last executing test programs: 5.536491405s ago: executing program 3 (id=3165): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}, 0x3}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x1}, 0x10) sendmsg$tipc(r0, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) 5.341090824s ago: executing program 3 (id=3169): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x202, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}, 0x1, 0x0, 0x0, 0x8004041}, 0x20000814) getsockname$packet(r4, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32, @ANYBLOB="83040500010000003000128008000100677265002400028008000700ac1414000500"], 0x50}}, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty}}}], 0x20}}], 0x1, 0x0) 5.218479673s ago: executing program 3 (id=3172): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xa}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) socket$tipc(0x1e, 0x6, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000110}, 0x4000400) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x160, 0x1a0, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @empty, @private2}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000180)={'team0\x00', 0x44}) 3.992062865s ago: executing program 3 (id=3178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000001c0)=0x1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) 3.910168884s ago: executing program 3 (id=3180): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0x104, 0x16, 0x1, 0x70bd2d, 0x0, {{{@in, @in6=@mcast1, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x19000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x4000000000000000}, {}, 0x1}, 0x5, 0x5}, [@offload={0xc}]}, 0x104}}, 0x0) 3.695922994s ago: executing program 3 (id=3184): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x12}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x8012, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x0, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x4}}}}, 0xfdef) 1.756015172s ago: executing program 2 (id=3199): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 956.505576ms ago: executing program 0 (id=3200): r0 = socket$key(0xf, 0x3, 0x2) sendmsg(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000003c0)="0275c8ea3c28ba6777afba66f83bc172", 0x10}], 0x1}, 0x4000004) 955.501316ms ago: executing program 4 (id=3201): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)={0x38, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xfffffffffffffd96}]}]}, 0x38}}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448e3, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x142, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x6}, {0x0, 0x8, 0x2, 0x5}, {0x0, 0x0, 0x65, 0x2}]}) socket(0x1e, 0x4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 864.043636ms ago: executing program 2 (id=3203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x7c}}, 0x0) 843.878016ms ago: executing program 0 (id=3204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000001c0)=0x1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 805.415126ms ago: executing program 4 (id=3205): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x9, 0x0, 0xffff, 0x7, 0x8, 0x7, 0x202, 0x4}}}}]}, 0x58}}, 0x8040) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 671.994545ms ago: executing program 2 (id=3207): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x202, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}, 0x1, 0x0, 0x0, 0x8004041}, 0x20000814) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r5, @ANYBLOB="83040500010000003000128008000100677265002400028008000700ac1414000500"], 0x50}}, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty}}}], 0x20}}], 0x1, 0x0) 671.812365ms ago: executing program 0 (id=3208): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x91, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x7f}, {"caefd9d3db9695f73922407630c53808d8c3a4138d973c694af0d5cbe7398982f4f23044ad52e9dd2602706936cb7478b287725889baca3ff57721ea2cdbfce91f84167398e58b034da5458848d9f6b574ce6d0d2bd359fb7d2e29"}}}}}}, 0x0) 631.927314ms ago: executing program 4 (id=3209): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @local}}}}}}}, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 593.223614ms ago: executing program 1 (id=3210): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), 0x0, 0x7, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000046d100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000008208500000072000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 512.441304ms ago: executing program 1 (id=3211): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}, 0x1, 0xffffa888}, 0x0) 512.239014ms ago: executing program 0 (id=3212): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0001000000080000200012800b000100697036746e6c00d3100002800400130006000f000080"], 0x40}}, 0x20004090) 511.350564ms ago: executing program 2 (id=3213): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000044}, 0x20060054) 436.004664ms ago: executing program 4 (id=3214): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)={0x38, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xfffffffffffffd96}]}]}, 0x38}}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448e3, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x142, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x6}, {0x0, 0x8, 0x2, 0x5}, {0x0, 0x0, 0x65, 0x2}]}) socket(0x1e, 0x4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 381.024683ms ago: executing program 2 (id=3215): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="44750000100001040001000000000000000000001f64769201f9fe1bb2eb26a1eba18dc0d83ab70a2e0535f6a3b6e25433ce13b845f3cc", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800b0001006970766c616e00001400028006000100010000000600020063ce0000"], 0x44}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x408d7d46, 0x0, 0x0, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffd, 0xa}, 0x0, 0x0) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000180)=0x1, 0x4) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newtfilter={0xc78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc4c, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}, @TCA_U32_POLICE={0xc38, 0x6, [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x84, 0x7, 0x9, 0x3, 0x7ac, 0xa, 0x3, 0xc, 0xd3, 0x3, 0x8000, 0x3, 0x4, 0xe471, 0x0, 0x1, 0x200, 0x2, 0xffffff01, 0x40, 0x2, 0x7, 0x6, 0x9, 0xffffff7f, 0x1, 0x9, 0x6, 0x2, 0x6, 0x8, 0xfffffeff, 0x7, 0xc026, 0xff, 0xb793, 0x0, 0x4, 0xc, 0x4, 0x2, 0x8001, 0x6, 0x6, 0x7, 0x9, 0x8, 0x2, 0x0, 0x9, 0x5, 0x7, 0x5, 0x2, 0x80000000, 0x5, 0x1, 0x8, 0xb7, 0x8, 0x1, 0xf21, 0x381, 0xfffffffe, 0x10000, 0x2, 0x123, 0x2, 0x3, 0x7, 0x5, 0x7, 0x7, 0x9, 0x3, 0x667, 0x9, 0x8, 0xae, 0x0, 0x5, 0x7, 0x9, 0x1, 0xd43, 0xfff, 0xfffff60e, 0xfffffff7, 0x80000001, 0x9, 0x7ff, 0x10000, 0x6, 0x5, 0x2, 0x1, 0x80, 0x2, 0x200, 0x2, 0x9, 0x7, 0x7f, 0x10000, 0xd0, 0x6e, 0x6123, 0x8, 0xfffffff8, 0x44e2e001, 0x6, 0xc489, 0x10, 0xfffffffe, 0x973, 0x400, 0x2, 0xb4b, 0x496, 0xe2, 0x20000000, 0xa, 0x5, 0x6, 0x514d6f81, 0x5, 0x7, 0x7f, 0x100, 0x98, 0xd, 0x9, 0x3, 0x5, 0x6231, 0x3, 0x5f8e, 0x2, 0x80000000, 0x6, 0x0, 0x0, 0x101, 0xfff, 0x3, 0x6, 0x7fff, 0x1, 0x1, 0xe, 0x8, 0x1, 0xfffffb39, 0x8000000, 0x1, 0x1, 0x10000, 0x80, 0xffffffff, 0x5, 0x6, 0x1, 0x1f9b, 0x8, 0x1, 0x7be, 0x4967, 0x5, 0x6, 0xfffffff7, 0x0, 0xd, 0x0, 0xc2e, 0xb, 0x3, 0xb, 0x3344, 0x1, 0x3, 0x4, 0x2, 0x9, 0x1, 0x6, 0xfffffff9, 0x7, 0x322, 0x2, 0x7, 0x2, 0x6, 0x1, 0x6, 0x9, 0xc9, 0x7, 0x8, 0x8f, 0x3, 0x1efa, 0x9, 0x4, 0x20000000, 0x9, 0x9, 0x5, 0x4, 0x9, 0x1, 0x1, 0xfffffff8, 0x17, 0x7ff, 0xffffb21a, 0x5, 0x1ff, 0x5d, 0x6d4, 0x5, 0x6, 0x8, 0x5, 0x8, 0xfffffffd, 0x4aa21142, 0x8f, 0x200, 0x6, 0x5, 0x6, 0x9, 0x7, 0x5, 0x4, 0x8, 0x6, 0x5, 0x4, 0x6, 0x0, 0x4, 0xff, 0xd, 0x8, 0x3ff, 0x0, 0xc, 0x10001, 0x5, 0x2, 0x1, 0x1, 0x8, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xdb4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x5, 0x3, 0x4, 0xdf0e, 0x9c8, 0x8, 0x6, 0x1ff, 0x6, 0x5, 0x1, 0x9dc3, 0x7, 0x9, 0x81, 0x9, 0x1, 0x2, 0x7, 0x0, 0xfffffffb, 0x6f69734e, 0x5, 0x6, 0x8, 0x1, 0xa32, 0x2, 0xffff, 0xd47, 0x5, 0xd, 0x6, 