last executing test programs: 2m36.492354467s ago: executing program 0 (id=1779): syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40000) 2m35.900291901s ago: executing program 0 (id=1781): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 2m35.283622205s ago: executing program 0 (id=1787): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x118, r2, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x9ec}]}, @NL80211_ATTR_MESH_CONFIG={0x64, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0xfffd}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x10}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x1}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0xac4}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xf9}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x6}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0xfff9}]}, @NL80211_ATTR_MESH_SETUP={0x78, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_IE={0x51, 0x3, "babf90bbe5e1cd4b568197f47a341eeff6c51b08f0c0a2d5432ec4c9520cdf60da7d395e7e7ad0e85bd126aec38d7934ec6f8ea21c04d12568e139d78d20c3074b5bc9f19a16863bd873e488ad"}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000044}, 0x8800) 2m34.791223438s ago: executing program 0 (id=1791): syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40000) 2m34.127399303s ago: executing program 0 (id=1797): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32, @ANYBLOB="6e21f49a366e9c104ef716150f94e0e64c6b212ba88479735b31de6f950ec86e08fc834b037fec9ecac08aa269fad4db0d0bf8aa1d47659628e1fe48252c10caaac54286e60a7c9405af"], 0x1c}}, 0x0) 2m33.699945745s ago: executing program 0 (id=1801): r0 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(r0, &(0x7f0000000340)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg$unix(r0, &(0x7f0000000100)=[{{0x0, 0x40000, 0x0, 0x0, 0x0, 0xf0ff7f, 0x100000}, 0x8000000}, {{0x0, 0x8, &(0x7f0000000600)=[{0x0, 0x10}], 0x1}}], 0x3ffffffffffffd2, 0x0, 0x0) connect$pppl2tp(r0, 0x0, 0x0) 2m18.227125225s ago: executing program 32 (id=1801): r0 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(r0, &(0x7f0000000340)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg$unix(r0, &(0x7f0000000100)=[{{0x0, 0x40000, 0x0, 0x0, 0x0, 0xf0ff7f, 0x100000}, 0x8000000}, {{0x0, 0x8, &(0x7f0000000600)=[{0x0, 0x10}], 0x1}}], 0x3ffffffffffffd2, 0x0, 0x0) connect$pppl2tp(r0, 0x0, 0x0) 14.276649297s ago: executing program 5 (id=2329): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) 12.786903006s ago: executing program 5 (id=2332): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000000}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8005}, 0x50) 12.24444946s ago: executing program 5 (id=2334): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) r2 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r2) 10.965816818s ago: executing program 5 (id=2338): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1004) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 9.305287559s ago: executing program 1 (id=2347): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000340)=0x27098, 0x4) 7.64765126s ago: executing program 5 (id=2349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000280)={{}, 0x78}, 0x10) sendmsg$nl_generic(r0, 0x0, 0x40) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="80", 0x1}], 0x1}, 0x0) readv(r0, &(0x7f0000000340)=[{0x0}], 0x1) 7.588762241s ago: executing program 4 (id=2350): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 7.307465682s ago: executing program 1 (id=2351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={[0x2a]}, 0x8) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000540)=0x6e, 0x101800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'netdevsim0\x00'}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netpci0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000001280)=ANY=[], 0x274}}, 0x48800) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x34000811) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) 7.218502763s ago: executing program 4 (id=2352): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x100000035, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x18) 7.158062123s ago: executing program 5 (id=2353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00080045000014", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e2631421a290ad"], 0x0) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r4 = syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x3ffff, 0x0, 0xfffffffc, 0x358}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='{\'\x00', &(0x7f00000001c0)='&}.\'-:{\x00', 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r8, 0x80845663, &(0x7f00000002c0)={0x0, @reserved}) r9 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [0x0, 0x20000180, 0x200001b0, 0x200001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000f5ff0000000000000000000000000000feffffff00000000000000000000000000000000000000000000000000dfff0000000000000000180000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001500000000000000100073397a5f74756e00001000000000000079615330000000000000000000000000b76f6e645f736c6176655f310000000073697430000000002000000000000000aaaaaaaaaa0000000000feff0080c20000000000000000000000e8000000e8000000180100006c696d6974004000000000800000000002000000000000000000000000000000200000000000000000f9ff210000009400000000000000003830325f330080000000000000000000000000000000000000000000000800000000000000000000000000000041554449540000b827d85034bb5ec6a300000200000000000000000000000000000000000000000000166d668100"/424]}, 0x220) fchdir(r8) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}]}) r10 = syz_io_uring_setup(0x4237, &(0x7f0000000100), &(0x7f0000000200), &(0x7f00000001c0)) r11 = io_uring_setup(0x34d, &(0x7f0000000300)) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x1b, 0x20000000, r12) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0xc, 0x0, @fd=r4, 0x0, 0x0, 0x7, 0xc, 0x3, {0x0, r12, r2}}) io_uring_enter(r4, 0x3f70, 0x0, 0x0, 0x0, 0x0) 4.5775961s ago: executing program 2 (id=2354): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={0x58, r1, 0x1, 0x8000, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x26, 0x33, @mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_b, @device_b, @random="9d2b2f5c82d9", {0x6, 0x8}, @value=@ver_80211n={0x0, 0x5, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, 0xa80a, 0x4c, @random=0x3, @void, @void}}]}, 0x58}}, 0x0) 4.228009072s ago: executing program 1 (id=2356): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r11, 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r12, 0x1, 0x0, 0x0, {0x2a}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r8, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)={0x140, r12, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x11c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6bc}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xfa, 0x4, "1072438cdb998bfcd41bedd0a95398f8b7e057081e86df56a47607def87b183400f5c4ee66cde47e14d38e7ca492bda484e59ef9aaaae623201a467f522f267ca1a9334e18519f1792c372df7a5f5feee33f8421fecaebcd41bf074617d46e9b727c3c5a8d1a861cefbfd368036395a9ae289a2b61337fe47774aa7d2f47625c220ea954d1068548c091da46aeab9c42b399f8f640e32f339c4b157a7a3efb672deb971067865a94a5190bb76bb5f275a65228c4b2cfc20bd85c867782a13d5686f0bab111e744893c378348c3fd0adcf1564097615b6450b52afcc8a5452bfc49e6286945bc3064886ff6634e23627b132007076105"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x2}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={0x1c, r5, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x700}, 0x0) 3.728579385s ago: executing program 2 (id=2357): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x42) syz_emit_ethernet(0x8e, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x58, 0x6, 0x0, @remote, @local, {[], {{0xfffd, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0xa101}, @exp_fastopen={0xfe, 0x7, 0xf989, "fdfdf7"}, @exp_fastopen={0xfe, 0xc, 0xf989, "9e989976ed956a4d"}, @exp_fastopen={0xfe, 0x6, 0xf989, "b3bc"}, @mptcp=@synack={0x1e, 0x10, 0x1, 0x2, 0x9, 0xff, 0x7}, @fastopen={0x22, 0x2}, @mptcp=@mp_fclose={0x1e, 0xc, 0x3, 0x0, 0xfffffffffffffbff}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) 3.565714696s ago: executing program 4 (id=2358): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 3.154413699s ago: executing program 2 (id=2359): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.125328169s ago: executing program 3 (id=2360): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, r1, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x82, 0x0, 0x0) r3 = socket(0x2b, 0x1, 0x1) sendmmsg$sock(r3, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}}], 0x1, 0x20000001) connect$netlink(r3, &(0x7f0000000000)=@unspec, 0xc) r4 = socket$kcm(0xa, 0x3, 0x73) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="380000000314010000000000000099aa0900020073797a31000000000800410072786500140033007465616d5f736c6176655f3000000000ee778762cbdfc1ccfccce522b07aef09e7d02475b261f73306b2b749d113f70a8816993e80"], 0x38}}, 0x0) sendmsg$kcm(r4, &(0x7f0000006900)={&(0x7f0000006640)=@l2tp6={0xa, 0x0, 0x5, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x3}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000001000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], 0x0, 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f00000005c0)="bb31389c501cac6f", 0x8}], 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r8, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e0001000200"], 0x8) bind$inet6(r7, &(0x7f0000001140)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x700, 0x20, 0x8, 0x1, {{0x9, 0x4, 0x2, 0x11, 0x24, 0x64, 0x0, 0x10, 0x2f, 0x0, @loopback, @remote, {[@generic={0x83, 0xd, "864dd683f80bae3eee4175"}]}}}}}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x9, 0x3, 0x3, 0x22170, r1, 0x10000, '\x00', r9, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0x7, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000000000000000000006624dedf1590ed7d00"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r10], 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00f4a3e9545618e49499000010008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e004a0010", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0xb3, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa88a82900810002dd4e000004aaaa8143aa5888f5c1e0946269c8c7d9a12e8d3830c36373af41ab26c2a6d584de4317779e7d5c5262ba9fd10b3d5e41d929fcd45b154c89eed793a6d65ee0983a420f2f6ed7a6a100f48534bb9be87d6e1dfcd200031cbcc7b78517f934493fdf565f2ab9ddffcce012b39344c5ce63f2da90671933e8be49bc5059cedd1f804bf5e3b33a80c867b565dc503362fdc55646b4ee0b2870cd91117c"], &(0x7f0000000200)={0x1, 0x3, [0x5b2, 0x6ec, 0x674, 0x873]}) 2.618968572s ago: executing program 1 (id=2361): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ipvlan1\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, 0x0, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000340)=0x27098, 0x4) 2.391675154s ago: executing program 2 (id=2362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000040)="c67f0d7df974c298a289e47034", 0xd}], 0x2) 2.243629335s ago: executing program 3 (id=2363): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000280)={{}, 0x78}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="80", 0x1}], 0x1}, 0x0) readv(r0, &(0x7f0000000340)=[{0x0}], 0x1) 2.206330885s ago: executing program 4 (id=2364): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, 0x0, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) r2 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r2) 1.695538968s ago: executing program 1 (id=2365): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x7) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) mmap(&(0x7f000009a000/0x2000)=nil, 0x2000, 0x1, 0x12, r0, 0xc2f88000) 1.634082389s ago: executing program 3 (id=2366): creat(&(0x7f0000000040)='./bus\x00', 0x0) 1.48960978s ago: executing program 2 (id=2367): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbca313a181002c000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) 1.239143631s ago: executing program 1 (id=2368): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x100000035, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x18) 1.206472571s ago: executing program 3 (id=2369): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x42) syz_emit_ethernet(0x8e, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x58, 0x6, 0x0, @remote, @local, {[], {{0xfffd, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0xa101}, @exp_fastopen={0xfe, 0x7, 0xf989, "fdfdf7"}, @exp_fastopen={0xfe, 0xc, 0xf989, "9e989976ed956a4d"}, @exp_fastopen={0xfe, 0x6, 0xf989, "b3bc"}, @mptcp=@synack={0x1e, 0x10, 0x1, 0x2, 0x9, 0xff, 0x7}, @fastopen={0x22, 0x2}, @mptcp=@mp_fclose={0x1e, 0xc, 0x3, 0x0, 0xfffffffffffffbff}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) 934.729243ms ago: executing program 4 (id=2370): syz_emit_ethernet(0x66, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @loopback}}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd050056"], 0xfdef) 892.142143ms ago: executing program 2 (id=2371): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r11, 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r12, 0x1, 0x0, 0x0, {0x2a}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r8, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)={0x140, r12, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x11c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6bc}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xfa, 0x4, "1072438cdb998bfcd41bedd0a95398f8b7e057081e86df56a47607def87b183400f5c4ee66cde47e14d38e7ca492bda484e59ef9aaaae623201a467f522f267ca1a9334e18519f1792c372df7a5f5feee33f8421fecaebcd41bf074617d46e9b727c3c5a8d1a861cefbfd368036395a9ae289a2b61337fe47774aa7d2f47625c220ea954d1068548c091da46aeab9c42b399f8f640e32f339c4b157a7a3efb672deb971067865a94a5190bb76bb5f275a65228c4b2cfc20bd85c867782a13d5686f0bab111e744893c378348c3fd0adcf1564097615b6450b52afcc8a5452bfc49e6286945bc3064886ff6634e23627b132007076105"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x2}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={0x1c, r5, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x700}, 0x0) 599.602305ms ago: executing program 3 (id=2372): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 124.453449ms ago: executing program 4 (id=2373): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, r1, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x82, 0x0, 0x0) r3 = socket(0x2b, 0x1, 0x1) sendmmsg$sock(r3, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}}], 0x1, 0x20000001) connect$netlink(r3, &(0x7f0000000000)=@unspec, 0xc) r4 = socket$kcm(0xa, 0x3, 0x73) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="380000000314010000000000000099aa0900020073797a31000000000800410072786500140033007465616d5f736c6176655f3000000000ee778762cbdfc1ccfccce522b07aef09e7d02475b261f73306b2b749d113f70a8816993e80"], 0x38}}, 0x0) sendmsg$kcm(r4, &(0x7f0000006900)={&(0x7f0000006640)=@l2tp6={0xa, 0x0, 0x5, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x3}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000001000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], 0x0, 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f00000005c0)="bb31389c501cac6f", 0x8}], 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r8, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e0001000200"], 0x8) bind$inet6(r7, &(0x7f0000001140)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x700, 0x20, 0x8, 0x1, {{0x9, 0x4, 0x2, 0x11, 0x24, 0x64, 0x0, 0x10, 0x2f, 0x0, @loopback, @remote, {[@generic={0x83, 0xd, "864dd683f80bae3eee4175"}]}}}}}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x9, 0x3, 0x3, 0x22170, r1, 0x10000, '\x00', r9, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0x7, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000000000000000000006624dedf1590ed7d00"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r10], 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00f4a3e9545618e49499000010008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e004a0010", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0xb3, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa88a82900810002dd4e000004aaaa8143aa5888f5c1e0946269c8c7d9a12e8d3830c36373af41ab26c2a6d584de4317779e7d5c5262ba9fd10b3d5e41d929fcd45b154c89eed793a6d65ee0983a420f2f6ed7a6a100f48534bb9be87d6e1dfcd200031cbcc7b78517f934493fdf565f2ab9ddffcce012b39344c5ce63f2da90671933e8be49bc5059cedd1f804bf5e3b33a80c867b565dc503362fdc55646b4ee0b2870cd91117c"], &(0x7f0000000200)={0x1, 0x3, [0x5b2, 0x6ec, 0x674, 0x873]}) 0s ago: executing program 3 (id=2374): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) kernel console output (not intermixed with test programs): [ 