allmulticast mode [ 200.217908][ T44] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.369255][ T44] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.453633][T10508] __nla_validate_parse: 4 callbacks suppressed [ 200.453648][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1251'. [ 200.512683][ T44] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.624687][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.644333][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.647411][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.655579][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.664694][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 200.666844][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.677568][ T44] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.708403][T10517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1256'. [ 200.931693][T10518] chnl_net:caif_netlink_parms(): no params data found [ 201.039062][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1266'. [ 201.084440][ T44] bridge_slave_1: left allmulticast mode [ 201.089601][ T44] bridge_slave_1: left promiscuous mode [ 201.095278][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.110165][ T44] bridge_slave_0: left allmulticast mode [ 201.114104][ T44] bridge_slave_0: left promiscuous mode [ 201.117430][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.668523][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.727265][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.736209][ T53] Bluetooth: hci0: command tx timeout [ 202.776122][ T44] bond0 (unregistering): Released all slaves [ 202.791685][T10555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1271'. [ 202.803149][T10563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1274'. [ 202.808164][T10563] tipc: Started in network mode [ 202.809517][T10563] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 202.812125][T10563] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 202.830117][T10563] tipc: Enabled bearer , priority 10 [ 202.864648][T10518] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.866624][T10518] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.868702][T10518] bridge_slave_0: entered allmulticast mode [ 202.871088][T10518] bridge_slave_0: entered promiscuous mode [ 202.873737][T10518] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.895100][T10518] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.897118][T10518] bridge_slave_1: entered allmulticast mode [ 202.899335][T10518] bridge_slave_1: entered promiscuous mode [ 203.117065][T10586] netlink: 'syz.3.1282': attribute type 1 has an invalid length. [ 203.232361][T10518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.240042][T10599] netlink: 'syz.1.1285': attribute type 39 has an invalid length. [ 203.254240][T10586] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.263377][T10518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.372418][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1287'. [ 203.402824][T10518] team0: Port device team_slave_0 added [ 203.410174][T10518] team0: Port device team_slave_1 added [ 203.927862][ T6495] tipc: Node number set to 1 [ 204.303512][T10518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.311262][T10518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.327789][T10518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.439177][ T44] hsr_slave_0: left promiscuous mode [ 204.444806][ T44] hsr_slave_1: left promiscuous mode [ 204.449041][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.451018][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.454991][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.456923][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.482629][ T44] veth1_macvtap: left promiscuous mode [ 204.484272][ T44] veth0_macvtap: left promiscuous mode [ 204.487038][ T44] veth1_vlan: left promiscuous mode [ 204.488472][ T44] veth0_vlan: left promiscuous mode [ 204.826353][ T53] Bluetooth: hci0: command tx timeout [ 204.912494][T10652] netlink: 'syz.3.1299': attribute type 1 has an invalid length. [ 206.239547][ T44] team0 (unregistering): Port device team_slave_1 removed [ 206.438078][ T44] team0 (unregistering): Port device team_slave_0 removed [ 206.894708][ T53] Bluetooth: hci0: command tx timeout [ 208.578440][T10518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.580418][T10518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.587270][T10518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.596907][T10633] team0: Device ipvlan2 failed to register rx_handler [ 208.661601][T10652] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 208.701276][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1300'. [ 208.737266][T10518] hsr_slave_0: entered promiscuous mode [ 208.739309][T10518] hsr_slave_1: entered promiscuous mode [ 208.741140][T10518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.743174][T10518] Cannot create hsr debugfs directory [ 208.977741][ T53] Bluetooth: hci0: command tx timeout [ 208.988683][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1301'. [ 208.991312][T10663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.126619][T10663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.549096][T10699] netlink: 'syz.6.1311': attribute type 1 has an invalid length. [ 209.640230][T10699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.696343][T10704] bond1: (slave ip6erspan0): making interface the new active one [ 209.763098][T10704] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 209.858198][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1312'. [ 210.308729][ T44] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.344063][T10719] team0: Device ipvlan2 failed to register rx_handler [ 210.522961][ T44] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.566422][T10518] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 210.593711][T10518] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 210.692678][ T44] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.799624][T10518] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 210.867773][ T44] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.884698][T10518] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 210.893223][T10765] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1324'. [ 210.988855][T10768] netlink: 'syz.3.1325': attribute type 1 has an invalid length. [ 211.015505][T10768] macvlan2: entered promiscuous mode [ 211.018121][T10768] macvlan2: entered allmulticast mode [ 211.120845][T10774] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1327'. [ 211.146384][T10518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.165111][ T44] bridge_slave_1: left allmulticast mode [ 211.166676][ T44] bridge_slave_1: left promiscuous mode [ 211.168264][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.211693][ T44] bridge_slave_0: left allmulticast mode [ 211.213556][ T44] bridge_slave_0: left promiscuous mode [ 211.219046][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.152537][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.197142][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.236445][ T44] bond0 (unregistering): Released all slaves [ 213.743779][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1336'. [ 213.886667][ T44] bond1 (unregistering): Released all slaves [ 214.556290][ T44] bond2 (unregistering): (slave veth5): Releasing active interface [ 214.606178][ T44] bond2 (unregistering): Released all slaves [ 215.276778][ T44] bond3 (unregistering): (slave veth7): Releasing active interface [ 215.316481][ T44] bond3 (unregistering): Released all slaves [ 215.418605][T10518] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.442685][ T550] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.444670][ T550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.470818][T10817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1338'. [ 215.490300][ T550] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.492337][ T550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.519803][T10820] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1339'. [ 215.696440][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1344'. [ 215.727955][T10518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.053635][T10848] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1346'. [ 216.060875][T10848] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 216.328163][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1348'. [ 216.590322][ T44] hsr_slave_0: left promiscuous mode [ 216.597513][ T44] hsr_slave_1: left promiscuous mode [ 216.599256][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.601402][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.617896][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.620016][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.654640][ T44] veth1_macvtap: left promiscuous mode [ 216.656234][ T44] veth0_macvtap: left promiscuous mode [ 216.657680][ T44] veth1_vlan: left promiscuous mode [ 216.659192][ T44] veth0_vlan: left promiscuous mode [ 216.790829][T10882] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1355'. [ 216.861990][T10884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1356'. [ 218.519002][ T44] team0 (unregistering): Port device team_slave_1 removed [ 218.708342][ T44] team0 (unregistering): Port device team_slave_0 removed [ 220.846711][T10518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.011462][T10518] veth0_vlan: entered promiscuous mode [ 221.035344][T10903] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 221.037363][T10518] veth1_vlan: entered promiscuous mode [ 221.077999][T10518] veth0_macvtap: entered promiscuous mode [ 221.081325][T10518] veth1_macvtap: entered promiscuous mode [ 221.099030][T10899] Bluetooth: MGMT ver 1.23 [ 221.123249][T10518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.153437][T10518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.156735][T10518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.176313][T10518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.182040][T10518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.192922][T10518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.197734][T10518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.201445][T10518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.211455][T10518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.216129][T10518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.219910][T10518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.260744][T10518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.280356][T10518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.296605][T10518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.320258][T10518] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.329270][T10518] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.333873][T10518] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.340406][T10518] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.395720][T10930] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1365'. [ 221.398317][T10930] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 221.476028][T10933] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1367'. [ 221.478499][T10933] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1367'. [ 221.512149][ T8259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.514320][ T8259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.556656][ T113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.563720][T10936] ax25_connect(): syz.1.1368 uses autobind, please contact jreuter@yaina.de [ 221.564287][ T113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.793624][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1369'. [ 222.102875][T10964] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1374'. [ 222.128601][T10964] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1374'. [ 222.291350][T10978] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1378'. [ 222.320418][T10978] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 222.354659][T10983] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1379'. [ 222.454456][T10993] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1381'. [ 222.467971][T10993] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 222.552672][T11003] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1385'. [ 222.712931][T11016] netlink: 'syz.4.1389': attribute type 1 has an invalid length. [ 223.134695][ T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 223.138684][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 224.337339][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.419141][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.497346][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.594403][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.749696][ T6459] Bluetooth: hci1: command tx timeout [ 224.787762][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 224.792316][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 224.800548][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 224.803431][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 224.806269][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 224.808606][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 224.898743][ T11] bridge_slave_1: left allmulticast mode [ 224.901586][ T11] bridge_slave_1: left promiscuous mode [ 224.903540][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.923792][ T11] bridge_slave_0: left allmulticast mode [ 224.926720][ T11] bridge_slave_0: left promiscuous mode [ 224.930604][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.387230][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.426657][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.476659][ T11] bond0 (unregistering): Released all slaves [ 226.538221][T11188] __nla_validate_parse: 7 callbacks suppressed [ 226.538237][T11188] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1422'. [ 226.778962][T11151] chnl_net:caif_netlink_parms(): no params data found [ 226.855748][T11151] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.859997][T11151] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.868364][T11151] bridge_slave_0: entered allmulticast mode [ 226.874653][T11151] bridge_slave_0: entered promiscuous mode [ 226.894882][ T6459] Bluetooth: hci0: command tx timeout [ 226.927598][T11151] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.934714][T11151] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.936803][T11151] bridge_slave_1: entered allmulticast mode [ 226.938862][T11151] bridge_slave_1: entered promiscuous mode [ 227.024110][T11151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.040797][T11151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.090105][T11151] team0: Port device team_slave_0 added [ 227.103465][T11151] team0: Port device team_slave_1 added [ 227.161364][T11151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.166881][T11151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.189442][T11151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.203778][T11151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.219441][T11151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.251709][T11151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.492569][T11151] hsr_slave_0: entered promiscuous mode [ 227.502303][T11151] hsr_slave_1: entered promiscuous mode [ 227.509099][T11151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.514322][T11151] Cannot create hsr debugfs directory [ 227.519878][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1439'. [ 227.607145][ T11] hsr_slave_0: left promiscuous mode [ 227.609200][ T11] hsr_slave_1: left promiscuous mode [ 227.611113][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.613304][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.619483][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.622545][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.647020][ T11] veth1_macvtap: left promiscuous mode [ 227.648510][ T11] veth0_macvtap: left promiscuous mode [ 227.655393][ T11] veth1_vlan: left promiscuous mode [ 227.656817][ T11] veth0_vlan: left promiscuous mode [ 228.974937][ T6459] Bluetooth: hci0: command tx timeout [ 229.450385][ T11] team0 (unregistering): Port device team_slave_1 removed [ 229.636791][ T11] team0 (unregistering): Port device team_slave_0 removed [ 231.054712][ T6459] Bluetooth: hci0: command tx timeout [ 231.911441][T11277] syzkaller1: entered promiscuous mode [ 231.919601][T11277] syzkaller1: entered allmulticast mode [ 231.959773][T11287] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1455'. [ 232.066900][T11284] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1454'. [ 232.391623][T11151] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 232.417647][T11151] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 232.422783][T11151] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 232.451011][T11151] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 