0x6, 0x7, 0x5, 0x3, 0xb2b, 0x8, 0x3, 0xc, 0x2, 0xe2, 0x2af0, 0x1, 0xfffffffa, 0x355, 0x5, 0x8, 0x0, 0x6, 0x5, 0x6, 0x9, 0x0, 0x101, 0x10000, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x6, 0x6, 0x4, 0x1, 0xc8, 0x1, 0x3, 0xfffffffd, 0xd, 0x6, 0xe36a978, 0xfffffffb, 0xfff, 0xe4a5, 0x3c5ef600, 0x7f, 0x8, 0x7, 0x40, 0x1000, 0x988, 0x3, 0x9, 0xf0b, 0x200, 0x300, 0x1, 0x4, 0x0, 0xfffffffe, 0x7fff, 0x8001, 0x80000001, 0xfffffffb, 0x4, 0x2, 0x80, 0x7, 0xfffffffd, 0x8, 0x10000, 0x1000, 0xe0, 0x5, 0x7, 0x2, 0x8007, 0x8fd5, 0xfff, 0x7ff, 0xded, 0xfffffff9, 0x8000, 0xe1, 0x4, 0x9, 0x81, 0x6, 0x6, 0x689, 0x4, 0x0, 0x1, 0x81000000, 0x6, 0xd, 0x10001, 0x10000, 0x8e71484e, 0x5, 0x10001, 0x9, 0x3, 0x1, 0x7, 0x7, 0x2, 0x2, 0x1, 0x2, 0x6191, 0x0, 0x8000, 0xb, 0x1, 0x1, 0x2, 0x401, 0xdf, 0x8, 0x80000001, 0x6, 0x7, 0x8, 0x6, 0xe, 0x7, 0x8, 0x7, 0x181, 0x2, 0xde0d, 0x2, 0x8001, 0x0, 0xfffffffb, 0x1, 0x10, 0xf0, 0x482, 0x27, 0x3869, 0x10, 0x1ff, 0x200, 0x0, 0xef25, 0x480000, 0x9, 0x2, 0xfffffff9, 0x1, 0x3, 0x8001, 0xff, 0x2, 0x3ff, 0x5, 0x0, 0xfffffffa, 0x9305, 0x80000001, 0xbf4, 0x7, 0x2, 0xde6, 0x6, 0x7, 0x7fff, 0x5, 0x9, 0x5, 0x5, 0x100, 0x5, 0xd808, 0xffffff00, 0x6, 0x4, 0x0, 0x3, 0x0, 0x4, 0x3, 0x1ff, 0x8, 0x4, 0x7ff, 0x6, 0xb, 0xe, 0xfffffff7, 0x9, 0x3, 0x3, 0x0, 0x0, 0x8, 0x80000001, 0xffffff8a, 0x400, 0x5, 0x5, 0x4, 0x7fff, 0x1, 0x80, 0x100, 0x24e81b4f, 0xfffffffe, 0xc5e3, 0x10000, 0x1222, 0x0, 0x0, 0x7, 0x0, 0x6, 0x4, 0x4, 0xa000000, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x31, 0x55b0, 0xdb2, 0x4, 0x7, 0x800, 0x85, 0x4, 0x9b97, 0x6, 0x6, 0x2, 0x9, 0x4, 0x6a, 0x1, 0x8, 0xfb, 0x6, 0x23a, 0x0, 0xb, 0x1, 0x2, 0x5, 0x9, 0x9, 0x2, 0xc3e5, 0x1, 0x7, 0x8, 0x9, 0x0, 0x4, 0x2, 0x1556f9ee, 0x2, 0x8, 0xfffffffa, 0x4, 0x51, 0xa26, 0x3, 0x9, 0x6, 0x4, 0xacdb, 0x2, 0x40000006, 0xfffffff7, 0x4, 0x6, 0x2, 0x200, 0xfffff800, 0xfff, 0x5e9, 0x10001, 0x8, 0x3, 0x3, 0x1, 0x9, 0x3, 0x80000001, 0x4, 0x9, 0x101, 0x6, 0x145f, 0x5, 0xdab, 0x4, 0x5, 0xafa, 0x3, 0x1, 0x9, 0x8, 0x8, 0x1, 0x2, 0x7, 0x7, 0x1, 0x6, 0x5a90, 0x1, 0x8, 0xb5, 0x93, 0x4, 0x69, 0xfe, 0xfffffffb, 0x1, 0x6, 0x1, 0x67, 0x1a23836f, 0x962, 0x5, 0x7f, 0x1, 0x80000001, 0xffffffff, 0xfffff000, 0xfff, 0x5, 0xfffffffe, 0xf95, 0x8000, 0x1, 0xffff, 0x9, 0x97, 0x57, 0x0, 0x1, 0x18e, 0x6, 0x9, 0x9, 0x5, 0x6, 0x91, 0x200, 0x2, 0x10001, 0x10000, 0x1000, 0xfffffff9, 0x1000, 0xa, 0x6, 0x8001, 0x49, 0x4, 0x81, 0x7, 0x5, 0xeb45, 0x2, 0x8, 0x7, 0x200, 0x2, 0x6, 0x5, 0xbbe4, 0xffffffff, 0x80000000, 0x1, 0x100, 0x5, 0x7, 0x9, 0x7fffffff, 0x47e, 0x7, 0x6cb, 0x316c, 0x2, 0x1, 0x4, 0x0, 0x2, 0x5, 0x7, 0x4, 0x80000000, 0x100000, 0x4, 0x9, 0x9, 0x1, 0x8, 0x0, 0xffffff79, 0xe, 0xfffffe00, 0x2, 0x6, 0xc, 0x4, 0xbd, 0xa, 0xb, 0x4, 0x10, 0x9, 0x0, 0x2, 0x4, 0x64, 0x7, 0xfffffff9, 0xfffffffa, 0xfffff001, 0x8, 0x9, 0x8, 0x8, 0x4e5, 0xffffffff, 0xffffffff, 0x0, 0x2, 0x6, 0x0, 0x3, 0x6, 0x200000, 0x5, 0x80, 0x36, 0x3, 0x8, 0x0, 0x5, 0x70, 0x1, 0x1, 0x1ff, 0x0, 0x1, 0x2, 0x652, 0x200, 0x9, 0xfffffff8, 0x4, 0x3, 0xbe4d960c, 0x3, 0x7, 0x101, 0x4, 0xfffffffd, 0xfffffe01, 0xff, 0x0, 0x2, 0x10, 0xffff, 0x6, 0x800, 0x0, 0x8a17, 0x9, 0x7, 0xfffffffd, 0x6, 0xa3d1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0xc78}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 380.301903ms ago: executing program 0 (id=3216): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r3, @ANYBLOB="14000500fe80"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 293.210082ms ago: executing program 4 (id=3217): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, 0x0, 0x80) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40010) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008}, 0x40) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)={0x50, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x50}}, 0x4000000) 285.349152ms ago: executing program 1 (id=3218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000001c0)=0x1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 175.302822ms ago: executing program 4 (id=3219): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x9, 0x0, 0xffff, 0x7, 0x8, 0x7, 0x202, 0x4}}}}]}, 0x58}}, 0x8040) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 175.084782ms ago: executing program 1 (id=3220): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000240)={@loopback, r2}, 0x14) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0xffd8}}, 0x4000000) 173.448822ms ago: executing program 0 (id=3221): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 166.984242ms ago: executing program 2 (id=3222): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x2, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 93.823871ms ago: executing program 1 (id=3223): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) 0s ago: executing program 1 (id=3224): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}, 0x3}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) sendmsg$tipc(r0, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) kernel console output (not intermixed with test programs): cd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 147.842784][ T6467] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 147.844735][ T6467] vhci_hcd vhci_hcd.0: Device attached [ 148.587828][ T6474] vhci_hcd: connection closed [ 148.587871][ T6468] vhci_hcd: connection closed [ 148.589197][ T6472] vhci_hcd: connection closed [ 148.591856][ T4651] vhci_hcd: stop threads [ 148.594336][ T4651] vhci_hcd: release socket [ 148.602281][ T4651] vhci_hcd: disconnect device [ 148.616960][ T4651] vhci_hcd: stop threads [ 148.623974][ T4651] vhci_hcd: release socket [ 148.625741][ T4651] vhci_hcd: disconnect device [ 148.626918][ T4651] vhci_hcd: stop threads [ 148.629789][ T4651] vhci_hcd: release socket [ 148.630883][ T4651] vhci_hcd: disconnect device [ 148.897027][ T6505] device bond5 entered promiscuous mode [ 148.956576][ T6508] Cannot find add_set index 0 as target [ 149.009635][ T4406] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 149.141414][ T6516] netlink: 'syz.4.731': attribute type 10 has an invalid length. [ 149.146767][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.148480][ T6516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.151269][ T6516] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.152900][ T6516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.163441][ T6516] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 149.187702][ T4406] usb 1-1: Using ep0 maxpacket: 8 [ 149.194811][ T4406] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 149.196771][ T4406] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.208516][ T4406] usb 1-1: config 0 descriptor?? [ 149.441635][ T6528] loop4: detected capacity change from 0 to 512 [ 149.464956][ T6528] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.663140][ T6528] EXT4-fs (loop4): orphan cleanup on readonly fs [ 149.689588][ T6528] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.735: bg 0: block 248: padding at end of block bitmap is not set [ 149.696561][ T6528] Quota error (device loop4): write_blk: dquota write failed [ 149.698414][ T6528] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 149.700587][ T6528] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.735: Failed to acquire dquot type 1 [ 149.708845][ T6528] EXT4-fs (loop4): 1 truncate cleaned up [ 149.713478][ T6528] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 151.989760][ T6537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.993917][ T6537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.186038][ T4294] EXT4-fs (loop4): unmounting filesystem. [ 152.436483][ T6555] tap0: tun_chr_ioctl cmd 1074025677 [ 152.444741][ T6555] tap0: linktype set to 769 [ 152.761114][ T6577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.763205][ T6577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.884414][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.758'. [ 153.240063][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.769'. [ 153.780485][ T6639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.782767][ T6639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.792284][ T4406] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 