148.769334][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.824998][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.842352][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.853241][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.864419][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.893587][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.914130][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.932330][ T4260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.945092][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.955753][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.966806][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.976493][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.984940][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.994964][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.009258][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.040363][ T4259] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.111081][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.120137][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.194822][ T4260] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.216624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.227497][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.248226][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.261811][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.284164][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.291554][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.318536][ T4261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.347628][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.373814][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.431926][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.451305][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.458680][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.468411][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.484996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.494859][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.502188][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.506387][ T4262] Bluetooth: hci3: command 0x0419 tx timeout [ 149.514527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.515518][ T4262] Bluetooth: hci0: command 0x0419 tx timeout [ 149.525691][ T4270] Bluetooth: hci2: command 0x0419 tx timeout [ 149.574680][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.583144][ T4262] Bluetooth: hci4: command 0x0419 tx timeout [ 149.583223][ T4262] Bluetooth: hci1: command 0x0419 tx timeout [ 149.637452][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.657768][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.665046][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.674064][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.689341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.797424][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.809289][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.840869][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.858949][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.972717][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.984627][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.999894][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.012436][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.024794][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.050768][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.078193][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.097286][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.117369][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.142069][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.171008][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.183180][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.257118][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.268997][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.299550][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.312594][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.322812][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.332971][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.349337][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.361220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.376254][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.423164][ T4261] device veth0_vlan entered promiscuous mode [ 150.439470][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.447360][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.455300][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.468634][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.490463][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.528458][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.550441][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.560502][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.605304][ T4261] device veth1_vlan entered promiscuous mode [ 150.700986][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.748754][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.768158][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.890597][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.907557][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.954307][ T4261] device veth0_macvtap entered promiscuous mode [ 150.998063][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.028654][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.057915][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.088558][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.111799][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.140605][ T4261] device veth1_macvtap entered promiscuous mode [ 151.162766][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.174762][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.184961][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.233737][ T4264] device veth0_vlan entered promiscuous mode [ 151.280872][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.341322][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.357487][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.410980][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.430052][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.456966][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.473074][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.493016][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.513608][ T4264] device veth1_vlan entered promiscuous mode [ 151.527853][ T4265] device veth0_vlan entered promiscuous mode [ 151.540251][ T4261] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.551576][ T4261] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.562598][ T4261] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.572166][ T4261] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.597692][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 151.610299][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.621122][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.681822][ T4265] device veth1_vlan entered promiscuous mode [ 151.801179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.810774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.867735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.879410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.927073][ T4260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.951966][ T4265] device veth0_macvtap entered promiscuous mode [ 151.991473][ T4264] device veth0_macvtap entered promiscuous mode [ 152.021036][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.032577][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 152.054363][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.077805][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.095831][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.111569][ T4265] device veth1_macvtap entered promiscuous mode [ 152.164236][ T4264] device veth1_macvtap entered promiscuous mode [ 152.196061][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.206996][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.219024][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.282903][ T4259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.437381][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.450271][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.475412][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.488742][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.516245][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.537156][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.565854][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.581936][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.597450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.614390][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.637661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.644331][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.657591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.678070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.700607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 152.720584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.731477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.741959][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.752971][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.766955][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.782101][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.794686][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.805215][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.816034][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.829233][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.843414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.877631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.897411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.917301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.941466][ T4265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.953314][ T4265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.975742][ T4265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.984619][ T4265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.029148][ T4264] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.068910][ T4264] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.085852][ T4264] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.094736][ T4264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.250011][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.259785][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.281356][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.282545][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.340410][ T4259] device veth0_vlan entered promiscuous mode [ 153.369540][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.379955][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.389348][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.399734][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 153.409819][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.530008][ T4259] device veth1_vlan entered promiscuous mode [ 153.646503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 153.772352][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.797508][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.820018][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.837377][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.899835][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.912365][ T4260] device veth0_vlan entered promiscuous mode [ 153.926941][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.006488][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.014855][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.021395][ T4260] device veth1_vlan entered promiscuous mode [ 154.043662][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 154.069791][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 154.087510][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 154.252445][ T4259] device veth0_macvtap entered promiscuous mode [ 154.266388][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.274802][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.348936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 154.360476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.380454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.398747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 154.408775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 154.481792][ T4259] device veth1_macvtap entered promiscuous mode [ 154.505725][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 154.541499][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.555151][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.602415][ T4260] device veth0_macvtap entered promiscuous mode [ 154.639778][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.661947][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 154.670023][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.703090][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 154.760213][ T4260] device veth1_macvtap entered promiscuous mode [ 154.828380][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.865271][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.894684][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.917368][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.931147][ T4350] netlink: 'syz.3.4': attribute type 32 has an invalid length. [ 154.941699][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.956365][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.978572][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.002100][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.033707][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.068842][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.105798][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.125640][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.165639][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.211240][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.257194][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.309824][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.340913][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.366485][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.388149][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.410309][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.445842][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.466677][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.490672][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.523938][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.555519][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.600204][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.617513][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.647699][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.664021][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.741763][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.769398][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.798143][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.836001][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.867086][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.905726][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.945701][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.995701][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.035992][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.045463][ T4259] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.065697][ T4259] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.074731][ T4259] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.098200][ T4259] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.149402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.167583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.220474][ T4260] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.256071][ T4260] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.264971][ T4260] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.296776][ T4260] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.838059][ T4368] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10'. [ 157.329322][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.369424][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.453416][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 