232.556726][T11151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.571889][T11151] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.589277][ T550] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.591193][ T550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.605243][ T550] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.607189][ T550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.650865][T11151] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 232.672727][T11151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.821601][T11151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.883648][T11151] veth0_vlan: entered promiscuous mode [ 232.888960][T11151] veth1_vlan: entered promiscuous mode [ 232.902283][T11151] veth0_macvtap: entered promiscuous mode [ 232.923316][T11151] veth1_macvtap: entered promiscuous mode [ 232.931743][T11151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.938339][T11151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.941021][T11151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.943820][T11151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.947894][T11151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.950538][T11151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.953057][T11151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.959414][T11151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.962058][T11151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.967966][T11151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.971382][T11151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.018430][T11151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.021127][T11151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.024211][T11151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.032727][T11345] syzkaller1: entered promiscuous mode [ 233.034171][T11345] syzkaller1: entered allmulticast mode [ 233.040902][T11151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.043162][T11151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.051261][T11151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.053751][T11151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.138518][ T6459] Bluetooth: hci0: command tx timeout [ 233.155368][ T8299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.157463][ T8299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.195540][ T8299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.201081][ T8299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.572024][ T6434] IPVS: starting estimator thread 0... [ 233.675717][T11385] IPVS: using max 35 ests per chain, 84000 per kthread [ 233.882902][T11413] netlink: 'syz.3.1493': attribute type 39 has an invalid length. [ 234.180419][T11424] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1497'. [ 234.416057][T11441] netlink: 'syz.4.1505': attribute type 39 has an invalid length. [ 234.487527][T11448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1508'. [ 234.515192][T11445] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.1506'. [ 234.732880][T11472] netlink: 'syz.3.1518': attribute type 39 has an invalid length. [ 234.859203][T11475] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.1521'. [ 235.036380][T11477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1520'. [ 235.096897][ T8299] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.561535][T11488] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1524'. [ 235.564057][T11488] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1524'. [ 235.570910][T11488] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1524'. [ 235.675078][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.685037][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.687665][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.696205][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.698484][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 235.700546][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.828300][T11498] chnl_net:caif_netlink_parms(): no params data found [ 235.871837][T11498] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.873998][T11498] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.877788][T11498] bridge_slave_0: entered allmulticast mode [ 235.879923][T11498] bridge_slave_0: entered promiscuous mode [ 235.882765][T11498] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.885616][T11498] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.887807][T11498] bridge_slave_1: entered allmulticast mode [ 235.889935][T11498] bridge_slave_1: entered promiscuous mode [ 235.918470][T11498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.931205][T11498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.988811][T11498] team0: Port device team_slave_0 added [ 235.997757][T11498] team0: Port device team_slave_1 added [ 236.020247][T11498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.028146][T11498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.035394][T11498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.039521][T11498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.041645][T11498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.049674][T11498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.110899][T11498] hsr_slave_0: entered promiscuous mode [ 236.151873][T11517] Bluetooth: MGMT ver 1.23 [ 236.195645][T11498] hsr_slave_1: entered promiscuous mode [ 236.197505][T11498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.199533][T11498] Cannot create hsr debugfs directory [ 236.298221][T11516] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 236.481662][ T8299] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.672741][ T8299] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.776214][ T8299] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.088463][ T8299] bridge_slave_1: left allmulticast mode [ 237.089994][ T8299] bridge_slave_1: left promiscuous mode [ 237.091572][ T8299] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.108027][ T8299] bridge_slave_0: left allmulticast mode [ 237.109546][ T8299] bridge_slave_0: left promiscuous mode [ 237.111122][ T8299] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.222317][T11549] __nla_validate_parse: 3 callbacks suppressed [ 237.222332][T11549] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1545'. [ 238.255194][ T10] IPVS: starting estimator thread 0... [ 238.335196][ T6459] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 238.364841][T11541] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 238.369896][T11582] IPVS: using max 35 ests per chain, 84000 per kthread [ 238.593208][T11595] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.1556'. [ 238.749782][ T8299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.792465][ T8299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.846222][ T8299] bond0 (unregistering): Released all slaves [ 239.731315][ T8299] hsr_slave_0: left promiscuous mode [ 239.737278][ T8299] hsr_slave_1: left promiscuous mode [ 239.739235][ T8299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.741407][ T8299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.757759][ T8299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.759989][ T8299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.783450][ T8299] veth1_macvtap: left promiscuous mode [ 239.787475][ T8299] veth0_macvtap: left promiscuous mode [ 239.790942][ T8299] veth1_vlan: left promiscuous mode [ 239.795499][ T8299] veth0_vlan: left promiscuous mode [ 239.797006][T11632] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 239.944903][T11647] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.1567'. [ 240.654618][ T6454] Bluetooth: hci4: command 0x0406 tx timeout [ 241.698854][ T8299] team0 (unregistering): Port device team_slave_1 removed [ 241.854595][ T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 241.860394][ T8299] team0 (unregistering): Port device team_slave_0 removed [ 244.155852][T11498] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 244.168641][T11498] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 244.177897][T11498] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 244.229587][T11498] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 244.245294][T11702] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 244.319331][T11498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.371194][T11498] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.382565][ T466] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.384544][ T466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.466361][ T466] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.468266][ T466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.494972][T11726] dccp_v4_rcv: dropped packet with invalid checksum [ 244.521373][T11498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.533357][T11721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1582'. [ 244.700422][T11498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.734237][T11498] veth0_vlan: entered promiscuous mode [ 244.740626][T11498] veth1_vlan: entered promiscuous mode [ 244.779658][T11498] veth0_macvtap: entered promiscuous mode [ 244.789808][T11498] veth1_macvtap: entered promiscuous mode [ 244.816857][T11498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.819658][T11498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.822264][T11498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.838959][T11498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.839179][T11744] syz.1.1586 uses old SIOCAX25GETINFO [ 244.841620][T11498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.841662][T11498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.863916][T11498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.866910][T11498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.882633][T11498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.888717][T11498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.892213][T11498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.901188][T11498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.904093][T11498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.916529][T11498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.925576][T11498] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.927836][T11498] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.930398][T11498] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.932676][T11498] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.015264][ T8262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.019790][ T8262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.067161][ T8299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.071703][ T8299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.513295][T11799] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1591'. [ 245.515987][T11799] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 246.043327][T11847] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1602'. [ 246.045964][T11847] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 246.256422][ T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 246.315602][T11769] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 246.730448][T11916] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1614'. [ 246.892181][T11927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1620'. [ 