153.794612][ T4406] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 153.796978][ T4406] asix: probe of 1-1:0.0 failed with error -71 [ 153.813685][ T4406] usb 1-1: USB disconnect, device number 6 [ 154.668483][ T6696] netlink: 68 bytes leftover after parsing attributes in process `syz.2.808'. [ 154.674263][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.811'. [ 154.735056][ T6703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.737056][ T6703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.769263][ T6706] netlink: 16 bytes leftover after parsing attributes in process `syz.4.813'. [ 155.203203][ T6735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.826'. [ 155.726056][ T6763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.736288][ T6763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.794725][ T6766] netlink: 16 bytes leftover after parsing attributes in process `syz.1.837'. [ 155.812972][ T6758] could not allocate digest TFM handle poly1305-simd [ 156.167416][ T4296] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 156.364368][ T4296] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.366661][ T4296] usb 1-1: config 0 has no interfaces? [ 156.370432][ T4296] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 156.374790][ T4296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.383846][ T4296] usb 1-1: Product: syz [ 156.384820][ T4296] usb 1-1: Manufacturer: syz [ 156.396243][ T4296] usb 1-1: SerialNumber: syz [ 156.409795][ T4296] usb 1-1: config 0 descriptor?? [ 156.628231][ T4296] usb 1-1: USB disconnect, device number 7 [ 156.945795][ T6814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.951463][ T6814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.949722][ T6852] netlink: 172 bytes leftover after parsing attributes in process `syz.2.872'. [ 157.952031][ T6852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.872'. [ 157.954151][ T6852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.872'. [ 157.977797][ T14] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 158.193610][ T6866] netlink: 24 bytes leftover after parsing attributes in process `syz.4.879'. [ 158.195452][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.198728][ T14] usb 1-1: config 0 has no interfaces? [ 158.279295][ T14] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 158.281494][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.283140][ T14] usb 1-1: Product: syz [ 158.284105][ T14] usb 1-1: Manufacturer: syz [ 158.285052][ T14] usb 1-1: SerialNumber: syz [ 158.302593][ T14] usb 1-1: config 0 descriptor?? [ 158.514640][ T14] usb 1-1: USB disconnect, device number 8 [ 161.557497][ T6993] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.756316][ T7003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.935'. [ 161.801939][ T7007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.805309][ T7007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.407585][ T7059] binder: 7058:7059 tried to acquire reference to desc 0, got 1 instead [ 163.423978][ T7059] binder: 7058:7059 got transaction with invalid data ptr [ 163.435326][ T7059] binder: 7058:7059 transaction call to 7058:0 failed 22/29201/-14, size 0-24 line 3342 [ 163.440395][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 163.771736][ T7069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.778984][ T7069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.782787][ T7069] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 164.364854][ T7101] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 165.537390][ T14] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 165.747540][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 165.750242][ T14] usb 1-1: config 162 has an invalid interface number: 97 but max is 0 [ 165.752257][ T14] usb 1-1: config 162 has no interface number 0 [ 165.753583][ T14] usb 1-1: config 162 interface 97 has no altsetting 0 [ 166.000819][ T7182] sctp: [Deprecated]: syz.3.1013 (pid 7182) Use of int in max_burst socket option deprecated. [ 166.000819][ T7182] Use struct sctp_assoc_value instead [ 166.127671][ T14] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 166.129712][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.131296][ T14] usb 1-1: Product: syz [ 166.132181][ T14] usb 1-1: Manufacturer: syz [ 166.133122][ T14] usb 1-1: SerialNumber: syz [ 166.151021][ T7186] netlink: 'syz.3.1017': attribute type 1 has an invalid length. [ 166.181215][ T7186] 8021q: adding VLAN 0 to HW filter on device bond4 [ 166.230587][ T7186] bond4: (slave gretap1): making interface the new active one [ 166.234546][ T7186] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 166.236741][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 166.252045][ T7191] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 166.345906][ T14] metro_usb 1-1:162.97: interrupt-out endpoint missing [ 166.358131][ T14] usb 1-1: USB disconnect, device number 9 [ 166.422842][ T7202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.443811][ T7202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.625147][ T7212] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 166.860049][ T7224] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 166.892446][ T7227] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1033'. [ 167.075104][ T7237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.077083][ T7237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.505904][ T7264] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1049'. [ 167.592256][ T7267] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1050'. [ 167.795340][ T7281] netlink: 'syz.0.1055': attribute type 1 has an invalid length. [ 167.839009][ T7281] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.897123][ T7281] bond2: (slave veth3): Enslaving as an active interface with a down link [ 168.352644][ T7297] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1062'. [ 170.847713][ T4406] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 171.099263][ T4406] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 171.104040][ T4406] usb 1-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 171.106005][ T4406] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.157456][ T4406] usb 1-1: Product: syz [ 171.158296][ T4406] usb 1-1: Manufacturer: syz [ 171.159225][ T4406] usb 1-1: SerialNumber: syz [ 171.300457][ T4406] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input7 [ 171.443498][ T4406] usb 1-1: USB disconnect, device number 10 [ 171.811971][ T4288] udevd[4288]: Error opening device "/dev/input/event2": No such file or directory [ 171.814137][ T4288] udevd[4288]: Unable to EVIOCGABS device "/dev/input/event2" [ 171.826119][ T4288] udevd[4288]: Unable to EVIOCGABS device "/dev/input/event2" [ 171.836261][ T4288] udevd[4288]: Unable to EVIOCGABS device "/dev/input/event2" [ 171.846332][ T4288] udevd[4288]: Unable to EVIOCGABS device "/dev/input/event2" [ 173.086337][ T7408] ALSA: mixer_oss: invalid OSS volume 'LIN' [ 173.295174][ T7414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.323945][ T7414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.384272][ T7418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.471614][ T7413] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 174.632056][ T7449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.646823][ T7449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.938039][ T4406] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 175.349938][ T4406] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.352084][ T4406] usb 1-1: config 0 has no interfaces? [ 175.359548][ T4406] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 175.361368][ T4406] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.362994][ T4406] usb 1-1: Product: syz [ 175.389853][ T4406] usb 1-1: Manufacturer: syz [ 175.390912][ T4406] usb 1-1: SerialNumber: syz [ 175.411174][ T4406] usb 1-1: config 0 descriptor?? [ 175.533798][ T7469] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1137'. [ 175.535903][ T7469] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1137'. [ 175.558796][ T7469] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1137'. [ 175.622447][ T4406] usb 1-1: USB disconnect, device number 11 [ 176.117258][ T7487] netlink: 173 bytes leftover after parsing attributes in process `syz.4.1146'. [ 176.406851][ T7495] tipc: Failed to obtain node identity [ 176.408362][ T7495] tipc: Enabling of bearer rejected, failed to enable media [ 176.880040][ T7509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.905058][ T7509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.095615][ T7518] tipc: Failed to obtain node identity [ 177.096824][ T7518] tipc: Enabling of bearer rejected, failed to enable media [ 177.257433][ T14] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 177.453287][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.455349][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.458360][ T14] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 177.460202][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.469459][ T14] usb 1-1: config 0 descriptor?? [ 177.602371][ T7544] loop3: detected capacity change from 0 to 512 [ 177.732607][ T7544] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 177.834811][ T7544] EXT4-fs (loop3): orphan cleanup on readonly fs [ 177.853360][ T7544] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1171: bg 0: block 248: padding at end of block bitmap is not set [ 177.861926][ T7544] Quota error (device loop3): write_blk: dquota write failed [ 177.863850][ T7544] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 177.866055][ T7544] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.1171: Failed to acquire dquot type 1 [ 177.887000][ T7544] EXT4-fs (loop3): 1 truncate cleaned up [ 177.894318][ T7544] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 179.817031][ T14] megaworld 0003:07B5:0312.0001: unknown main item tag 0x7 [ 179.835839][ T14] megaworld 0003:07B5:0312.0001: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.0-1/input0 [ 179.861124][ T14] megaworld 0003:07B5:0312.0001: no inputs found [ 179.925758][ T7548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.935829][ T7548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.051488][ T14] usb 1-1: USB disconnect, device number 12 [ 180.352261][ T4307] EXT4-fs (loop3): unmounting filesystem. [ 180.382714][ T7555] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1177'. [ 180.541138][ T7563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.544411][ T7563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.743333][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1186'. [ 180.883735][ T7583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1189'. [ 181.187085][ T7600] trusted_key: encrypted_key: insufficient parameters specified [ 181.374297][ T7610] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1202'. [ 181.561133][ T7620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.564992][ T7620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.661644][ T7630] trusted_key: encrypted_key: insufficient parameters specified [ 181.853537][ T7643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1217'. [ 181.854407][ T7642] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1216'. [ 182.046321][ T7656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.054449][ T7656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.410207][ T7675] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1232'. [ 183.911141][ T7722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.915099][ T7722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.871306][ T7727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.874603][ T7727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.699876][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.709424][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.965698][ T7815] binder: BINDER_SET_CONTEXT_MGR already set [ 187.968491][ T7815] binder: 7814:7815 ioctl 4018620d 20000040 returned -16 [ 187.979886][ T7815] binder: 7814:7815 got transaction to invalid handle, 1 [ 187.981529][ T7815] binder: 7815:7814 cannot find target node [ 187.982880][ T7815] binder: 7814:7815 transaction call to 0:0 failed 25/29201/-22, size 0-24 line 3054 [ 187.990457][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 188.118946][ T7825] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 188.463416][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1298'. [ 188.519545][ T7837] IPVS: Error joining to the multicast group [ 188.668440][ T7842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.670614][ T7842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.679547][ T7842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.685407][ T7842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.657194][ T7857] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 190.280443][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1316'. [ 190.282612][ T7881] IPVS: Error joining to the multicast group [ 190.378394][ T7887] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 191.596627][ T7907] random: crng reseeded on system resumption [ 191.981129][ T7924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.983064][ T7924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.184922][ T7924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.186865][ T7924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.216678][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1334'. [ 192.219147][ T7931] IPVS: Error joining to the multicast group [ 193.740402][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1348'. [ 193.742601][ T7963] IPVS: Error joining to the multicast group [ 194.715361][ T7975] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1354'. [ 194.789089][ T7982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.791121][ T7982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.873768][ T7985] binder: 7983:7985 tried to acquire reference to desc 0, got 1 instead [ 194.887997][ T7985] binder: 7983:7985 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 194.929784][ T7988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.931929][ T7988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.976436][ T7990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.996134][ T7990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.291424][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1363'. [ 195.293567][ T7996] IPVS: Error joining to the multicast group [ 196.700624][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1376'. [ 196.731324][ T8027] bond2 (unregistering): Released all slaves [ 197.047718][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1378'. [ 197.049797][ T8037] IPVS: Error joining to the multicast group [ 197.105669][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1381'. [ 197.118672][ T8039] device gretap0 entered promiscuous mode [ 197.315824][ T8047] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 197.631265][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1393'. [ 197.764417][ T8073] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1395'. [ 198.084077][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1405'. [ 198.219087][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1407'. [ 198.337774][ T8100] IPVS: Error joining to the multicast group [ 198.594266][ T8111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.668139][ T8113] loop4: detected capacity change from 0 to 512 [ 198.687346][ T8113] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 198.825911][ T8113] EXT4-fs (loop4): orphan cleanup on readonly fs [ 198.841714][ T8113] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1413: bg 0: block 248: padding at end of block bitmap is not set [ 198.849827][ T8113] Quota error (device loop4): write_blk: dquota write failed [ 198.851753][ T8113] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 198.854092][ T8113] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.1413: Failed to acquire dquot type 1 [ 198.863498][ T8113] EXT4-fs (loop4): 1 truncate cleaned up [ 198.868730][ T8113] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 200.185110][ T8111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.627839][ T4294] EXT4-fs (loop4): unmounting filesystem. [ 201.715281][ T8124] __nla_validate_parse: 1 callbacks suppressed [ 201.715297][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1419'. [ 201.761882][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1421'. [ 202.135486][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1426'. [ 202.137669][ T8148] IPVS: Error joining to the multicast group [ 202.335622][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1434'. [ 202.438281][ T8163] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1436'. [ 202.725678][ T8183] bridge0: port 3(syz_tun) entered blocking state [ 202.729715][ T8183] bridge0: port 3(syz_tun) entered disabled state [ 202.731999][ T8183] device syz_tun entered promiscuous mode [ 203.011200][ T8201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1454'. [ 203.439858][ T8225] binder: 8224:8225 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 203.440589][ T8227] raw_sendmsg: syz.1.1467 forgot to set AF_INET. Fix it! [ 203.449835][ T8229] input: syz1 as /devices/virtual/input/input8 [ 203.948030][ T8259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1483'. [ 203.950012][ T8259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1483'. [ 203.952005][ T8259] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1483'. [ 203.953994][ T8259] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1483'. [ 205.120801][ T8284] netlink: 'syz.4.1492': attribute type 10 has an invalid length. [ 205.123380][ T8284] bond0: (slave wlan1): Opening slave failed [ 205.604573][ T8315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.606741][ T8315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.678731][ T8315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.680744][ T8315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.994349][ T8336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.000637][ T8336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.631273][ T8360] xt_TCPMSS: Only works on TCP SYN packets [ 206.772639][ T8368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.779795][ T8368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.792926][ T8368] Soft offlining pfn 0x1ae213 at process virtual address 0x20ffb000 [ 206.823958][ T8368] Memory failure: 0x1ae213: unhandlable page. [ 207.423298][ T8392] __nla_validate_parse: 1 callbacks suppressed [ 207.423313][ T8392] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1538'. [ 207.543431][ T8396] fuse: Bad value for 'fd' [ 208.264937][ T8424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1552'. [ 208.707369][ T4438] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 208.866092][ T8448] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1564'. [ 208.897707][ T4438] usb 1-1: Using ep0 maxpacket: 16 [ 208.900642][ T4438] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 208.902189][ T4438] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 208.904542][ T4438] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 208.909508][ T4438] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.916944][ T4438] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 208.924124][ T4438] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 208.926136][ T4438] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.935416][ T4438] usb 1-1: Product: syz [ 208.936619][ T4438] usb 1-1: Manufacturer: syz [ 208.939733][ T4438] usb 1-1: SerialNumber: syz [ 208.946835][ T4438] usb 1-1: config 0 descriptor?? [ 208.952815][ T8429] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 208.974368][ T4438] mcba_usb 1-1:0.0 can0: couldn't setup read URBs [ 208.975849][ T4438] mcba_usb 1-1:0.0 can0: couldn't start device: -90 [ 209.020711][ T8453] fuse: Bad value for 'fd' [ 209.038874][ T4438] mcba_usb: probe of 1-1:0.0 failed with error -90 [ 209.247250][ T4497] usb 1-1: USB disconnect, device number 13 [ 210.327145][ T8472] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1575'. [ 210.581347][ T8493] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1584'. [ 210.887173][ T8508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1591'. [ 210.955606][ T8512] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 211.268767][ T8531] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1598'. [ 211.330366][ T8527] bridge0: port 4(vlan2) entered blocking state [ 211.348126][ T8527] bridge0: port 4(vlan2) entered disabled state [ 211.366379][ T8527] device vlan2 entered promiscuous mode [ 211.372730][ T8527] device bond0 entered promiscuous mode [ 211.374010][ T8527] device bond_slave_0 entered promiscuous mode [ 211.382807][ T8527] device bond_slave_1 entered promiscuous mode [ 211.504615][ T8545] binder: 8544:8545 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 211.677474][ T8554] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1603'. [ 211.889745][ T8564] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1610'. [ 212.400538][ T8582] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1619'. [ 212.563808][ T8589] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1622'. [ 212.677582][ T8593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1624'. [ 212.682004][ T8591] netlink: 'syz.4.1623': attribute type 1 has an invalid length. [ 212.683895][ T8591] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1623'. [ 212.687542][ T8593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1624'. [ 212.910656][ T8605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1629'. [ 212.946341][ T8607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1631'. [ 213.636153][ T8638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1643'. [ 213.653552][ T8638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1643'. [ 213.699783][ T8638] device dummy0 entered promiscuous mode [ 213.742917][ T8638] device ip6gretap0 entered promiscuous mode [ 213.783812][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 213.940558][ T8648] random: crng reseeded on system resumption [ 214.419792][ T8658] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1647'. [ 214.506579][ T8660] netlink: 'syz.1.1649': attribute type 1 has an invalid length. [ 214.545544][ T8660] 8021q: adding VLAN 0 to HW filter on device bond2 [ 214.580408][ T8664] 8021q: adding VLAN 0 to HW filter on device bond2 [ 214.582201][ T8664] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 214.585459][ T8664] bond2: (slave vcan1): Error -95 calling set_mac_address [ 214.815005][ T8671] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 215.665281][ T8710] random: crng reseeded on system resumption [ 215.683707][ T8711] netlink: 'syz.2.1669': attribute type 1 has an invalid length. [ 215.751197][ T8711] 8021q: adding VLAN 0 to HW filter on device bond4 [ 215.890629][ T8714] 8021q: adding VLAN 0 to HW filter on device bond4 [ 215.900630][ T8714] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 215.920896][ T8714] bond4: (slave vcan1): Error -95 calling set_mac_address [ 216.017239][ T8720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1673'. [ 216.478297][ T8744] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 216.896072][ T8768] netlink: 'syz.2.1691': attribute type 10 has an invalid length. [ 218.183424][ T8822] __nla_validate_parse: 6 callbacks suppressed [ 218.183437][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1713'. [ 218.324125][ T8831] binder: BINDER_SET_CONTEXT_MGR already set [ 218.325583][ T8831] binder: 8829:8831 ioctl 4018620d 20000040 returned -16 [ 218.330045][ T8831] binder: 8829:8831 got transaction to invalid handle, 1 [ 218.336645][ T8831] binder: 8831:8829 cannot find target node [ 218.347432][ T8831] binder: 8829:8831 transaction call to 0:0 failed 33/29201/-22, size 0-24 line 3054 [ 218.352965][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 219.670867][ T8873] binder: BINDER_SET_CONTEXT_MGR already set [ 219.681979][ T8873] binder: 8872:8873 ioctl 4018620d 20000040 returned -16 [ 219.684328][ T8873] binder: 8872:8873 got transaction to invalid handle, 1 [ 219.697554][ T8873] binder: 8873:8872 cannot find target node [ 219.698964][ T8873] binder: 8872:8873 transaction call to 0:0 