157.654781][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.683494][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.740700][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 157.788821][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.817959][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.895386][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 157.931384][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.965958][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.995027][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.110994][ T4380] sctp: [Deprecated]: syz.3.13 (pid 4380) Use of int in maxseg socket option. [ 158.110994][ T4380] Use struct sctp_assoc_value instead [ 159.061108][ T4386] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 159.179147][ T4386] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 159.246017][ T4386] team0: Failed to send options change via netlink (err -105) [ 159.279892][ T4386] team0: Port device netdevsim0 added [ 160.178454][ T4405] tipc: Started in network mode [ 160.239225][ T4405] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 160.274366][ T4405] tipc: Enabled bearer , priority 10 [ 160.806167][ T4414] Zero length message leads to an empty skb [ 161.323059][ T4420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23'. [ 161.387028][ T129] tipc: Node number set to 11578026 [ 162.464042][ T4433] Bluetooth: MGMT ver 1.22 [ 168.663879][ T4433] netlink: 'syz.2.27': attribute type 10 has an invalid length. [ 168.731791][ T4433] team0: Port device wlan1 added [ 169.187550][ T4453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'. [ 169.458667][ T4445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'. [ 169.471970][ T4445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 169.492271][ T4445] netlink: 'syz.1.31': attribute type 13 has an invalid length. [ 169.535665][ T4445] netlink: 'syz.1.31': attribute type 12 has an invalid length. [ 169.630034][ T4449] device wlan1 entered promiscuous mode [ 169.739697][ T4449] device macvtap1 entered promiscuous mode [ 169.868233][ T4449] device wlan1 left promiscuous mode [ 170.124845][ T4453] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.132893][ T4453] IPv6: NLM_F_CREATE should be set when creating new route [ 173.439017][ T4513] syz.4.48 uses obsolete (PF_INET,SOCK_PACKET) [ 175.654037][ T4546] device netdevsim0 entered promiscuous mode [ 175.716924][ T4546] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 176.240882][ T4549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.55'. [ 176.410597][ T4549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.504100][ T4556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.57'. [ 176.595936][ T4556] device hsr0 entered promiscuous mode [ 176.649822][ T4558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.57'. [ 176.750787][ T4558] device hsr_slave_0 left promiscuous mode [ 176.836090][ T4558] device hsr_slave_1 left promiscuous mode [ 177.756949][ T4568] device macsec1 entered promiscuous mode [ 179.650725][ T4596] ieee802154 phy0 wpan0: encryption failed: -22 [ 179.754533][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 179.798742][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 179.927684][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.002356][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.108993][ T4607] raw_sendmsg: syz.4.68 forgot to set AF_INET. Fix it! [ 180.295797][ T4598] netlink: 16 bytes leftover after parsing attributes in process `syz.1.67'. [ 180.988436][ T4615] netlink: 256 bytes leftover after parsing attributes in process `syz.4.69'. [ 181.140930][ T4619] netlink: 'syz.3.71': attribute type 29 has an invalid length. [ 181.437276][ T4619] netlink: 'syz.3.71': attribute type 29 has an invalid length. [ 182.246261][ T4635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.76'. [ 182.287710][ T4635] netlink: 24 bytes leftover after parsing attributes in process `syz.0.76'. [ 184.954360][ T4687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.95'. [ 190.359081][ T4785] syz.0.131 (4785) used obsolete PPPIOCDETACH ioctl [ 191.592980][ T4804] device netdevsim0 entered promiscuous mode [ 191.640550][ T4804] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 197.716868][ T4871] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 202.548265][ T4936] device netdevsim0 entered promiscuous mode [ 202.605209][ T4936] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 205.477582][ T4969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.202'. [ 205.496667][ T4969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.202'. [ 205.536826][ T4969] netlink: 'syz.2.202': attribute type 13 has an invalid length. [ 206.377021][ T4977] ebt_limit: overflow, try lower: 570423552/2483027968 [ 206.443872][ T4977] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 206.611843][ T4977] overlayfs: missing 'lowerdir' [ 207.947471][ T4997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.212'. [ 209.500016][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.506736][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.533218][ T5030] netlink: 24 bytes leftover after parsing attributes in process `syz.4.225'. [ 213.876099][ T5064] netlink: 24 bytes leftover after parsing attributes in process `syz.3.239'. [ 216.758787][ T5101] netlink: 24 bytes leftover after parsing attributes in process `syz.0.253'. [ 219.008176][ T5136] ebt_limit: overflow, try lower: 570423552/2483027968 [ 219.024309][ T5136] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 219.033401][ T5136] overlayfs: missing 'lowerdir' [ 221.480324][ T5173] ebt_limit: overflow, try lower: 570423552/2483027968 [ 221.707139][ T5173] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 221.752747][ T5173] overlayfs: missing 'lowerdir' [ 226.855911][ T5237] netlink: 'syz.4.305': attribute type 10 has an invalid length. [ 226.987999][ T5237] team0: Port device netdevsim0 added [ 227.469343][ T5247] netlink: 28 bytes leftover after parsing attributes in process `syz.2.309'. [ 228.691243][ T5263] ebt_limit: overflow, try lower: 570423552/2483027968 [ 228.808036][ T5263] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 228.916494][ T5263] overlayfs: missing 'lowerdir' [ 229.939160][ T5281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.322'. [ 232.317857][ T5317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.335'. [ 233.302791][ T5332] netlink: 148 bytes leftover after parsing attributes in process `syz.3.341'. [ 233.744287][ T5337] netlink: 'syz.2.344': attribute type 29 has an invalid length. [ 233.777907][ T5337] netlink: 'syz.2.344': attribute type 29 has an invalid length. [ 234.446582][ T5350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.349'. [ 235.315970][ T5364] ebt_limit: overflow, try lower: 570423552/2483027968 [ 235.407010][ T5366] netlink: 148 bytes leftover after parsing attributes in process `syz.1.356'. [ 236.330042][ T5382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.362'. [ 236.878346][ T5390] netlink: 'syz.2.365': attribute type 10 has an invalid length. [ 236.900762][ T5390] device netdevsim0 left promiscuous mode [ 236.969381][ T5390] team0: Port device netdevsim0 added [ 237.943018][ T5401] netlink: 148 bytes leftover after parsing attributes in process `syz.2.370'. [ 238.896750][ T5412] netlink: 28 bytes leftover after parsing attributes in process `syz.2.375'. [ 241.341671][ T5447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.808985][ T5453] ebt_limit: overflow, try lower: 570423552/2483027968 [ 241.859262][ T5453] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 241.900084][ T5453] overlayfs: missing 'lowerdir' [ 243.580830][ T5483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.918207][ T5509] ebt_limit: overflow, try lower: 570423552/2483027968 [ 244.954456][ T5509] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 245.032107][ T5509] overlayfs: missing 'lowerdir' [ 247.772299][ T5549] netlink: 'syz.0.430': attribute type 10 has an invalid length. [ 247.862656][ T5549] batman_adv: batadv0: Adding interface: team0 [ 247.880905][ T5549] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.913382][ T5556] ebt_limit: overflow, try lower: 570423552/2483027968 [ 247.929471][ T5549] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 247.941863][ T5553] netlink: 'syz.0.430': attribute type 10 has an invalid length. [ 247.953766][ T5553] netlink: 2 bytes leftover after parsing attributes in process `syz.0.430'. [ 247.964494][ T5552] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 247.993022][ T5553] device team0 entered promiscuous mode [ 247.999130][ T5552] overlayfs: missing 'lowerdir' [ 248.012480][ T5553] device team_slave_0 entered promiscuous mode [ 248.049726][ T5553] device team_slave_1 entered promiscuous mode [ 248.083284][ T5553] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.097704][ T5553] batman_adv: batadv0: Interface activated: team0 [ 248.105808][ T5553] batman_adv: batadv0: Interface deactivated: team0 [ 248.113214][ T5553] batman_adv: batadv0: Removing interface: team0 [ 248.131516][ T5553] bridge0: port 3(team0) entered blocking state [ 248.140573][ T5553] bridge0: port 3(team0) entered disabled state [ 248.154725][ T5553] bridge0: port 3(team0) entered blocking state [ 248.161869][ T5553] bridge0: port 3(team0) entered forwarding state [ 249.654611][ T5582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'. [ 249.689294][ T5582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.443'. [ 250.302931][ T5595] netlink: 24 bytes leftover after parsing attributes in process `syz.0.447'. [ 250.460153][ T5590] netlink: 40 bytes leftover after parsing attributes in process `syz.0.447'. [ 251.796778][ T5593] xt_recent: Unsupported userspace flags (00000042) [ 256.102905][ T5604] netlink: 40 bytes leftover after parsing attributes in process `syz.0.452'. [ 256.117441][ T5608] device netdevsim0 entered promiscuous mode [ 256.228254][ T5608] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 257.369104][ T5628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.460'. [ 257.425851][ T5628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.460'. [ 258.157204][ T5640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.467'. [ 258.197673][ T5641] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 258.310256][ T5644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 259.408603][ T5667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'. [ 259.434405][ T5667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.478'. [ 259.987731][ T5674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 260.035369][ T5676] netlink: 60 bytes leftover after parsing attributes in process `syz.3.482'. [ 260.475182][ T5682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.485'. [ 261.397294][ T5703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'. [ 261.437122][ T5703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.494'. [ 261.851929][ T5709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.496'. [ 262.066955][ T5711] netlink: 60 bytes leftover after parsing attributes in process `syz.1.497'. [ 262.419837][ T5717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.500'. [ 263.052263][ T5732] netlink: 'syz.2.506': attribute type 10 has an invalid length. [ 263.395083][ T5738] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.424852][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 263.504075][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 263.631344][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 263.652507][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 263.687753][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 263.702526][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 263.894683][ T5743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.510'. [ 264.522417][ T5757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.515'. [ 265.359811][ T5768] netlink: 'syz.4.520': attribute type 10 has an invalid length. [ 265.368722][ T5768] netlink: 2 bytes leftover after parsing attributes in process `syz.4.520'. [ 265.392618][ T5768] device team0 entered promiscuous mode [ 265.399172][ T5768] device team_slave_0 entered promiscuous mode [ 265.409642][ T5768] device team_slave_1 entered promiscuous mode [ 265.437413][ T5768] bridge0: port 3(team0) entered blocking state [ 265.454680][ T5768] bridge0: port 3(team0) entered disabled state [ 265.512047][ T5768] bridge0: port 3(team0) entered blocking state [ 265.518773][ T5768] bridge0: port 3(team0) entered forwarding state [ 265.997324][ T5777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'. [ 266.206112][ T5782] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.326689][ T5782] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 266.352631][ T5782] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 266.444718][ T5782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.483279][ T5782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 266.954315][ T5795] xt_recent: Unsupported userspace flags (00000042) [ 267.432600][ T5803] netlink: 'syz.2.536': attribute type 10 has an invalid length. [ 267.462413][ T5803] netlink: 2 bytes leftover after parsing attributes in process `syz.2.536'. [ 267.504290][ T5803] device team0 entered promiscuous mode [ 267.524707][ T5803] device team_slave_0 entered promiscuous mode [ 267.546359][ T5803] device team_slave_1 entered promiscuous mode [ 267.566293][ T5803] device wlan1 entered promiscuous mode [ 267.599800][ T5803] device netdevsim0 entered promiscuous mode [ 267.627899][ T5803] bridge0: port 3(team0) entered blocking state [ 267.661799][ T5803] bridge0: port 3(team0) entered disabled state [ 267.730781][ T5803] bridge0: port 3(team0) entered blocking state [ 267.737395][ T5803] bridge0: port 3(team0) entered forwarding state [ 267.896077][ T4262] Bluetooth: hci0: command 0x0406 tx timeout [ 267.902693][ T4262] Bluetooth: hci3: command 0x0406 tx timeout [ 267.907780][ T4270] Bluetooth: hci2: command 0x0406 tx timeout [ 267.909095][ T4269] Bluetooth: hci4: command 0x0406 tx timeout [ 267.914905][ T4270] Bluetooth: hci1: command 0x0406 tx timeout [ 268.427444][ T5820] ieee802154 phy0 wpan0: encryption failed: -22 [ 268.457828][ T5820] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 268.520059][ T5820] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 268.703605][ T5820] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 268.778015][ T5820] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 268.814267][ T5820] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.846281][ T5820] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 269.159827][ T5829] xt_recent: Unsupported userspace flags (00000042) [ 269.320537][ T5834] device erspan1 entered promiscuous mode [ 270.374813][ T5851] netlink: 24 bytes leftover after parsing attributes in process `syz.3.556'. [ 270.949144][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.955688][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.342068][ T5886] sctp: [Deprecated]: syz.4.564 (pid 5886) Use of int in max_burst socket option deprecated. [ 272.342068][ T5886] Use struct sctp_assoc_value instead [ 272.810026][ T5896] ebt_limit: overflow, try lower: 570423552/2483027968 [ 272.911760][ T5896] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 272.927756][ T5896] overlayfs: missing 'lowerdir' [ 276.293098][ T5918] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 276.334247][ T5918] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 276.376573][ T5918] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 276.405611][ T5918] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 276.450126][ T5918] device geneve2 entered promiscuous mode [ 277.368947][ T5935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.583'. [ 278.228079][ T5941] ieee802154 phy0 wpan0: encryption failed: -22 [ 278.269253][ T5941] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 278.381901][ T5941] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 278.419430][ T5941] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.461516][ T5941] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.265932][ T5956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.593'. [ 279.515664][ T5964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.595'. [ 280.624644][ T5980] ieee802154 phy0 wpan0: encryption failed: -22 [ 281.080598][ T5986] ebt_limit: overflow, try lower: 570423552/2483027968 [ 281.107566][ T5986] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 281.155696][ T5986] overlayfs: missing 'lowerdir' [ 281.606704][ T5992] netlink: 28 bytes leftover after parsing attributes in process `syz.3.608'. [ 281.914103][ T5998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.610'. [ 282.176078][ T6002] netlink: 'syz.2.612': attribute type 10 has an invalid length. [ 282.195575][ T6002] netlink: 2 bytes leftover after parsing attributes in process `syz.2.612'. [ 284.349128][ T6031] ieee802154 phy0 wpan0: encryption failed: -22 [ 284.406310][ T6033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.624'. [ 284.480570][ T6035] netlink: 248 bytes leftover after parsing attributes in process `syz.3.625'. [ 285.780119][ T6054] netlink: 48 bytes leftover after parsing attributes in process `syz.1.631'. [ 286.420822][ T6062] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.736118][ T6065] netlink: 248 bytes leftover after parsing attributes in process `syz.3.637'. [ 286.736908][ T6066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.638'. [ 287.536243][ T6080] ebt_limit: overflow, try lower: 570423552/2483027968 [ 287.707228][ T6080] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 287.734852][ T6080] overlayfs: missing 'lowerdir' [ 289.286025][ T6100] netlink: 48 bytes leftover after parsing attributes in process `syz.0.651'. [ 289.535870][ T6102] netlink: 248 bytes leftover after parsing attributes in process `syz.2.652'. [ 289.905316][ T6106] netlink: 24 bytes leftover after parsing attributes in process `syz.1.653'. [ 290.876848][ T6123] netlink: 28 bytes leftover after parsing attributes in process `syz.4.661'. [ 291.312655][ T6130] netlink: 48 bytes leftover after parsing attributes in process `syz.0.664'. [ 291.778421][ T6135] netlink: 248 bytes leftover after parsing attributes in process `syz.1.666'. [ 292.760108][ T6148] netlink: 28 bytes leftover after parsing attributes in process `syz.1.673'. [ 292.988668][ T6153] netlink: 48 bytes leftover after parsing attributes in process `syz.3.675'. [ 293.324546][ T6159] netlink: 248 bytes leftover after parsing attributes in process `syz.4.678'. [ 294.249458][ T6166] ebt_limit: overflow, try lower: 570423552/2483027968 [ 294.478683][ T6166] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 294.559968][ T6166] overlayfs: missing 'lowerdir' [ 295.249516][ T6151] xt_recent: Unsupported userspace flags (00000042) [ 296.337992][ T6186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.688'. [ 296.589989][ T6190] netlink: 228 bytes leftover after parsing attributes in process `syz.2.690'. [ 298.341187][ T6216] netlink: 28 bytes leftover after parsing attributes in process `syz.4.702'. [ 298.541399][ T6218] netlink: 228 bytes leftover after parsing attributes in process `syz.0.704'. [ 299.794552][ T6212] xt_recent: Unsupported userspace flags (00000042) [ 300.619669][ T6252] netlink: 228 bytes leftover after parsing attributes in process `syz.3.717'. [ 300.755409][ T6254] ebt_limit: overflow, try lower: 570423552/2483027968 [ 300.967789][ T6254] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 301.019445][ T6254] overlayfs: missing 'lowerdir' [ 301.126343][ T6260] netlink: 17 bytes leftover after parsing attributes in process `syz.4.720'. [ 303.010579][ T6290] netlink: 228 bytes leftover after parsing attributes in process `syz.3.731'. [ 303.894078][ T6297] netlink: 17 bytes leftover after parsing attributes in process `syz.1.734'. [ 305.496695][ T6314] netlink: 228 bytes leftover after parsing attributes in process `syz.4.742'. [ 306.785848][ T6331] netlink: 17 bytes leftover after parsing attributes in process `syz.2.747'. [ 307.388007][ T6347] ebt_limit: overflow, try lower: 570423552/2483027968 [ 307.451568][ T6350] netlink: 228 bytes leftover after parsing attributes in process `syz.2.755'. [ 307.534654][ T6347] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 307.565896][ T6347] overlayfs: missing 'lowerdir' [ 313.109311][ T6400] xt_recent: Unsupported userspace flags (00000042) [ 316.053208][ T6440] ebt_limit: overflow, try lower: 570423552/2483027968 [ 316.249752][ T6440] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 316.318943][ T6440] overlayfs: missing 'lowerdir' [ 317.848566][ T6461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.792'. [ 319.046815][ T6481] netlink: 48 bytes leftover after parsing attributes in process `syz.3.801'. [ 319.060843][ T6480] ebt_limit: overflow, try lower: 570423552/2483027968 [ 319.211088][ T6480] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 319.231472][ T6480] overlayfs: missing 'lowerdir' [ 320.198378][ T6501] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 320.273606][ T6501] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 320.303228][ T6501] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 320.333702][ T6501] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 320.424077][ T6501] device geneve2 entered promiscuous mode [ 321.155893][ T6512] netlink: 48 bytes leftover after parsing attributes in process `syz.1.815'. [ 324.585680][ T6567] ebt_limit: overflow, try lower: 570423552/2483027968 [ 324.624289][ T6567] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 324.673343][ T6567] overlayfs: missing 'lowerdir' [ 328.535509][ C1] sched: RT throttling activated [ 332.210795][ T6650] netlink: 'syz.3.872': attribute type 10 has an invalid length. [ 332.255929][ T6650] netlink: 2 bytes leftover after parsing attributes in process `syz.3.872'. [ 332.264864][ T6650] device team0 entered promiscuous mode [ 332.286024][ T6650] device team_slave_0 entered promiscuous mode [ 332.293219][ T6650] device team_slave_1 entered promiscuous mode [ 332.314139][ T6650] bridge0: port 3(team0) entered blocking state [ 332.334871][ T6650] bridge0: port 3(team0) entered disabled state [ 332.362172][ T6650] bridge0: port 3(team0) entered blocking state [ 332.368817][ T6650] bridge0: port 3(team0) entered forwarding state [ 332.379262][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.385905][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.950667][ T6666] netlink: 24 bytes leftover after parsing attributes in process `syz.3.878'. [ 333.119621][ T6669] ebt_limit: overflow, try lower: 570423552/2483027968 [ 333.178183][ T6669] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 333.255766][ T6669] overlayfs: missing 'lowerdir' [ 335.434709][ T6696] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 335.464375][ T6696] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 335.493894][ T6696] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 335.533768][ T6696] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 335.559144][ T6696] device geneve2 entered promiscuous mode [ 335.801777][ T6702] netlink: 24 bytes leftover after parsing attributes in process `syz.1.893'. [ 337.531720][ T6728] netlink: 'syz.1.905': attribute type 10 has an invalid length. [ 337.556484][ T6728] netlink: 2 bytes leftover after parsing attributes in process `syz.1.905'. [ 337.565426][ T6728] device team0 entered promiscuous mode [ 337.615971][ T6728] device team_slave_0 entered promiscuous mode [ 337.627489][ T6728] device team_slave_1 entered promiscuous mode [ 337.656508][ T6728] device netdevsim0 entered promiscuous mode [ 337.675197][ T6728] bridge0: port 3(team0) entered blocking state [ 337.701404][ T6728] bridge0: port 3(team0) entered disabled state [ 337.754163][ T6728] bridge0: port 3(team0) entered blocking state [ 337.760834][ T6728] bridge0: port 3(team0) entered forwarding state [ 337.928101][ T6735] netlink: 24 bytes leftover after parsing attributes in process `syz.4.908'. [ 339.399427][ T6758] ebt_limit: overflow, try lower: 570423552/2483027968 [ 339.446607][ T6758] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 339.494788][ T6758] overlayfs: missing 'lowerdir' [ 340.097553][ T6769] netlink: 24 bytes leftover after parsing attributes in process `syz.3.923'. [ 340.478302][ T6772] netlink: 485 bytes leftover after parsing attributes in process `syz.4.924'. [ 340.839128][ T6778] netlink: 40 bytes leftover after parsing attributes in process `syz.3.927'. [ 341.441265][ T6789] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 341.452384][ T6789] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 341.463174][ T6789] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 341.472972][ T6789] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 341.507127][ T6789] device geneve2 entered promiscuous mode [ 342.737576][ T6801] netlink: 24 bytes leftover after parsing attributes in process `syz.4.937'. [ 343.368811][ T6807] netlink: 'syz.4.939': attribute type 10 has an invalid length. [ 343.389482][ T6808] netlink: 485 bytes leftover after parsing attributes in process `syz.2.940'. [ 343.405788][ T6807] netlink: 2 bytes leftover after parsing attributes in process `syz.4.939'. [ 343.568145][ T6811] netlink: 40 bytes leftover after parsing attributes in process `syz.3.941'. [ 345.017557][ T6832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.949'. [ 345.451293][ T6839] netlink: 485 bytes leftover after parsing attributes in process `syz.3.952'. [ 345.972383][ T6847] netlink: 40 bytes leftover after parsing attributes in process `syz.3.955'. [ 347.436782][ T6867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.963'. [ 348.055060][ T6878] netlink: 40 bytes leftover after parsing attributes in process `syz.1.968'. [ 349.797888][ T6897] netlink: 485 bytes leftover after parsing attributes in process `syz.3.976'. [ 349.890761][ T6899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.977'. [ 350.412256][ T6908] netlink: 40 bytes leftover after parsing attributes in process `syz.3.980'. [ 350.560583][ T6910] netlink: 'syz.1.981': attribute type 10 has an invalid length. [ 350.648407][ T6910] bridge0: port 3(team0) entered disabled state [ 350.856691][ T6910] device team0 left promiscuous mode [ 350.868256][ T6910] device team_slave_0 left promiscuous mode [ 350.906268][ T6910] device team_slave_1 left promiscuous mode [ 350.914018][ T6910] device netdevsim0 left promiscuous mode [ 350.942523][ T6910] bridge0: port 3(team0) entered disabled state [ 351.008579][ T6910] batman_adv: batadv0: Adding interface: team0 [ 351.033139][ T6910] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.153129][ T6910] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 352.360840][ T6929] netlink: 485 bytes leftover after parsing attributes in process `syz.1.990'. [ 352.627517][ T6933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.992'. [ 352.796660][ T6935] netlink: 40 bytes leftover after parsing attributes in process `syz.3.993'. [ 353.002341][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.995'. [ 353.293427][ T6944] netlink: 'syz.3.996': attribute type 10 has an invalid length. [ 353.341974][ T6944] tipc: Resetting bearer [ 353.403085][ T6944] bridge0: port 3(team0) entered disabled state [ 353.419405][ T6944] device team0 left promiscuous mode [ 353.436279][ T6944] device team_slave_0 left promiscuous mode [ 353.451713][ T6944] device team_slave_1 left promiscuous mode [ 353.490064][ T6944] bridge0: port 3(team0) entered disabled state [ 353.593941][ T6944] batman_adv: batadv0: Adding interface: team0 [ 353.605798][ T6944] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.634520][ T6944] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 354.280912][ T6961] netlink: 141 bytes leftover after parsing attributes in process `syz.4.1004'. [ 354.887564][ T6968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1007'. [ 355.562854][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1013'. [ 356.031165][ T6993] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 356.048123][ T6993] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 356.081120][ T6993] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 356.095711][ T6993] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 356.112424][ T6993] device geneve2 entered promiscuous mode [ 357.248923][ T7004] netlink: 141 bytes leftover after parsing attributes in process `syz.4.1022'. [ 357.328694][ T7007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1023'. [ 357.719072][ T7015] ebt_limit: overflow, try lower: 570423552/2483027968 [ 359.524862][ T7024] xt_recent: Unsupported userspace flags (00000042) [ 360.730103][ T7044] netlink: 141 bytes leftover after parsing attributes in process `syz.2.1036'. [ 360.862340][ T7048] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1038'. [ 362.966012][ T7081] netlink: 141 bytes leftover after parsing attributes in process `syz.3.1049'. [ 363.238139][ T7087] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1052'. [ 364.067402][ T7105] ebt_limit: overflow, try lower: 570423552/2483027968 [ 364.108242][ T7077] xt_recent: Unsupported userspace flags (00000042) [ 364.273349][ T7105] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 364.345240][ T7105] overlayfs: missing 'lowerdir' [ 365.221694][ T7118] netlink: 'syz.2.1061': attribute type 10 has an invalid length. [ 365.299462][ T7118] bridge0: port 3(team0) entered disabled state [ 365.562797][ T7118] device team0 left promiscuous mode [ 365.577657][ T7118] device team_slave_0 left promiscuous mode [ 365.584179][ T7118] device team_slave_1 left promiscuous mode [ 365.606080][ T7118] device wlan1 left promiscuous mode [ 365.616203][ T7118] device netdevsim0 left promiscuous mode [ 365.626579][ T7118] bridge0: port 3(team0) entered disabled state [ 365.648263][ T7125] netlink: 141 bytes leftover after parsing attributes in process `syz.3.1063'. [ 365.677413][ T7118] batman_adv: batadv0: Adding interface: team0 [ 365.692135][ T7118] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 365.739778][ T7118] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 365.767102][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1062'. [ 366.310544][ T7130] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1065'. [ 368.269474][ T7159] netlink: 141 bytes leftover after parsing attributes in process `syz.2.1074'. [ 369.167323][ T7154] xt_recent: Unsupported userspace flags (00000042) [ 373.625684][ T7163] netlink: 'syz.0.1076': attribute type 10 has an invalid length. [ 373.649783][ T7163] bridge0: port 3(team0) entered disabled state [ 373.746334][ T7163] device team0 left promiscuous mode [ 373.751762][ T7163] device team_slave_0 left promiscuous mode [ 373.795828][ T7163] device team_slave_1 left promiscuous mode [ 373.802509][ T7163] bridge0: port 3(team0) entered disabled state [ 373.839478][ T7163] batman_adv: batadv0: Adding interface: team0 [ 373.855615][ T7163] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.928296][ T7163] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 373.951232][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1077'. [ 374.045346][ T7172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1079'. [ 376.820182][ T7216] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1093'. [ 379.515874][ T7226] xt_recent: Unsupported userspace flags (00000042) [ 379.538161][ T7253] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1106'. [ 382.571166][ T7296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1122'. [ 383.544563][ T7310] netlink: 105 bytes leftover after parsing attributes in process `syz.3.1126'. [ 385.994767][ T7353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1139'. [ 386.574833][ T7360] netlink: 105 bytes leftover after parsing attributes in process `syz.1.1141'. [ 388.999227][ T7391] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1153'. [ 389.376228][ T7399] netlink: 'syz.2.1154': attribute type 10 has an invalid length. [ 389.879933][ T7403] netlink: 105 bytes leftover after parsing attributes in process `syz.4.1155'. [ 392.488036][ T7424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1165'. [ 393.630419][ T7448] netlink: 'syz.2.1171': attribute type 10 has an invalid length. [ 393.819537][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 393.829408][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.258934][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1179'. [ 396.306268][ T7473] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1180'. [ 396.664283][ T7482] netlink: 'syz.3.1183': attribute type 10 has an invalid length. [ 399.834298][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1195'. [ 400.217202][ T7522] netlink: 'syz.3.1196': attribute type 10 has an invalid length. [ 400.250489][ T7524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1197'. [ 403.029744][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1210'. [ 403.901698][ T7563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1214'. [ 403.925972][ T7561] netlink: 'syz.0.1212': attribute type 10 has an invalid length. [ 405.997398][ T7596] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1226'. [ 411.506070][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1249'. [ 411.593589][ T7654] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.603294][ T7654] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.612374][ T7654] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.621586][ T7654] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.656733][ T7654] device vxlan0 entered promiscuous mode [ 413.942126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 414.115964][ T7661] device vlan3 entered promiscuous mode [ 416.817314][ T7683] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1256'. [ 419.659966][ T7698] netlink: 85 bytes leftover after parsing attributes in process `syz.4.1261'. [ 424.347547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #288!!! [ 424.366014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 424.381017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 424.415880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 424.426508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 424.435531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 424.444481][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 424.700147][ T7725] device vlan3 entered promiscuous mode [ 425.809758][ T7731] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1269'. [ 426.405397][ T7741] netlink: 'syz.1.1272': attribute type 10 has an invalid length. [ 428.974735][ T7768] xt_recent: Unsupported userspace flags (00000042) [ 429.939691][ T7775] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 430.425849][ T26] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 430.676003][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 430.702313][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.735247][ T7781] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1283'. [ 430.786647][ T26] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 430.847048][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.927746][ T26] usb 5-1: config 0 descriptor?? [ 431.243614][ T26] usb 5-1: USB disconnect, device number 2 [ 431.469199][ T7786] device vlan3 entered promiscuous mode [ 432.285209][ T7793] netlink: 'syz.3.1288': attribute type 10 has an invalid length. [ 432.616290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 432.624780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 438.180469][ T7823] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1295'. [ 438.773938][ T7833] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 438.851234][ T7833] overlayfs: missing 'lowerdir' [ 439.125818][ T4321] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 439.264031][ T7845] netlink: 'syz.2.1302': attribute type 10 has an invalid length. [ 439.316007][ T4321] usb 4-1: Using ep0 maxpacket: 16 [ 439.325247][ T4321] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.364235][ T4321] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 439.398200][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.443008][ T4321] usb 4-1: config 0 descriptor?? [ 439.744855][ T26] usb 4-1: USB disconnect, device number 2 [ 445.290434][ T7872] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1310'. [ 445.504442][ T7874] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1311'. [ 445.524835][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1311'. [ 446.189758][ T7881] netlink: 'syz.2.1314': attribute type 29 has an invalid length. [ 446.256345][ T7881] netlink: 'syz.2.1314': attribute type 29 has an invalid length. [ 449.315669][ T4321] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 449.535662][ T4321] usb 1-1: Using ep0 maxpacket: 16 [ 449.712174][ T4321] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.035245][ T4321] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 450.087639][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.879508][ T4321] usb 1-1: config 0 descriptor?? [ 451.101347][ T7912] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1323'. [ 451.119636][ T26] usb 1-1: USB disconnect, device number 2 [ 451.846038][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1324'. [ 451.987728][ T7916] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1325'. [ 452.047647][ T7920] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1326'. [ 452.079048][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1326'. [ 452.211919][ T7923] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 452.254318][ T7923] overlayfs: missing 'lowerdir' [ 452.338336][ T7928] netlink: 'syz.3.1329': attribute type 29 has an invalid length. [ 452.378693][ T7928] netlink: 'syz.3.1329': attribute type 29 has an invalid length. [ 452.878689][ T7934] device syzkaller1 entered promiscuous mode [ 455.354218][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 455.393329][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 456.775668][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1339'. [ 457.108212][ T7964] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1340'. [ 457.191234][ T7965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1342'. [ 457.225828][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1342'. [ 457.248495][ T7968] netlink: 'syz.4.1343': attribute type 29 has an invalid length. [ 457.277634][ T7968] netlink: 'syz.4.1343': attribute type 29 has an invalid length. [ 463.413299][ T8005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1353'. [ 463.955246][ T8010] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1355'. [ 464.028731][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1356'. [ 464.041304][ T8015] xt_CT: You must specify a L4 protocol and not use inversions on it [ 464.102594][ T8015] netlink: 'syz.1.1357': attribute type 10 has an invalid length. [ 464.267005][ T8015] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 464.439598][ T8020] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 464.569390][ T8020] overlayfs: missing 'lowerdir' [ 464.658215][ T8024] netlink: 'syz.3.1360': attribute type 29 has an invalid length. [ 464.833456][ T8024] netlink: 'syz.3.1360': attribute type 29 has an invalid length. [ 464.937117][ T8032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1363'. [ 466.788061][ T8047] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1365'. [ 468.583072][ T8063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1371'. [ 468.618657][ T8065] ax25_connect(): syz.1.1372 uses autobind, please contact jreuter@yaina.de [ 468.655002][ T8066] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1370'. [ 469.193413][ T8072] netlink: 'syz.3.1375': attribute type 29 has an invalid length. [ 469.262901][ T8076] syzkaller0: create flow: hash 1657660557 index 1 [ 469.425054][ T8072] netlink: 'syz.3.1375': attribute type 29 has an invalid length. [ 469.441346][ T26] syzkaller0: tun_net_xmit 76 [ 469.449054][ T26] syzkaller0: tun_net_xmit 48 [ 469.476152][ T22] syzkaller0: tun_net_xmit 76 [ 469.596289][ T26] syzkaller0: tun_net_xmit 76 [ 469.968816][ T4267] syzkaller0: tun_net_xmit 76 [ 470.016878][ T8069] syzkaller0: delete flow: hash 1657660557 index 1 [ 480.993730][ T8101] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1385'. [ 481.020502][ T8105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1386'. [ 483.057010][ T8142] netlink: 'syz.1.1399': attribute type 1 has an invalid length. [ 483.236172][ T8142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 483.376172][ T8144] bond1: (slave bridge1): making interface the new active one [ 483.454475][ T8144] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 483.489604][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 483.588717][ T8148] device vlan3 entered promiscuous mode [ 483.634223][ T8148] device bond1 entered promiscuous mode [ 483.684479][ T8148] device bridge1 entered promiscuous mode [ 486.530163][ T8166] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1407'. [ 486.851231][ T8169] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1408'. [ 488.495828][ T8183] sctp: failed to load transform for md5: -2 [ 491.877704][ T8216] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1421'. [ 492.210830][ T8223] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1423'. [ 496.562711][ T8227] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.570590][ T8227] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.283927][ T8288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1435'. [ 498.790933][ T8293] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1438'. [ 500.579481][ T8328] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1450'. [ 503.960622][ T8343] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 506.156322][ T8359] netlink: 'syz.1.1462': attribute type 1 has an invalid length. [ 506.409120][ T8359] 8021q: adding VLAN 0 to HW filter on device bond2 [ 506.538714][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1465'. [ 507.881268][ T8367] 8021q: adding VLAN 0 to HW filter on device bond2 [ 507.916675][ T8367] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 507.962419][ T8367] bond2: (slave vti0): Error -95 calling set_mac_address [ 509.609317][ T8380] batman_adv: batadv0: Adding interface: dummy0 [ 509.647225][ T8380] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.715743][ T8380] batman_adv: batadv0: Interface activated: dummy0 [ 509.797312][ T8382] batadv0: mtu less than device minimum [ 509.807477][ T8382] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.823331][ T8382] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.841936][ T8382] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.858633][ T8382] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.875315][ T8382] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.890250][ T8382] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.905235][ T8382] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.920399][ T8382] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.935255][ T8382] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 510.210999][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1473'. [ 514.577131][ T8441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1487'. [ 514.709833][ T8448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1488'. [ 515.735541][ T8246] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 516.646242][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1491'. [ 516.710578][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 516.717642][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 516.857593][ T8447] delete_channel: no stack [ 516.935780][ T8246] usb 4-1: Using ep0 maxpacket: 16 [ 516.956044][ T8246] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.995531][ T8246] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 517.046446][ T8246] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 517.131333][ T8246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.219381][ T8246] usb 4-1: config 0 descriptor?? [ 517.304417][ T8246] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 517.665609][ T8376] usb 4-1: USB disconnect, device number 3 [ 518.110678][ T8472] device vlan3 entered promiscuous mode [ 518.616548][ T8479] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1499'. [ 520.141014][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1503'. [ 522.075933][ T4310] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 522.277443][ T8526] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1515'. [ 522.287610][ T4310] usb 3-1: Using ep0 maxpacket: 16 [ 522.296425][ T4310] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.335684][ T4310] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 522.379258][ T4310] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 522.397828][ T4310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.411237][ T4310] usb 3-1: config 0 descriptor?? [ 522.430129][ T4310] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 522.647739][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1517'. [ 522.649678][ T8247] usb 3-1: USB disconnect, device number 2 [ 522.964228][ T8533] net_ratelimit: 10 callbacks suppressed [ 522.964260][ T8533] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 526.287672][ T8562] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1528'. [ 526.698663][ T8569] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 527.475791][ T8377] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 529.515734][ T8377] usb 5-1: Using ep0 maxpacket: 16 [ 529.526613][ T8377] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.542696][ T8377] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 529.568000][ T8377] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 529.734688][ T8377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.760398][ T8377] usb 5-1: config 0 descriptor?? [ 529.914356][ T8377] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 530.012127][ T8592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1538'. [ 530.282189][ T8594] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1539'. [ 530.283473][ T4310] usb 5-1: USB disconnect, device number 3 [ 530.656778][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1541'. [ 530.921664][ T8608] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1544'. [ 533.035273][ T8638] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1555'. [ 533.211949][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1556'. [ 533.284949][ T8640] device vlan3 entered promiscuous mode [ 533.324573][ T8642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1557'. [ 534.669686][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1566'. [ 534.758102][ T8661] device dummy0 entered promiscuous mode [ 534.780257][ T8661] device macvtap1 entered promiscuous mode [ 534.907108][ T8666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1568'. [ 535.136903][ T8664] device dummy0 left promiscuous mode [ 537.926852][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1571'. [ 537.984966][ T8681] device vlan3 entered promiscuous mode [ 538.014767][ T8377] syzkaller0: tun_net_xmit 76 [ 538.021112][ T8377] syzkaller0: tun_net_xmit 48 [ 538.043100][ T8685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1572'. [ 538.047647][ T4310] syzkaller0: tun_net_xmit 76 [ 538.797102][ T8697] netlink: 'syz.4.1576': attribute type 11 has an invalid length. [ 545.186142][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1584'. [ 545.229900][ T8713] device erspan0 entered promiscuous mode [ 545.256093][ T8713] device macvtap1 entered promiscuous mode [ 545.331163][ T8720] device erspan0 left promiscuous mode [ 545.580534][ T8722] netlink: 'syz.2.1583': attribute type 10 has an invalid length. [ 545.596235][ T4310] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 545.611269][ T8722] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.619224][ T8722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.700083][ T8722] team0: Port device bridge0 added [ 545.716533][ T8726] netlink: 'syz.1.1585': attribute type 1 has an invalid length. [ 545.805723][ T4310] usb 4-1: Using ep0 maxpacket: 16 [ 545.814282][ T4310] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.835576][ T4310] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 545.866086][ T4310] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 545.912156][ T4310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.959348][ T4310] usb 4-1: config 0 descriptor?? [ 546.005941][ T8732] 8021q: adding VLAN 0 to HW filter on device bond4 [ 546.021915][ T8732] bond3: (slave bond4): making interface the new active one [ 546.033176][ T8732] bond3: (slave bond4): Enslaving as an active interface with an up link [ 546.043616][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 546.057381][ T4310] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 546.075361][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 546.250369][ T8249] usb 4-1: USB disconnect, device number 4 [ 546.535893][ T8740] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1590'. [ 546.612177][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1592'. [ 553.304608][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1599'. [ 553.368474][ T8766] device erspan0 entered promiscuous mode [ 553.374992][ T8766] device macvtap2 entered promiscuous mode [ 553.662412][ T8767] device erspan0 left promiscuous mode [ 554.034409][ T8769] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.062597][ T8769] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.088385][ T8769] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 554.127881][ T8773] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1601'. [ 554.306698][ T8769] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.345891][ T8769] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.375961][ T8769] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 554.786796][ T8769] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.810556][ T8769] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.842771][ T8769] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 555.019388][ T8769] team0: Port device netdevsim0 removed [ 555.043932][ T8769] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.047524][ T8797] x_tables: eb_tables: ip6.0 match: invalid size 80 (kernel) != (user) 0 [ 555.069194][ T8769] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.092507][ T8769] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 555.434776][ T8769] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.460419][ T8769] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 555.491212][ T8769] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 555.539180][ T8769] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.575756][ T8769] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 555.594586][ T8769] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 555.613728][ T8803] netlink: 'syz.1.1611': attribute type 10 has an invalid length. [ 555.810530][ T8769] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.861303][ T8769] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 555.895499][ T8769] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 555.941264][ T8769] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.965841][ T8769] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 555.974308][ T8769] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 558.469609][ T8245] syzkaller0: tun_net_xmit 76 [ 558.474781][ T8245] syzkaller0: tun_net_xmit 48 [ 558.527131][ T8249] syzkaller0: tun_net_xmit 76 [ 558.821605][ T8825] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 558.829285][ T8825] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 558.860135][ T8825] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 558.866794][ T8825] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 558.884389][ T8825] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 558.891119][ T8825] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 558.919746][ T8825] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 558.926520][ T8825] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 558.952233][ T8825] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 558.958952][ T8825] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 565.265630][ T8823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1617'. [ 566.360362][ T8872] netlink: 'syz.0.1633': attribute type 1 has an invalid length. [ 566.461172][ T8872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 566.510603][ T8879] device vlan4 entered promiscuous mode [ 566.516682][ T8879] device bond1 entered promiscuous mode [ 566.553710][ T8877] bond1: (slave bridge1): making interface the new active one [ 566.570247][ T8877] device bridge1 entered promiscuous mode [ 566.580882][ T8877] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 566.590653][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 566.623048][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan4: link becomes ready [ 567.671679][ T8893] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1641'. [ 567.757800][ T8245] syzkaller0: tun_net_xmit 76 [ 567.762943][ T8245] syzkaller0: tun_net_xmit 48 [ 567.786009][ T8247] syzkaller0: tun_net_xmit 76 [ 575.835765][ T8929] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1655'. [ 578.127478][ T8970] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1670'. [ 578.141700][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 578.141885][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 578.356003][ T8975] netlink: 'syz.0.1672': attribute type 1 has an invalid length. [ 579.928469][ T9005] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1685'. [ 580.162203][ T9004] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 580.472728][ T8989] xt_recent: Unsupported userspace flags (00000042) [ 580.765180][ T9017] netlink: 'syz.2.1689': attribute type 1 has an invalid length. [ 581.392298][ T9028] netlink: 'syz.4.1693': attribute type 10 has an invalid length. [ 581.479650][ T9028] bridge0: port 3(team0) entered disabled state [ 581.589767][ T9033] Bluetooth: MGMT ver 1.22 [ 581.655691][ T9028] device team0 left promiscuous mode [ 581.661110][ T9028] device team_slave_0 left promiscuous mode [ 581.678450][ T9028] device team_slave_1 left promiscuous mode [ 581.684990][ T9028] bridge0: port 3(team0) entered disabled state [ 581.716552][ T9028] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.730545][ T9028] bond0: (slave team0): Enslaving as an active interface with an up link [ 582.762542][ T9030] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:5c9e:d7ff:fe81:c1d3 error=-28 [ 583.236080][ T9046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1698'. [ 583.719223][ T9030] infiniband syz1: set active [ 583.739389][ T9030] infiniband syz1: added team_slave_0 [ 583.761614][ T9030] rdma_rxe: unable to create cq [ 583.781488][ T9030] infiniband syz1: Couldn't create ib_mad CQ [ 583.802229][ T9030] infiniband syz1: Couldn't open port 1 [ 583.985327][ T9030] RDS/IB: syz1: added [ 584.011036][ T9030] smc: adding ib device syz1 with port count 1 [ 584.042726][ T9030] smc: ib device syz1 port 1 has pnetid [ 585.653470][ T9080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1713'. [ 585.989717][ T9063] xt_recent: Unsupported userspace flags (00000042) [ 587.163280][ T9094] net_ratelimit: 66 callbacks suppressed [ 587.163319][ T9094] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 587.175894][ T9094] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 587.300631][ T9094] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 587.307270][ T9094] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 587.384145][ T9094] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 587.390926][ T9094] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 587.421655][ T9094] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 587.428289][ T9094] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 587.445923][ T9094] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 587.452554][ T9094] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 587.459725][ T9097] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1719'. [ 590.599117][ T9137] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1731'. [ 591.239344][ T9147] Bluetooth: MGMT ver 1.22 [ 591.866441][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1739'. [ 592.380057][ T9169] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1745'. [ 595.034043][ T9207] bond4 (unregistering): Released all slaves [ 595.775863][ T9218] netlink: 'syz.1.1769': attribute type 39 has an invalid length. [ 596.757876][ T9232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1775'. [ 596.856506][ T9232] device gretap0 entered promiscuous mode [ 596.896660][ T9232] batman_adv: batadv0: Adding interface: macvlan0 [ 596.927681][ T9232] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.985802][ T9232] batman_adv: batadv0: Interface activated: macvlan0 [ 602.840038][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1818'. [ 605.218643][ T9366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1829'. [ 605.406919][ T9366] delete_channel: no stack [ 605.653231][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1832'. [ 608.667588][ T9413] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1847'. [ 614.200750][ T9481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1877'. [ 614.742466][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1879'. [ 616.564895][ T9498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1887'. [ 617.006081][ T9500] netlink: 'syz.2.1888': attribute type 10 has an invalid length. [ 617.014664][ T9500] batman_adv: batadv0: Removing interface: team0 [ 617.111404][ T9500] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.152432][ T9507] rdma_rxe: rxe_register_device failed with error -23 [ 617.211236][ T9507] rdma_rxe: failed to add team_slave_0 [ 617.216810][ T9500] bond0: (slave team0): Enslaving as an active interface with an up link [ 617.252858][ T9505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1890'. [ 617.307950][ T4272] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 617.319313][ T4272] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 617.337191][ T4272] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 617.358017][ T4272] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 617.381992][ T4272] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 617.390099][ T4272] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 619.003240][ T9533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1900'. [ 619.274985][ T4318] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.296742][ T4318] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 619.344600][ T9535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1901'. [ 619.496159][ T4272] Bluetooth: hci5: command 0x0409 tx timeout [ 619.553586][ T4318] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.568289][ T4318] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 619.770332][ T4318] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.793952][ T4318] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 619.994593][ T4318] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.021315][ T4318] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 620.966365][ T9509] chnl_net:caif_netlink_parms(): no params data found [ 621.576005][ T4272] Bluetooth: hci5: command 0x041b tx timeout [ 621.673465][ T9564] netlink: 'syz.1.1909': attribute type 39 has an invalid length. [ 622.315975][ T9509] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.326845][ T9509] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.368081][ T9509] device bridge_slave_0 entered promiscuous mode [ 622.407291][ T9579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1913'. [ 622.486876][ T9579] device macvtap1 entered promiscuous mode [ 622.525988][ T9579] device team0 entered promiscuous mode [ 622.531803][ T9579] device team_slave_0 entered promiscuous mode [ 622.556475][ T9579] device team_slave_1 entered promiscuous mode [ 622.578738][ T9579] device netdevsim0 entered promiscuous mode [ 622.610758][ T9579] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 622.661935][ T9581] device team0 left promiscuous mode [ 622.671191][ T9581] device team_slave_0 left promiscuous mode [ 622.679784][ T9581] device team_slave_1 left promiscuous mode [ 622.691914][ T9581] device netdevsim0 left promiscuous mode [ 622.902902][ T9509] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.919017][ T9509] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.969024][ T9509] device bridge_slave_1 entered promiscuous mode [ 623.655936][ T4272] Bluetooth: hci5: command 0x040f tx timeout [ 623.800070][ T9509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.880528][ T9509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.078508][ T9602] netlink: 'syz.1.1920': attribute type 1 has an invalid length. [ 624.315073][ T9612] rdma_rxe: rxe_register_device failed with error -23 [ 624.358528][ T9612] rdma_rxe: failed to add team_slave_0 [ 624.453814][ T9606] 8021q: adding VLAN 0 to HW filter on device bond6 [ 624.496155][ T9606] bond5: (slave bond6): making interface the new active one [ 624.537812][ T9606] bond5: (slave bond6): Enslaving as an active interface with an up link [ 625.124367][ T9509] team0: Port device team_slave_0 added [ 625.719571][ T9509] team0: Port device team_slave_1 added [ 625.735864][ T4272] Bluetooth: hci5: command 0x0419 tx timeout [ 626.078846][ T9509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.095842][ T9509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.178977][ T9638] rdma_rxe: rxe_register_device failed with error -23 [ 626.186787][ T9509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.206390][ T9638] rdma_rxe: failed to add team_slave_0 [ 626.797469][ T9509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.817935][ T9509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.906007][ T9509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.411168][ T9509] device hsr_slave_0 entered promiscuous mode [ 627.478775][ T9509] device hsr_slave_1 entered promiscuous mode [ 627.520195][ T9509] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 627.555550][ T9509] Cannot create hsr debugfs directory [ 628.240307][ T4318] device hsr_slave_0 left promiscuous mode [ 628.257044][ T4318] device hsr_slave_1 left promiscuous mode [ 628.305075][ T4318] batman_adv: batadv0: Removing interface: team0 [ 628.328181][ T4318] batman_adv: batadv0: Interface deactivated: dummy0 [ 628.335190][ T4318] batman_adv: batadv0: Removing interface: dummy0 [ 628.374434][ T4318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.384031][ T4318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.409996][ T4318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.440869][ T4318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.479442][ T4318] device bridge_slave_1 left promiscuous mode [ 628.507214][ T4318] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.561238][ T4318] device bridge_slave_0 left promiscuous mode [ 628.584310][ T4318] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.821966][ T4318] device bond1 left promiscuous mode [ 628.842689][ T4318] device bridge1 left promiscuous mode [ 628.882391][ T4318] device veth1_macvtap left promiscuous mode [ 628.897602][ T4318] device veth0_macvtap left promiscuous mode [ 628.924595][ T4318] device veth1_vlan left promiscuous mode [ 628.951387][ T4318] device veth0_vlan left promiscuous mode [ 629.695276][ T4318] bond3 (unregistering): Released all slaves [ 629.722282][ T4318] bond2 (unregistering): Released all slaves [ 629.779313][ T4318] bond1 (unregistering): (slave bridge1): Releasing active interface [ 630.234311][ T4318] bond1 (unregistering): Released all slaves [ 631.496245][ T4318] team0 (unregistering): Port device team_slave_1 removed [ 631.601212][ T4318] team0 (unregistering): Port device team_slave_0 removed [ 631.704649][ T4318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 631.828936][ T4318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.103509][ T4318] bond0 (unregistering): Released all slaves [ 633.264642][ T9668] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1942'. [ 633.281247][ T9668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:10) already exists on: macvlan0 [ 633.291625][ T9668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.304440][ T9668] device gretap0 entered promiscuous mode [ 633.323817][ T9668] device gretap0 left promiscuous mode [ 633.458405][ T9676] netlink: 'syz.4.1945': attribute type 1 has an invalid length. [ 634.553036][ T9509] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 634.640388][ T9509] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 634.722484][ T9509] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 634.797665][ T9509] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 635.601698][ T9509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.700069][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 635.725830][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 635.773716][ T9509] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.897792][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 635.943261][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 636.006516][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.013933][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.086617][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 636.127918][ T9726] netlink: 'syz.2.1958': attribute type 1 has an invalid length. [ 636.286056][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 636.336186][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 636.401550][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.408938][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.585173][ T9730] 8021q: adding VLAN 0 to HW filter on device bond5 [ 636.631149][ T9730] bond4: (slave bond5): making interface the new active one [ 636.662357][ T9730] bond4: (slave bond5): Enslaving as an active interface with an up link [ 636.686905][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 636.758705][ T9736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1961'. [ 636.795301][ T9736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:10) already exists on: macvlan0 [ 636.855637][ T9736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.897172][ T9736] device gretap0 entered promiscuous mode [ 636.948357][ T9736] device gretap0 left promiscuous mode [ 637.456223][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 637.836033][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 637.873704][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 