247.098679][T11936] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.160762][T11946] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1628'. [ 247.163200][T11946] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 247.228394][T11936] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.816041][ T2367] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.817855][ T2367] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.009249][T11936] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.176273][T11936] bond0: (slave netdevsim0): Releasing backup interface [ 258.204107][T11936] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.303326][T11986] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1643'. [ 258.305803][T11986] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 258.378243][T11995] serio: Serial port ptm0 [ 258.380419][T11936] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.388781][T11936] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.396468][T11936] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.402304][T11936] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.441892][T12001] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1647'. [ 258.836705][ T550] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.939226][ T550] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.035651][ T550] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.097783][ T550] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.254019][ T550] bridge_slave_1: left allmulticast mode [ 259.256286][ T550] bridge_slave_1: left promiscuous mode [ 259.257908][ T550] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.270736][ T550] bridge_slave_0: left allmulticast mode [ 259.272240][ T550] bridge_slave_0: left promiscuous mode [ 259.273775][ T550] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.365319][T12018] nftables ruleset with unbound chain [ 259.495257][ T6459] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.499647][ T6459] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.502379][ T6459] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.506113][ T6459] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.509197][ T6459] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 259.511236][ T6459] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 259.596911][T12033] Bluetooth: MGMT ver 1.23 [ 259.767453][T12029] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 260.786582][ T550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.826649][ T550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.856023][ T550] bond0 (unregistering): Released all slaves [ 260.884740][T12036] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1657'. [ 260.901187][T12036] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 260.951246][T12045] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1659'. [ 261.212256][T12024] chnl_net:caif_netlink_parms(): no params data found [ 261.775876][ T6459] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 262.186433][T12095] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1671'. [ 262.328614][T12105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1674'. [ 262.991984][T12024] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.999175][T12024] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.002860][T12024] bridge_slave_0: entered allmulticast mode [ 263.035178][T12024] bridge_slave_0: entered promiscuous mode [ 263.037778][T12024] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.039625][T12024] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.041610][T12024] bridge_slave_1: entered allmulticast mode [ 263.078031][T12024] bridge_slave_1: entered promiscuous mode [ 263.118362][ T550] hsr_slave_0: left promiscuous mode [ 263.121015][ T550] hsr_slave_1: left promiscuous mode [ 263.122832][ T550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.123530][T12116] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1678'. [ 263.132321][ T550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.145003][ T550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.147019][ T550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.173541][ T550] veth1_macvtap: left promiscuous mode [ 263.182707][ T550] veth0_macvtap: left promiscuous mode [ 263.184307][ T550] veth1_vlan: left promiscuous mode [ 263.186198][ T550] veth0_vlan: left promiscuous mode [ 264.889494][ T550] team0 (unregistering): Port device team_slave_1 removed [ 265.057195][ T550] team0 (unregistering): Port device team_slave_0 removed [ 267.223184][T12024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.227585][T12024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.229145][T12141] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1685'. [ 267.376967][T12024] team0: Port device team_slave_0 added [ 267.386789][T12024] team0: Port device team_slave_1 added [ 267.481388][T12024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.483551][T12024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.513752][T12024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.582980][T12024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.585325][T12024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.598934][T12024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.633108][T12168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1689'. [ 267.695833][T12024] hsr_slave_0: entered promiscuous mode [ 267.698854][T12024] hsr_slave_1: entered promiscuous mode [ 267.700696][T12024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.702784][T12024] Cannot create hsr debugfs directory [ 268.100315][T12184] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1692'. [ 268.105396][T12184] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 268.229922][T12196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1695'. [ 268.278049][T12202] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1697'. [ 268.481288][T12212] tipc: Started in network mode [ 268.482808][T12212] tipc: Node identity 36b5c7bd6175, cluster identity 4711 [ 268.487555][T12212] tipc: Enabled bearer , priority 0 [ 268.525163][T12212] syzkaller0: entered promiscuous mode [ 268.526619][T12212] syzkaller0: entered allmulticast mode [ 268.528477][T12212] tipc: Resetting bearer [ 268.643421][T12211] tipc: Resetting bearer [ 268.685554][T12218] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 269.124158][T12244] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1711'. [ 269.486068][ T6495] tipc: Node number set to 1472251837 [ 270.734785][ T6459] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 279.279583][T12211] tipc: Disabling bearer [ 279.293755][T12229] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1706'. [ 279.299165][T12229] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 279.365921][T12024] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 279.381976][T12024] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 279.386426][T12024] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 279.405207][T12024] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 279.534078][T12261] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 279.588815][T12024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.618386][T12024] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.623833][ T8299] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.625822][ T8299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.648669][ T8299] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.650650][ T8299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.808542][T12292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1722'. [ 279.848708][T12024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.902379][T12024] veth0_vlan: entered promiscuous mode [ 279.918778][T12024] veth1_vlan: entered promiscuous mode [ 279.943141][T12299] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1725'. [ 279.956096][T12024] veth0_macvtap: entered promiscuous mode [ 279.962867][T12024] veth1_macvtap: entered promiscuous mode [ 279.984212][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.992289][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.999114][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.003243][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.009627][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.012486][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.017578][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.020666][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.023550][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.026763][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.031144][T12024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.034250][T12300] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1724'. [ 280.037682][T12300] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 280.058351][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.064892][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.076910][T12024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.094305][T12024] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.099287][T12024] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.103234][T12024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.107040][T12024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.193656][T12315] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1729'. [ 280.219993][ T8299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.222404][ T8299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.247900][ T466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.250218][ T466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.554270][T12343] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1736'. [ 280.582026][T12346] tipc: Started in network mode [ 280.583429][T12346] tipc: Node identity f7, cluster identity 4711 [ 280.592515][T12346] tipc: Node number set to 247 [ 280.664434][T12354] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1740'. [ 281.540946][T12372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1746'. [ 281.615633][ T6459] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 281.676008][T12312] ================================================================== [ 281.678029][T12312] BUG: KASAN: slab-use-after-free in skb_queue_purge_reason+0xac/0x444 [ 281.680186][T12312] Read of size 8 at addr ffff0000d11b4058 by task syz.1.1728/12312 [ 281.682269][T12312] [ 281.682869][T12312] CPU: 1 UID: 0 PID: 12312 Comm: syz.1.1728 Not tainted 6.14.0-rc4-syzkaller-ge056da87c780 #0 [ 281.682883][T12312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 281.682891][T12312] Call trace: [ 281.682894][T12312] show_stack+0x2c/0x3c (C) [ 281.682915][T12312] dump_stack_lvl+0xe4/0x150 [ 281.682930][T12312] print_report+0x198/0x550 [ 281.682943][T12312] kasan_report+0xd8/0x138 [ 281.682954][T12312] __asan_report_load8_noabort+0x20/0x2c [ 281.682968][T12312] skb_queue_purge_reason+0xac/0x444 [ 281.682983][T12312] vhci_flush+0x4c/0x60 [ 281.682998][T12312] hci_dev_reset+0x354/0x514 [ 281.683011][T12312] hci_sock_ioctl+0x3f4/0x75c [ 281.683025][T12312] sock_do_ioctl+0x134/0x2d0 [ 281.683039][T12312] sock_ioctl+0x4ec/0x838 [ 281.683052][T12312] __arm64_sys_ioctl+0x14c/0x1cc [ 281.683064][T12312] invoke_syscall+0x98/0x2b8 [ 281.683077][T12312] el0_svc_common+0x130/0x23c [ 281.683099][T12312] do_el0_svc+0x48/0x58 [ 