638.114435][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 638.523852][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 638.647221][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 638.714681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 638.738084][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 638.790230][ T9509] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 638.884843][ T9509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 638.957247][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 638.987801][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 639.581695][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 639.590110][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 640.390502][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1971'. [ 640.430464][ T9777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.464499][ T9777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.508079][ T9777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.553712][ T9777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.604056][ T9777] batman_adv: batadv0: Interface deactivated: macvlan0 [ 640.640257][ T9777] batman_adv: batadv0: Removing interface: macvlan0 [ 641.047845][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 641.086763][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 641.129158][ T9509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.556420][ T9795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1975'. [ 641.659625][ T9795] device bond2 entered promiscuous mode [ 642.544453][ T9801] device bridge1 entered promiscuous mode [ 642.929533][ T9801] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 643.186993][ T9805] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 643.279818][ T9805] device bridge1 left promiscuous mode [ 643.336745][ T9805] bond2 (unregistering): Released all slaves [ 644.967492][ T9835] netlink: 'syz.3.1985': attribute type 39 has an invalid length. [ 645.331107][ T8052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 645.347707][ T8052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 645.527026][ T7730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 645.557073][ T7730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 645.602458][ T9509] device veth0_vlan entered promiscuous mode [ 645.630527][ T7730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 645.647111][ T7730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 645.711771][ T9509] device veth1_vlan entered promiscuous mode [ 645.886774][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 645.907955][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 645.937575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 645.987981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 646.031775][ T9509] device veth0_macvtap entered promiscuous mode [ 646.180988][ T9509] device veth1_macvtap entered promiscuous mode [ 646.335979][ T8052] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 646.361912][ T8052] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 646.443842][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.497824][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.542138][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.594514][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.638534][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.683808][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.749216][ T9509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.806103][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 646.832629][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 646.876125][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.905610][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.948923][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.006253][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.065674][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.137740][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.226387][ T9509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.235173][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 647.273405][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 647.346784][ T9509] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.394419][ T9509] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.414971][ T9509] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.445250][ T9509] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.065039][ T8052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.115756][ T8052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.187498][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 648.374968][ T7730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.410528][ T7730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.496400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 651.999016][ T9919] netlink: 'syz.2.2008': attribute type 1 has an invalid length. [ 652.485182][ T9922] 8021q: adding VLAN 0 to HW filter on device bond7 [ 652.586798][ T9922] bond6: (slave bond7): making interface the new active one [ 652.594922][ T9922] bond6: (slave bond7): Enslaving as an active interface with an up link [ 652.633280][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2010'. [ 653.444123][ T9943] netlink: 'syz.4.2016': attribute type 1 has an invalid length. [ 653.631321][ T9943] 8021q: adding VLAN 0 to HW filter on device bond1 [ 660.868414][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2020'. [ 660.877982][ T9962] batman_adv: batadv0: Removing interface: team0 [ 660.887343][ T9962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.894899][ T9962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.904829][ T9962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.912944][ T9962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.131882][ T9967] netlink: 'syz.2.2022': attribute type 39 has an invalid length. [ 661.209905][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2026'. [ 661.572315][ T9977] netlink: 'syz.3.2025': attribute type 1 has an invalid length. [ 662.389822][ T9996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2032'. [ 663.239433][T10016] netlink: 'syz.1.2038': attribute type 39 has an invalid length. [ 663.852936][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2041'. [ 663.883167][T10026] netlink: 'syz.2.2039': attribute type 1 has an invalid length. [ 664.174204][T10028] 8021q: adding VLAN 0 to HW filter on device bond9 [ 664.189709][T10028] bond8: (slave bond9): making interface the new active one [ 664.198479][T10028] bond8: (slave bond9): Enslaving as an active interface with an up link [ 664.846467][T10046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2047'. [ 665.809839][T10061] netlink: 'syz.3.2051': attribute type 39 has an invalid length. [ 666.248524][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2055'. [ 667.543565][T10086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2060'. [ 668.098794][T10065] xt_recent: Unsupported userspace flags (00000042) [ 669.008955][T10106] netlink: 'syz.5.2065': attribute type 1 has an invalid length. [ 669.322084][T10106] bond1 (unregistering): Released all slaves [ 669.453480][T10113] netlink: 'syz.4.2067': attribute type 39 has an invalid length. [ 669.776769][T10126] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2070'. [ 671.916900][T10152] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2078'. [ 671.964130][T10152] device gretap0 entered promiscuous mode [ 673.844310][T10150] xt_recent: Unsupported userspace flags (00000042) [ 674.620594][T10192] netlink: 'syz.5.2090': attribute type 10 has an invalid length. [ 674.670204][T10190] rdma_rxe: rxe_register_device failed with error -23 [ 674.734211][T10190] rdma_rxe: failed to add team_slave_0 [ 674.785013][T10197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2092'. [ 674.895828][T10192] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.959182][T10192] bond0: (slave team0): Enslaving as an active interface with an up link [ 675.420290][T10206] netlink: 'syz.4.2094': attribute type 39 has an invalid length. [ 676.726140][T10232] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2104'. [ 677.099997][T10239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2106'. [ 679.224738][T10279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2117'. [ 679.897696][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2121'. [ 679.942847][T10295] device macvtap2 entered promiscuous mode [ 679.988915][T10295] device team0 entered promiscuous mode [ 680.029750][T10295] device team_slave_0 entered promiscuous mode [ 680.043500][T10295] device team_slave_1 entered promiscuous mode [ 680.071434][T10295] device netdevsim0 entered promiscuous mode [ 680.096620][T10295] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 680.151559][T10296] device team0 left promiscuous mode [ 680.197956][T10296] device team_slave_0 left promiscuous mode [ 680.204226][T10296] device team_slave_1 left promiscuous mode [ 680.241652][T10296] device netdevsim0 left promiscuous mode [ 681.657579][T10325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2130'. [ 684.196608][T10359] bridge0: port 3(vlan0) entered blocking state [ 684.244702][T10359] bridge0: port 3(vlan0) entered disabled state [ 684.302121][T10359] device vlan0 entered promiscuous mode [ 684.365719][T10359] device bond0 entered promiscuous mode [ 684.371401][T10359] device bond_slave_0 entered promiscuous mode [ 684.476251][T10359] device bond_slave_1 entered promiscuous mode [ 684.486230][T10359] device team0 entered promiscuous mode [ 684.492207][T10359] device team_slave_0 entered promiscuous mode [ 684.560368][T10359] device team_slave_1 entered promiscuous mode [ 684.597444][T10359] bridge0: port 3(vlan0) entered blocking state [ 684.604060][T10359] bridge0: port 3(vlan0) entered forwarding state [ 684.862562][T10371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2143'. [ 687.546333][T10382] bond0: (slave wlan1): Releasing backup interface [ 688.573069][T10412] netlink: 'syz.3.2154': attribute type 1 has an invalid length. [ 688.654313][T10416] loop1: detected capacity change from 0 to 256 [ 688.737093][T10416] ======================================================= [ 688.737093][T10416] WARNING: The mand mount option has been deprecated and [ 688.737093][T10416] and is ignored by this kernel. Remove the mand [ 688.737093][T10416] option from the mount to silence this warning. [ 688.737093][T10416] ======================================================= [ 689.160305][T10417] 8021q: adding VLAN 0 to HW filter on device bond3 [ 689.196719][T10426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2156'. [ 689.209527][T10416] FAT-fs (loop1): Directory bread(block 64) failed [ 689.226281][T10416] FAT-fs (loop1): Directory bread(block 65) failed [ 689.234675][T10417] bond2: (slave bond3): making interface the new active one [ 689.242356][T10416] FAT-fs (loop1): Directory bread(block 66) failed [ 689.273631][T10416] FAT-fs (loop1): Directory bread(block 67) failed [ 689.298095][T10416] FAT-fs (loop1): Directory bread(block 68) failed [ 689.300717][T10417] bond2: (slave bond3): Enslaving as an active interface with an up link [ 689.322500][T10416] FAT-fs (loop1): Directory bread(block 69) failed [ 689.335870][T10416] FAT-fs (loop1): Directory bread(block 70) failed [ 689.353098][T10416] FAT-fs (loop1): Directory bread(block 71) failed [ 689.386014][T10416] FAT-fs (loop1): Directory bread(block 72) failed [ 689.396930][T10416] FAT-fs (loop1): Directory bread(block 73) failed [ 690.009669][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2158'. [ 690.050213][T10435] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2158'. [ 690.124730][T10435] device gretap0 entered promiscuous mode [ 691.616784][ T8245] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 691.839168][ T8245] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.873504][ T8245] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.904536][ T8245] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 691.945647][ T8245] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.978313][ T8245] usb 5-1: config 0 descriptor?? [ 692.430052][ T8245] hid (null): bogus close delimiter [ 692.603570][T10468] loop3: detected capacity change from 0 to 512 [ 692.629745][ T8245] usb 5-1: language id specifier not provided by device, defaulting to English [ 692.765229][T10468] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 692.775912][T10468] ext4 filesystem being mounted at /472/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 693.044870][ T8245] uclogic 0003:256C:006D.0001: interface is invalid, ignoring [ 693.157034][ T8245] usb 5-1: USB disconnect, device number 4 [ 694.988806][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 696.147710][T10512] netlink: 'syz.5.2181': attribute type 39 has an invalid length. [ 697.354025][T10531] loop1: detected capacity change from 0 to 256 [ 697.542048][T10531] FAT-fs (loop1): Directory bread(block 64) failed [ 697.561850][T10531] FAT-fs (loop1): Directory bread(block 65) failed [ 697.631054][T10531] FAT-fs (loop1): Directory bread(block 66) failed [ 697.658901][T10531] FAT-fs (loop1): Directory bread(block 67) failed [ 697.686015][T10531] FAT-fs (loop1): Directory bread(block 68) failed [ 697.711562][T10531] FAT-fs (loop1): Directory bread(block 69) failed [ 697.737421][T10531] FAT-fs (loop1): Directory bread(block 70) failed [ 697.756933][T10531] FAT-fs (loop1): Directory bread(block 71) failed [ 697.763855][T10531] FAT-fs (loop1): Directory bread(block 72) failed [ 697.825657][T10531] FAT-fs (loop1): Directory bread(block 73) failed [ 698.413395][T10549] loop2: detected capacity change from 0 to 128 [ 698.481401][T10549] FAT-fs (loop2): invalid media value (0x00) [ 698.518923][T10549] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 698.565669][T10549] FAT-fs (loop2): Can't find a valid FAT filesystem [ 699.310742][T10555] netlink: 'syz.5.2194': attribute type 10 has an invalid length. [ 699.960849][T10556] rdma_rxe: rxe_register_device failed with error -23 [ 699.978863][T10556] rdma_rxe: failed to add team_slave_0 [ 700.399421][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2195'. [ 700.449728][T10566] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2195'. [ 701.020715][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 701.027364][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 703.358785][T10591] netlink: 'syz.4.2203': attribute type 39 has an invalid length. [ 704.549045][T10613] netlink: 'syz.2.2208': attribute type 10 has an invalid length. [ 704.636327][T10620] rdma_rxe: rxe_register_device failed with error -23 [ 704.722435][T10620] rdma_rxe: failed to add team_slave_0 [ 704.785992][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2210'. [ 704.808402][T10619] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2210'. [ 704.916272][T10619] device gretap0 entered promiscuous mode [ 705.599247][T10634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2215'. [ 705.671831][T10634] device macvtap1 entered promiscuous mode [ 705.715709][T10634] device team0 entered promiscuous mode [ 705.731798][T10634] device team_slave_0 entered promiscuous mode [ 705.766720][T10634] device team_slave_1 entered promiscuous mode [ 705.836390][T10634] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 705.943978][T10636] device team0 left promiscuous mode [ 705.983457][T10636] device team_slave_0 left promiscuous mode [ 706.006100][T10636] device team_slave_1 left promiscuous mode [ 706.157714][T10644] netlink: 'syz.2.2217': attribute type 39 has an invalid length. [ 707.487500][T10662] netlink: 'syz.4.2223': attribute type 10 has an invalid length. [ 708.136388][T10663] rdma_rxe: already configured on team_slave_0 [ 710.787624][T10689] loop5: detected capacity change from 0 to 64 [ 711.826483][T10690] netlink: 'syz.4.2231': attribute type 39 has an invalid length. [ 712.884905][T10698] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2233'. [ 713.512818][T10708] netlink: 'syz.2.2237': attribute type 10 has an invalid length. [ 713.805970][T10710] rdma_rxe: rxe_register_device failed with error -23 [ 713.813042][T10710] rdma_rxe: failed to add team_slave_0 [ 714.535504][T10719] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 714.587267][T10719] netlink: 212884 bytes leftover after parsing attributes in process `syz.4.2239'. [ 714.631586][T10719] ubi0: attaching mtd0 [ 714.655539][T10719] ubi0: scanning is finished [ 714.660370][T10719] ubi0: empty MTD device detected [ 715.230277][T10723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2241'. [ 715.389807][T10723] device gretap0 entered promiscuous mode [ 