281.683112][T12312] el0_svc+0x54/0x168 [ 281.683123][T12312] el0t_64_sync_handler+0x84/0x108 [ 281.683143][T12312] el0t_64_sync+0x198/0x19c [ 281.683155][T12312] [ 281.711852][T12312] Allocated by task 12024: [ 281.713036][T12312] kasan_save_track+0x40/0x78 [ 281.714323][T12312] kasan_save_alloc_info+0x40/0x50 [ 281.715698][T12312] __kasan_kmalloc+0xac/0xc4 [ 281.716942][T12312] __kmalloc_cache_noprof+0x2cc/0x428 [ 281.718314][T12312] vhci_open+0x64/0x32c [ 281.719458][T12312] misc_open+0x2b8/0x328 [ 281.720646][T12312] chrdev_open+0x3b0/0x4bc [ 281.721851][T12312] do_dentry_open+0xb7c/0x1538 [ 281.723154][T12312] vfs_open+0x48/0x2d8 [ 281.724208][T12312] path_openat+0x2308/0x2b1c [ 281.725451][T12312] do_filp_open+0x1e8/0x404 [ 281.726597][T12312] do_sys_openat2+0x124/0x1b8 [ 281.727844][T12312] __arm64_sys_openat+0x1f0/0x240 [ 281.729130][T12312] invoke_syscall+0x98/0x2b8 [ 281.730247][T12312] el0_svc_common+0x130/0x23c [ 281.731514][T12312] do_el0_svc+0x48/0x58 [ 281.732589][T12312] el0_svc+0x54/0x168 [ 281.733617][T12312] el0t_64_sync_handler+0x84/0x108 [ 281.734948][T12312] el0t_64_sync+0x198/0x19c [ 281.736112][T12312] [ 281.736696][T12312] Freed by task 12024: [ 281.737856][T12312] kasan_save_track+0x40/0x78 [ 281.739060][T12312] kasan_save_free_info+0x54/0x6c [ 281.740326][T12312] __kasan_slab_free+0x64/0x8c [ 281.741571][T12312] kfree+0x180/0x478 [ 281.742553][T12312] vhci_release+0xb4/0xd0 [ 281.743760][T12312] __fput+0x340/0x760 [ 281.744804][T12312] ____fput+0x20/0x30 [ 281.745934][T12312] task_work_run+0x230/0x2e0 [ 281.747152][T12312] do_exit+0x4e8/0x1acc [ 281.748231][T12312] do_group_exit+0x194/0x22c [ 281.749529][T12312] pid_child_should_wake+0x0/0x1dc [ 281.750825][T12312] invoke_syscall+0x98/0x2b8 [ 281.752085][T12312] el0_svc_common+0x130/0x23c [ 281.753325][T12312] do_el0_svc+0x48/0x58 [ 281.754592][T12312] el0_svc+0x54/0x168 [ 281.755668][T12312] el0t_64_sync_handler+0x84/0x108 [ 281.757018][T12312] el0t_64_sync+0x198/0x19c [ 281.758243][T12312] [ 281.758869][T12312] The buggy address belongs to the object at ffff0000d11b4000 [ 281.758869][T12312] which belongs to the cache kmalloc-1k of size 1024 [ 281.762645][T12312] The buggy address is located 88 bytes inside of [ 281.762645][T12312] freed 1024-byte region [ffff0000d11b4000, ffff0000d11b4400) [ 281.766246][T12312] [ 281.766903][T12312] The buggy address belongs to the physical page: [ 281.768555][T12312] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000d11b7800 pfn:0x1111b0 [ 281.771332][T12312] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 281.773612][T12312] flags: 0x5ffc00000000240(workingset|head|node=0|zone=2|lastcpupid=0x7ff) [ 281.775926][T12312] page_type: f5(slab) [ 281.777113][T12312] raw: 05ffc00000000240 ffff0000c0001dc0 fffffdffc3d13210 fffffdffc33ca210 [ 281.779385][T12312] raw: ffff0000d11b7800 000000000010000d 00000000f5000000 0000000000000000 [ 281.781596][T12312] head: 05ffc00000000240 ffff0000c0001dc0 fffffdffc3d13210 fffffdffc33ca210 [ 281.783812][T12312] head: ffff0000d11b7800 000000000010000d 00000000f5000000 0000000000000000 [ 281.786045][T12312] head: 05ffc00000000003 fffffdffc3446c01 ffffffffffffffff 0000000000000000 [ 281.788269][T12312] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 281.790486][T12312] page dumped because: kasan: bad access detected [ 281.792106][T12312] [ 281.792712][T12312] Memory state around the buggy address: [ 281.794199][T12312] ffff0000d11b3f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 281.796317][T12312] ffff0000d11b3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 281.798406][T12312] >ffff0000d11b4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 281.800515][T12312] ^ [ 281.802355][T12312] ffff0000d11b4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 281.804390][T12312] ffff0000d11b4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 281.806422][T12312] ================================================================== [ 281.852138][T12312] Disabling lock debugging due to kernel taint [ 281.853849][T12312] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 283.885436][ T8262] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.085791][ T8262] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.165933][ T8262] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.245877][ T8262] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.383397][ T8262] bridge_slave_1: left allmulticast mode [ 284.385053][ T8262] bridge_slave_1: left promiscuous mode [ 284.386570][ T8262] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.389332][ T8262] bridge_slave_0: left allmulticast mode [ 284.390844][ T8262] bridge_slave_0: left promiscuous mode [ 284.392311][ T8262] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.866736][ T8262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.918812][ T8262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.965457][ T8262] bond0 (unregistering): Released all slaves [ 286.526573][ T8262] hsr_slave_0: left promiscuous mode [ 286.528457][ T8262] hsr_slave_1: left promiscuous mode [ 286.535461][ T8262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.539398][ T8262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.544664][ T8262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.546659][ T8262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.550685][ T8262] veth1_macvtap: left promiscuous mode [ 286.552133][ T8262] veth0_macvtap: left promiscuous mode [ 286.553626][ T8262] veth1_vlan: left promiscuous mode [ 286.556641][ T8262] veth0_vlan: left promiscuous mode [ 288.365649][ T8262] team0 (unregistering): Port device team_slave_1 removed [ 288.545470][ T8262] team0 (unregistering): Port device team_slave_0 removed