715.727122][T10719] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 716.431005][T10739] netlink: 'syz.5.2244': attribute type 1 has an invalid length. [ 716.581821][T10740] netlink: 'syz.1.2246': attribute type 39 has an invalid length. [ 716.840799][T10744] 8021q: adding VLAN 0 to HW filter on device bond2 [ 716.908520][T10744] bond1: (slave bond2): making interface the new active one [ 716.928536][T10744] bond1: (slave bond2): Enslaving as an active interface with an up link [ 717.573945][T10753] kvm [10750]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x86 [ 717.866367][T10755] loop2: detected capacity change from 0 to 1024 [ 717.917790][T10755] hfsplus: unable to parse mount options [ 717.971870][T10767] rdma_rxe: rxe_register_device failed with error -23 [ 717.991389][T10767] rdma_rxe: failed to add team_slave_0 [ 718.116872][ T9979] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 718.179093][T10765] netlink: 'syz.3.2253': attribute type 10 has an invalid length. [ 718.212309][T10765] batman_adv: batadv0: Removing interface: team0 [ 718.779414][T10777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2256'. [ 719.016798][T10784] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2257'. [ 720.842875][T10812] rdma_rxe: rxe_register_device failed with error -23 [ 720.888789][T10812] rdma_rxe: failed to add team_slave_0 [ 721.060213][T10811] netlink: 'syz.2.2268': attribute type 10 has an invalid length. [ 725.191584][T10841] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2275'. [ 727.428353][T10859] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 727.850359][T10859] overlayfs: missing 'lowerdir' [ 728.566212][T10874] netlink: 'syz.3.2284': attribute type 10 has an invalid length. [ 728.600694][T10874] rdma_rxe: rxe_register_device failed with error -23 [ 728.623035][T10874] rdma_rxe: failed to add team_slave_0 [ 729.504482][T10883] loop2: detected capacity change from 0 to 2048 [ 729.756769][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2289'. [ 729.825854][T10888] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2289'. [ 729.835097][T10891] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 729.941404][T10892] loop3: detected capacity change from 0 to 512 [ 730.125173][T10892] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 730.187057][T10892] ext4 filesystem being mounted at /496/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 732.121601][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 733.100836][T10922] netlink: 'syz.1.2297': attribute type 10 has an invalid length. [ 733.144792][T10922] rdma_rxe: rxe_register_device failed with error -23 [ 733.185730][T10922] rdma_rxe: failed to add team_slave_0 [ 734.080731][T10933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2302'. [ 734.112865][T10933] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2302'. [ 735.988620][T10964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2316'. [ 736.033472][T10964] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2316'. [ 736.122631][T10968] smc: net device wg0 applied user defined pnetid SYZ0 [ 736.171983][T10968] netlink: 'syz.4.2317': attribute type 39 has an invalid length. [ 736.520032][T10976] ebt_limit: overflow, try lower: 570423552/2483027968 [ 736.570724][T10968] smc: removing net device wg0 with user defined pnetid SYZ0 [ 738.178242][T10990] loop3: detected capacity change from 0 to 32768 [ 738.386085][T10990] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 738.547905][T10990] OCFS2: ERROR (device loop3): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 738.565807][T10990] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 738.575943][T10990] OCFS2: File system is now read-only. [ 738.581483][T10990] (syz.3.2326,10990,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 738.593378][T10990] OCFS2: ERROR (device loop3): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 738.610506][T10990] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 738.620508][T10990] (syz.3.2326,10990,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 738.629050][T10990] OCFS2: ERROR (device loop3): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 738.645916][T10990] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 738.656098][T10990] (syz.3.2326,10990,0):ocfs2_prepare_dx_dir_for_insert:4158 ERROR: status = -30 [ 738.665631][T10990] (syz.3.2326,10990,0):ocfs2_prepare_dir_for_insert:4283 ERROR: status = -30 [ 738.674506][T10990] (syz.3.2326,10990,0):ocfs2_mknod:296 ERROR: status = -30 [ 738.682063][T10990] (syz.3.2326,10990,0):ocfs2_mknod:500 ERROR: status = -30 [ 738.689446][T10990] (syz.3.2326,10990,0):ocfs2_create:674 ERROR: status = -30 [ 740.397752][T11007] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2331'. [ 740.410601][ T4264] ocfs2: Unmounting device (7,3) on (node local) [ 741.631127][T11019] loop4: detected capacity change from 0 to 1024 [ 741.743956][T11019] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 741.753225][T11019] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 741.872285][T11019] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2335: bg 0: block 393: padding at end of block bitmap is not set [ 742.291423][ T7670] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 742.330344][ T7670] EXT4-fs (loop4): This should not happen!! Data will be lost [ 742.330344][ T7670] [ 742.361663][ T7670] EXT4-fs (loop4): Total free blocks count 0 [ 742.376142][ T7670] EXT4-fs (loop4): Free/Dirty block details [ 742.401056][ T7670] EXT4-fs (loop4): free_blocks=0 [ 742.416853][ T7670] EXT4-fs (loop4): dirty_blocks=16 [ 742.422161][ T7670] EXT4-fs (loop4): Block reservation details [ 742.449711][ T7670] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 742.484565][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 742.788187][ T8247] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 742.998261][ T8247] usb 6-1: Using ep0 maxpacket: 32 [ 743.013587][ T8247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 743.046036][ T8247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57493, setting to 1024 [ 743.086589][ T8247] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 743.131283][ T8247] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.184984][ T8247] usb 6-1: config 0 descriptor?? [ 743.200804][ T8247] hub 6-1:0.0: USB hub found [ 743.528632][ T8247] hub 6-1:0.0: 1 port detected [ 743.740438][ T8247] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 743.775430][ T8247] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 743.851478][ T8247] usbhid 6-1:0.0: can't add hid device: -71 [ 743.878929][ T8247] usbhid: probe of 6-1:0.0 failed with error -71 [ 744.022305][ T8247] usb 6-1: USB disconnect, device number 2 [ 744.177302][T11050] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2346'. [ 744.514404][T11052] rdma_rxe: already configured on team_slave_0 [ 749.153725][T11080] ebt_limit: overflow, try lower: 570423552/2483027968 [ 749.942099][T11102] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2358'. [ 750.507603][T11106] netlink: 'syz.3.2360': attribute type 10 has an invalid length. [ 750.554768][T11106] rdma_rxe: rxe_register_device failed with error -23 [ 750.566100][T11106] rdma_rxe: failed to add team_slave_0 [ 751.902067][T11124] netlink: 'syz.2.2367': attribute type 39 has an invalid length. [ 753.279846][T11139] [ 753.282314][T11139] ====================================================== [ 753.289420][T11139] WARNING: possible circular locking dependency detected [ 753.296531][T11139] 6.1.119-syzkaller #0 Not tainted [ 753.301829][T11139] ------------------------------------------------------ [ 753.308938][T11139] syz.2.2371/11139 is trying to acquire lock: [ 753.315286][T11139] ffff888025388d00 (team->team_lock_key){+.+.}-{3:3}, at: team_del_slave+0x2e/0x1c0 [ 753.324979][T11139] [ 753.324979][T11139] but task is already holding lock: [ 753.332553][T11139] ffff8880251907c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x112/0x130 [ 753.342718][T11139] [ 753.342718][T11139] which lock already depends on the new lock. [ 753.342718][T11139] [ 753.353394][T11139] [ 753.353394][T11139] the existing dependency chain (in reverse order) is: [ 753.362522][T11139] [ 753.362522][T11139] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 753.370430][T11139] lock_acquire+0x1f8/0x5a0 [ 753.375612][T11139] __mutex_lock+0x132/0xd80 [ 753.380760][T11139] ieee80211_open+0x13a/0x1f0 [ 753.386180][T11139] __dev_open+0x377/0x510 [ 753.391175][T11139] dev_open+0xa9/0x260 [ 753.396001][T11139] team_add_slave+0x96e/0x2760 [ 753.401407][T11139] do_setlink+0xe99/0x3de0 [ 753.406498][T11139] rtnl_newlink+0x172c/0x2050 [ 753.411841][T11139] rtnetlink_rcv_msg+0x818/0xff0 [ 753.417459][T11139] netlink_rcv_skb+0x1cd/0x410 [ 753.422885][T11139] netlink_unicast+0x7d8/0x970 [ 753.428303][T11139] netlink_sendmsg+0xa26/0xd60 [ 753.433732][T11139] ____sys_sendmsg+0x5a5/0x8f0 [ 753.439174][T11139] __sys_sendmsg+0x2a9/0x390 [ 753.444463][T11139] do_syscall_64+0x3b/0xb0 [ 753.449548][T11139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 753.456192][T11139] [ 753.456192][T11139] -> #0 (team->team_lock_key){+.+.}-{3:3}: [ 753.464473][T11139] validate_chain+0x1661/0x5950 [ 753.469983][T11139] __lock_acquire+0x125b/0x1f80 [ 753.475528][T11139] lock_acquire+0x1f8/0x5a0 [ 753.480710][T11139] __mutex_lock+0x132/0xd80 [ 753.485958][T11139] team_del_slave+0x2e/0x1c0 [ 753.491201][T11139] team_device_event+0x269/0x570 [ 753.496847][T11139] raw_notifier_call_chain+0xd0/0x170 [ 753.502893][T11139] unregister_netdevice_many+0xebf/0x17a0 [ 753.509301][T11139] unregister_netdevice_queue+0x2e6/0x350 [ 753.515710][T11139] _cfg80211_unregister_wdev+0x175/0x590 [ 753.522003][T11139] ieee80211_if_remove+0x1cc/0x2d0 [ 753.527778][T11139] ieee80211_del_iface+0x15/0x20 [ 753.533382][T11139] cfg80211_remove_virtual_intf+0x270/0x490 [ 753.540022][T11139] genl_rcv_msg+0xc1a/0xf70 [ 753.545213][T11139] netlink_rcv_skb+0x1cd/0x410 [ 753.550729][T11139] genl_rcv+0x24/0x40 [ 753.555399][T11139] netlink_unicast+0x7d8/0x970 [ 753.560834][T11139] netlink_sendmsg+0xa26/0xd60 [ 753.566274][T11139] ____sys_sendmsg+0x5a5/0x8f0 [ 753.571717][T11139] __sys_sendmsg+0x2a9/0x390 [ 753.576985][T11139] do_syscall_64+0x3b/0xb0 [ 753.582080][T11139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 753.588651][T11139] [ 753.588651][T11139] other info that might help us debug this: [ 753.588651][T11139] [ 753.598995][T11139] Possible unsafe locking scenario: [ 753.598995][T11139] [ 753.606582][T11139] CPU0 CPU1 [ 753.612041][T11139] ---- ---- [ 753.617521][T11139] lock(&rdev->wiphy.mtx); [ 753.622151][T11139] lock(team->team_lock_key); [ 753.629603][T11139] lock(&rdev->wiphy.mtx); [ 753.636762][T11139] lock(team->team_lock_key); [ 753.641650][T11139] [ 753.641650][T11139] *** DEADLOCK *** [ 753.641650][T11139] [ 753.649883][T11139] 3 locks held by syz.2.2371/11139: [ 753.655191][T11139] #0: ffffffff8e569790 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 753.663631][T11139] #1: ffffffff8e50a768 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5b/0x8a0 [ 753.673086][T11139] #2: ffff8880251907c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x112/0x130 [ 753.683623][T11139] [ 753.683623][T11139] stack backtrace: [ 753.689612][T11139] CPU: 1 PID: 11139 Comm: syz.2.2371 Not tainted 6.1.119-syzkaller #0 [ 753.697894][T11139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 753.708149][T11139] Call Trace: [ 753.711549][T11139] [ 753.714604][T11139] dump_stack_lvl+0x1e3/0x2cb [ 753.719452][T11139] ? nf_tcp_handle_invalid+0x642/0x642 [ 753.725076][T11139] ? print_circular_bug+0x12b/0x1a0 [ 753.730406][T11139] check_noncircular+0x2fa/0x3b0 [ 753.735466][T11139] ? add_chain_block+0x850/0x850 [ 753.740532][T11139] ? lockdep_lock+0x11f/0x2a0 [ 753.745365][T11139] ? is_bpf_text_address+0x22/0x2a0 [ 753.750693][T11139] ? _find_first_zero_bit+0xd0/0x100 [ 753.756143][T11139] validate_chain+0x1661/0x5950 [ 753.761150][T11139] ? reacquire_held_locks+0x660/0x660 [ 753.766831][T11139] ? reacquire_held_locks+0x660/0x660 [ 753.772352][T11139] ? mark_lock+0x9a/0x340 [ 753.776849][T11139] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 753.783007][T11139] ? mark_lock+0x9a/0x340 [ 753.787517][T11139] __lock_acquire+0x125b/0x1f80 [ 753.792646][T11139] lock_acquire+0x1f8/0x5a0 [ 753.797407][T11139] ? team_del_slave+0x2e/0x1c0 [ 753.802357][T11139] ? read_lock_is_recursive+0x10/0x10 [ 753.807999][T11139] ? __might_sleep+0xb0/0xb0 [ 753.812725][T11139] ? xsk_notifier+0x20f/0x220 [ 753.817623][T11139] ? __lock_acquire+0x1f80/0x1f80 [ 753.822834][T11139] __mutex_lock+0x132/0xd80 [ 753.827488][T11139] ? team_del_slave+0x2e/0x1c0 [ 753.832391][T11139] ? __mutex_lock+0x2f7/0xd80 [ 753.837205][T11139] ? bond_netdev_event+0xde/0xe50 [ 753.842374][T11139] ? team_del_slave+0x2e/0x1c0 [ 753.847273][T11139] ? mutex_lock_nested+0x10/0x10 [ 753.852355][T11139] ? bond_ipsec_offload_ok+0x420/0x420 [ 753.857972][T11139] ? memset+0x1f/0x40 [ 753.862193][T11139] team_del_slave+0x2e/0x1c0 [ 753.866944][T11139] team_device_event+0x269/0x570 [ 753.872027][T11139] raw_notifier_call_chain+0xd0/0x170 [ 753.877549][T11139] unregister_netdevice_many+0xebf/0x17a0 [ 753.883555][T11139] ? alloc_netdev_mqs+0xeb0/0xeb0 [ 753.888759][T11139] ? kasan_quarantine_put+0xd4/0x220 [ 753.894279][T11139] ? lockdep_hardirqs_on+0x94/0x130 [ 753.899632][T11139] ? up_write+0x19d/0x580 [ 753.904134][T11139] unregister_netdevice_queue+0x2e6/0x350 [ 753.910015][T11139] ? list_netdevice+0x660/0x660 [ 753.915053][T11139] ? kernfs_remove_by_name_ns+0x10f/0x150 [ 753.920951][T11139] _cfg80211_unregister_wdev+0x175/0x590 [ 753.926740][T11139] ieee80211_if_remove+0x1cc/0x2d0 [ 753.932180][T11139] ieee80211_del_iface+0x15/0x20 [ 753.937271][T11139] cfg80211_remove_virtual_intf+0x270/0x490 [ 753.943319][T11139] ? nl80211_del_interface+0x112/0x130 [ 753.948971][T11139] genl_rcv_msg+0xc1a/0xf70 [ 753.953751][T11139] ? genl_bind+0x400/0x400 [ 753.958363][T11139] ? read_lock_is_recursive+0x10/0x10 [ 753.963915][T11139] ? ref_tracker_free+0x638/0x7d0 [ 753.969090][T11139] ? nl80211_new_interface+0x1110/0x1110 [ 753.974893][T11139] ? refcount_inc+0x80/0x80 [ 753.979531][T11139] ? __copy_skb_header+0x47b/0x600 [ 753.984927][T11139] netlink_rcv_skb+0x1cd/0x410 [ 753.989848][T11139] ? genl_bind+0x400/0x400 [ 753.994464][T11139] ? netlink_ack+0x1290/0x1290 [ 753.999668][T11139] genl_rcv+0x24/0x40 [ 754.003837][T11139] netlink_unicast+0x7d8/0x970 [ 754.008873][T11139] ? netlink_detachskb+0x90/0x90 [ 754.014004][T11139] ? __virt_addr_valid+0x45b/0x530 [ 754.019272][T11139] ? __phys_addr_symbol+0x2b/0x70 [ 754.024893][T11139] ? __check_object_size+0x4dd/0xa30 [ 754.030341][T11139] ? bpf_lsm_netlink_send+0x5/0x10 [ 754.035791][T11139] netlink_sendmsg+0xa26/0xd60 [ 754.040739][T11139] ? netlink_getsockopt+0x580/0x580 [ 754.046146][T11139] ? aa_sock_msg_perm+0x91/0x150 [ 754.051237][T11139] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 754.056702][T11139] ? security_socket_sendmsg+0x7d/0xa0 [ 754.062334][T11139] ? netlink_getsockopt+0x580/0x580 [ 754.067696][T11139] ____sys_sendmsg+0x5a5/0x8f0 [ 754.072718][T11139] ? __sys_sendmsg_sock+0x30/0x30 [ 754.077915][T11139] __sys_sendmsg+0x2a9/0x390 [ 754.082670][T11139] ? ____sys_sendmsg+0x8f0/0x8f0 [ 754.087820][T11139] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 754.093982][T11139] ? syscall_enter_from_user_mode+0x2e/0x230 [ 754.100171][T11139] ? lockdep_hardirqs_on+0x94/0x130 [ 754.105505][T11139] ? syscall_enter_from_user_mode+0x2e/0x230 [ 754.111658][T11139] do_syscall_64+0x3b/0xb0 [ 754.116319][T11139] ? clear_bhb_loop+0x45/0xa0 [ 754.121249][T11139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 754.127312][T11139] RIP: 0033:0x7f719df80809 [ 754.131869][T11139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.152293][T11139] RSP: 002b:00007f719ddff058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 754.161021][T11139] RAX: ffffffffffffffda RBX: 00007f719e146160 RCX: 00007f719df80809 [ 754.169109][T11139] RDX: 0000000000000000 RSI: 0000000020000d40 RDI: 0000000000000003 [ 754.177187][T11139] RBP: 00007f719dff393e R08: 0000000000000000 R09: 0000000000000000 [ 754.185366][T11139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.193444][T11139] R13: 0000000000000001 R14: 00007f719e146160 R15: 00007fff11dee738 [ 754.201560][T11139] [ 754.219838][T11142] rdma_rxe: already configured on team_slave_0 [ 754.288069][T11139] team0: Port device wlan1 removed [ 754.311215][T11141] netlink: 'syz.4.2373': attribute type 10 has an invalid length. [ 754.323426][T11144] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2374'. [ 762.460646][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 762.467152][ T1278] ieee802154 phy1 wpan1: encryption failed: -22