failed 35/29201/-22, size 0-24 line 3054 [ 219.717486][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 220.174168][ T8898] netlink: 'syz.4.1741': attribute type 1 has an invalid length. [ 220.175934][ T8898] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1741'. [ 221.335161][ T8938] device syz_tun left promiscuous mode [ 221.336582][ T8938] bridge0: port 3(syz_tun) entered disabled state [ 221.408192][ T8938] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 221.411471][ T8938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.413913][ T8938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.426282][ T8938] device bridge_slave_0 left promiscuous mode [ 221.430809][ T8938] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.478408][ T8938] device bridge_slave_1 left promiscuous mode [ 221.479892][ T8938] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.530524][ T8938] bond0: (slave bond_slave_0): Releasing backup interface [ 221.668432][ T8938] device bond_slave_0 left promiscuous mode [ 221.704284][ T8938] bond0: (slave bond_slave_1): Releasing backup interface [ 221.755022][ T8938] device bond_slave_1 left promiscuous mode [ 221.794793][ T8938] team0: Port device team_slave_0 removed [ 221.819022][ T8938] team0: Port device team_slave_1 removed [ 221.821152][ T8938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.822994][ T8938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.826084][ T8938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.828369][ T8938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.839850][ T8938] device vlan2 left promiscuous mode [ 221.841270][ T8938] device bond0 left promiscuous mode [ 221.842754][ T8938] bridge0: port 4(vlan2) entered disabled state [ 221.901616][ T8951] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 222.208950][ T8968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1775'. [ 222.674688][ T8989] netlink: 'syz.4.1782': attribute type 1 has an invalid length. [ 222.715785][ T8989] 8021q: adding VLAN 0 to HW filter on device bond7 [ 222.756685][ T8989] bond7: (slave bridge1): Enslaving as an active interface with a down link [ 223.268608][ T9014] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1792'. [ 223.282828][ T9014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1792'. [ 223.434853][ T9019] netlink: 'syz.3.1794': attribute type 11 has an invalid length. [ 223.949838][ T9039] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1802'. [ 224.074081][ T9042] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1804'. [ 224.080359][ T9042] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1804'. [ 224.292464][ T9050] loop4: detected capacity change from 0 to 512 [ 224.311430][ T9050] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.359547][ T9050] EXT4-fs (loop4): orphan cleanup on readonly fs [ 225.363343][ T9050] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1805: bg 0: block 248: padding at end of block bitmap is not set [ 225.366957][ T9050] Quota error (device loop4): write_blk: dquota write failed [ 225.368778][ T9050] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 225.371282][ T9050] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.1805: Failed to acquire dquot type 1 [ 225.383823][ T9050] EXT4-fs (loop4): 1 truncate cleaned up [ 225.390216][ T9050] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 227.374339][ T9057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1807'. [ 227.557912][ T4294] EXT4-fs (loop4): unmounting filesystem. [ 227.810550][ T9076] fuse: Bad value for 'fd' [ 228.599473][ T9088] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 229.095295][ T9111] loop4: detected capacity change from 0 to 512 [ 229.168962][ T9111] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 229.286025][ T9111] EXT4-fs (loop4): orphan cleanup on readonly fs [ 229.301898][ T9111] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1823: bg 0: block 248: padding at end of block bitmap is not set [ 229.308252][ T9111] Quota error (device loop4): write_blk: dquota write failed [ 229.310571][ T9111] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 229.313059][ T9111] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.1823: Failed to acquire dquot type 1 [ 229.322700][ T9111] EXT4-fs (loop4): 1 truncate cleaned up [ 229.329903][ T9111] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 231.342817][ T9114] fuse: Bad value for 'fd' [ 231.361219][ T9116] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1826'. [ 232.358137][ T4294] EXT4-fs (loop4): unmounting filesystem. [ 232.570232][ T9132] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1832'. [ 232.637680][ T9132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.652415][ T9123] bridge0: port 3(gretap0) entered blocking state [ 232.654599][ T9123] bridge0: port 3(gretap0) entered disabled state [ 232.657271][ T9123] device gretap0 entered promiscuous mode [ 232.659283][ T9123] bridge0: port 3(gretap0) entered blocking state [ 232.661142][ T9123] bridge0: port 3(gretap0) entered forwarding state [ 232.683672][ T9139] netlink: 'syz.1.1835': attribute type 1 has an invalid length. [ 232.696021][ T9139] 8021q: adding VLAN 0 to HW filter on device bond3 [ 232.744017][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1837'. [ 232.816040][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1837'. [ 233.067873][ T9155] loop3: detected capacity change from 0 to 512 [ 233.109001][ T9155] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 233.162841][ T9155] EXT4-fs (loop3): orphan cleanup on readonly fs [ 233.179827][ T9155] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1841: bg 0: block 248: padding at end of block bitmap is not set [ 233.184725][ T9155] Quota error (device loop3): write_blk: dquota write failed [ 233.186734][ T9155] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 233.189103][ T9155] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.1841: Failed to acquire dquot type 1 [ 233.230131][ T9155] EXT4-fs (loop3): 1 truncate cleaned up [ 233.235714][ T9155] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 236.012782][ T4307] EXT4-fs (loop3): unmounting filesystem. [ 236.585909][ T9180] netlink: 'syz.1.1850': attribute type 1 has an invalid length. [ 236.635601][ T9180] 8021q: adding VLAN 0 to HW filter on device bond4 [ 236.833319][ T9195] device ip6tnl1 entered promiscuous mode [ 236.870417][ T9193] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1851'. [ 237.193190][ T9212] loop4: detected capacity change from 0 to 512 [ 237.224451][ T9212] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 237.448614][ T9212] EXT4-fs (loop4): orphan cleanup on readonly fs [ 237.524591][ T9212] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1856: bg 0: block 248: padding at end of block bitmap is not set [ 237.536281][ T9212] Quota error (device loop4): write_blk: dquota write failed [ 237.538563][ T9212] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 237.540896][ T9212] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.1856: Failed to acquire dquot type 1 [ 237.553047][ T9212] EXT4-fs (loop4): 1 truncate cleaned up [ 237.559730][ T9212] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 239.940367][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1867'. [ 240.045609][ T4294] EXT4-fs (loop4): unmounting filesystem. [ 240.860323][ T9233] team0 (unregistering): Port device team_slave_0 removed [ 240.870429][ T9233] team0 (unregistering): Port device team_slave_1 removed [ 240.878827][ T9233] team0 (unregistering): Port device bond1 removed [ 241.234645][ T9257] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1872'. [ 243.440100][ T9288] netlink: 'syz.2.1886': attribute type 25 has an invalid length. [ 243.462656][ T9288] netlink: 'syz.2.1886': attribute type 7 has an invalid length. [ 244.052524][ T9305] netlink: 'syz.4.1890': attribute type 9 has an invalid length. [ 244.538308][ T9333] loop3: detected capacity change from 0 to 512 [ 244.554085][ T9333] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 244.752852][ T9333] EXT4-fs (loop3): orphan cleanup on readonly fs [ 244.761928][ T9333] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1903: bg 0: block 248: padding at end of block bitmap is not set [ 244.767777][ T9333] Quota error (device loop3): write_blk: dquota write failed [ 244.769821][ T9333] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 244.771918][ T9333] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.1903: Failed to acquire dquot type 1 [ 244.786636][ T9333] EXT4-fs (loop3): 1 truncate cleaned up [ 244.837470][ T9333] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 247.156097][ T9342] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1908'. [ 247.322843][ T4307] EXT4-fs (loop3): unmounting filesystem. [ 247.543330][ T9358] netlink: 'syz.0.1915': attribute type 8 has an invalid length. [ 247.545720][ T9358] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 247.633294][ T9360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1917'. [ 247.675226][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1917'. [ 247.694148][ T9366] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1918'. [ 247.863626][ T9377] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1921'. [ 248.127860][ T9388] loop0: detected capacity change from 0 to 512 [ 248.150297][ T9388] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 248.309175][ T9388] EXT4-fs (loop0): orphan cleanup on readonly fs [ 248.319005][ T9388] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1923: bg 0: block 248: padding at end of block bitmap is not set [ 248.323815][ T9388] Quota error (device loop0): write_blk: dquota write failed [ 248.325878][ T9388] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 248.328148][ T9388] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.1923: Failed to acquire dquot type 1 [ 248.336760][ T9388] EXT4-fs (loop0): 1 truncate cleaned up [ 248.341233][ T9388] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 250.137157][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.139230][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.506216][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1929'. [ 250.822184][ T9400] netlink: 'syz.3.1931': attribute type 8 has an invalid length. [ 250.824456][ T9400] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 250.868378][ T5014] EXT4-fs (loop0): unmounting filesystem. [ 251.015697][ T9410] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1936'. [ 251.153444][ T9417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1939'. [ 251.291613][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1939'. [ 251.414026][ T9430] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1944'. [ 251.573698][ T9439] netlink: 'syz.0.1948': attribute type 8 has an invalid length. [ 251.576414][ T9439] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 251.905527][ T9448] Bluetooth: MGMT ver 1.22 [ 252.106529][ T9473] netlink: 'syz.4.1962': attribute type 8 has an invalid length. [ 252.111065][ T9473] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 252.616533][ T9493] __nla_validate_parse: 5 callbacks suppressed [ 252.616554][ T9493] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1970'. [ 252.695449][ T9500] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1973'. [ 252.766848][ T9504] netlink: 'syz.0.1975': attribute type 8 has an invalid length. [ 252.775790][ T9504] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 253.144364][ T9532] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1986'. [ 253.190213][ T9533] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1985'. [ 253.316914][ T9541] Cannot find set identified by id 0 to match [ 253.396954][ T9546] bridge_slave_0: default FDB implementation only supports local addresses [ 253.443063][ T9548] device syz_tun entered promiscuous mode [ 253.444323][ T9548] device macsec1 entered promiscuous mode [ 253.504550][ T9548] device syz_tun left promiscuous mode [ 253.606775][ T9558] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1998'. [ 253.737104][ T9560] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1999'. [ 253.949287][ T9580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2005'. [ 254.545159][ T9596] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 254.546130][ T9594] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2010'. [ 254.691000][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2013'. [ 254.703781][ T9600] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2015'. [ 254.936404][ T9614] device vlan0 entered promiscuous mode [ 254.990448][ T9614] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 255.039416][ T9616] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 257.120306][ T9704] sctp: [Deprecated]: syz.4.2060 (pid 9704) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.120306][ T9704] Use struct sctp_sack_info instead [ 257.241525][ T9713] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 257.918818][ T9740] __nla_validate_parse: 14 callbacks suppressed [ 257.918836][ T9740] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2070'. [ 258.211023][ T9749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2074'. [ 258.266974][ T9751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2075'. [ 258.491489][ T9769] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2081'. [ 258.563547][ T9775] random: crng reseeded on system resumption [ 259.204029][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2087'. [ 259.625956][ T9803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2093'. [ 259.753691][ T9812] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2095'. [ 260.727099][ T9853] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2110'. [ 260.964225][ T9861] random: crng reseeded on system resumption [ 261.016260][ T9863] netlink: 'syz.2.2115': attribute type 8 has an invalid length. [ 261.026392][ T9863] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 261.322604][ T9879] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2121'. [ 262.064835][ T9907] random: crng reseeded on system resumption [ 262.383910][ T9922] netlink: 'syz.4.2137': attribute type 1 has an invalid length. [ 262.407050][ T9922] 8021q: adding VLAN 0 to HW filter on device bond8 [ 262.632866][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2142'. [ 262.656178][ T9934] netlink: 'syz.0.2140': attribute type 8 has an invalid length. [ 262.659220][ T9934] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 262.695431][ T9937] random: crng reseeded on system resumption [ 263.047145][ T9956] netlink: 'syz.0.2150': attribute type 1 has an invalid length. [ 263.060770][ T9956] 8021q: adding VLAN 0 to HW filter on device bond3 [ 263.601726][ T9973] netlink: 'syz.4.2155': attribute type 8 has an invalid length. [ 263.613028][ T9973] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 263.752878][ T9981] random: crng reseeded on system resumption [ 263.905324][ T9985] netlink: 'syz.2.2161': attribute type 1 has an invalid length. [ 263.946776][ T9985] 8021q: adding VLAN 0 to HW filter on device bond5 [ 265.086711][T10003] netlink: 'syz.1.2169': attribute type 8 has an invalid length. [ 265.107542][T10003] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 265.462488][T10016] netlink: 'syz.0.2173': attribute type 1 has an invalid length. [ 265.495468][T10016] 8021q: adding VLAN 0 to HW filter on device bond4 [ 265.677247][T10025] __nla_validate_parse: 1 callbacks suppressed [ 265.677263][T10025] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2176'. [ 266.779860][T10047] random: crng reseeded on system resumption [ 267.036457][T10059] netlink: 'syz.1.2188': attribute type 1 has an invalid length. [ 267.069492][T10059] 8021q: adding VLAN 0 to HW filter on device bond5 [ 267.163607][T10066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2191'. [ 267.214995][T10068] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2192'. [ 267.574840][T10083] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2198'. [ 268.416592][T10090] fuse: Bad value for 'fd' [ 268.590016][T10103] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2204'. [ 269.514755][T10107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2206'. [ 270.684654][T10114] tipc: Started in network mode [ 270.685866][T10114] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 270.834949][T10114] tipc: Enabled bearer , priority 10 [ 271.654709][T10127] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2214'. [ 271.656936][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2214'. [ 271.703353][T10129] netlink: 'syz.4.2216': attribute type 15 has an invalid length. [ 271.842257][T10131] xt_nfacct: accounting object `sy' does not exists [ 271.854184][ T4344] tipc: Node number set to 15444650 [ 272.141132][T10150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2224'. [ 272.240310][T10154] tipc: Started in network mode [ 272.241353][T10154] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 272.244942][T10154] tipc: Enabled bearer , priority 10 [ 272.273359][T10157] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2227'. [ 272.275412][T10157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2227'. [ 272.515302][T10170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2231'. [ 272.715825][T10176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2245'. [ 272.817621][T10178] xt_nfacct: accounting object `sy' does not exists [ 272.855005][T10184] fuse: Bad value for 'fd' [ 272.910930][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2239'. [ 272.942734][T10190] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2240'. [ 272.944738][T10190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2240'. [ 273.257425][ T4438] tipc: Node number set to 15444650 [ 273.350098][T10212] tipc: Started in network mode [ 273.354789][T10212] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 273.359946][T10212] tipc: Enabled bearer , priority 10 [ 273.861296][ C1] vcan0: j1939_tp_rxtimer: 0x000000002e706972: rx timeout, send abort [ 273.929009][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000002e706972: 0x10100: (3) A timeout occurred and this is the connection abort to close the session. [ 274.413886][ T4393] tipc: Node number set to 15444650 [ 276.786557][T10337] __nla_validate_parse: 15 callbacks suppressed [ 276.786572][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2305'. [ 277.260140][T10358] fuse: Unknown parameter 'grou00000000000000000000' [ 277.344064][T10362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2317'. [ 277.462390][T10372] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2322'. [ 277.464728][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2322'. [ 277.760300][T10383] fuse: Unknown parameter 'grou00000000000000000000' [ 277.934929][T10390] netlink: 'syz.0.2330': attribute type 10 has an invalid length. [ 277.955732][T10390] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 278.017135][T10392] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2331'. [ 278.066100][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2332'. [ 278.100745][T10398] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2334'. [ 278.103817][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2334'. [ 278.236285][T10408] fuse: Unknown parameter 'group_i00000000000000000000' [ 278.486087][T10421] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2346'. [ 278.519595][T10424] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2347'. [ 278.684300][T10435] fuse: Unknown parameter 'group_i00000000000000000000' [ 278.846499][T10448] loop0: detected capacity change from 0 to 512 [ 278.859950][T10448] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 278.963856][T10448] EXT4-fs (loop0): orphan cleanup on readonly fs [ 278.966376][T10448] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2355: bg 0: block 248: padding at end of block bitmap is not set [ 278.975838][T10448] Quota error (device loop0): write_blk: dquota write failed [ 278.977531][T10448] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 278.979766][T10448] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.2355: Failed to acquire dquot type 1 [ 278.984445][T10448] EXT4-fs (loop0): 1 truncate cleaned up [ 278.997071][T10448] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 279.209965][T10459] netlink: 'syz.1.2362': attribute type 1 has an invalid length. [ 279.254936][T10459] 8021q: adding VLAN 0 to HW filter on device bond6 [ 279.401011][T10471] fuse: Unknown parameter 'group_i00000000000000000000' [ 279.613393][ T5014] EXT4-fs (loop0): unmounting filesystem. [ 279.956810][T10491] netlink: 'syz.4.2376': attribute type 1 has an invalid length. [ 280.008193][T10497] fuse: Unknown parameter 'group_id00000000000000000000' [ 280.011895][T10491] 8021q: adding VLAN 0 to HW filter on device bond9 [ 280.148698][T10509] loop2: detected capacity change from 0 to 512 [ 280.153052][T10509] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 280.159833][T10509] EXT4-fs (loop2): orphan cleanup on readonly fs [ 280.162313][T10509] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2381: bg 0: block 248: padding at end of block bitmap is not set [ 280.165671][T10509] Quota error (device loop2): write_blk: dquota write failed [ 280.167186][T10509] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 280.169444][T10509] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.2381: Failed to acquire dquot type 1 [ 280.173045][T10509] EXT4-fs (loop2): 1 truncate cleaned up [ 280.174841][T10509] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 280.642303][T10530] fuse: Bad value for 'fd' [ 280.727396][T10538] netlink: 'syz.1.2394': attribute type 1 has an invalid length. [ 280.773744][T10538] 8021q: adding VLAN 0 to HW filter on device bond7 [ 280.934671][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 281.011573][T10558] fuse: Bad value for 'fd' [ 281.269554][T10576] netlink: 'syz.3.2410': attribute type 1 has an invalid length. [ 281.297144][T10576] 8021q: adding VLAN 0 to HW filter on device bond6 [ 281.347805][T10582] loop2: detected capacity change from 0 to 512 [ 281.350533][T10582] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 281.380095][T10582] EXT4-fs (loop2): orphan cleanup on readonly fs [ 281.385575][T10582] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2413: bg 0: block 248: padding at end of block bitmap is not set [ 281.395969][T10582] Quota error (device loop2): write_blk: dquota write failed [ 281.397635][T10582] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 281.399601][T10582] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.2413: Failed to acquire dquot type 1 [ 281.403465][T10582] EXT4-fs (loop2): 1 truncate cleaned up [ 281.405328][T10582] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 281.608177][T10592] fuse: Bad value for 'fd' [ 281.881699][T10606] __nla_validate_parse: 18 callbacks suppressed [ 281.881715][T10606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2424'. [ 282.148001][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 282.196663][T10625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2432'. [ 282.243873][T10628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2435'. [ 282.341391][T10634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2436'. [ 282.580370][T10642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2441'. [ 282.613950][T10642] 8021q: adding VLAN 0 to HW filter on device bond6 [ 282.678402][T10656] loop2: detected capacity change from 0 to 512 [ 282.681294][T10656] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 282.702079][T10656] EXT4-fs (loop2): orphan cleanup on readonly fs [ 282.705027][T10656] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2443: bg 0: block 248: padding at end of block bitmap is not set [ 282.708718][T10656] Quota error (device loop2): write_blk: dquota write failed [ 282.710323][T10656] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 282.712432][T10656] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.2443: Failed to acquire dquot type 1 [ 282.716813][T10656] EXT4-fs (loop2): 1 truncate cleaned up [ 282.724014][T10656] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 282.726541][T10660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2446'. [ 282.951378][T10662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2449'. [ 283.073289][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2452'. [ 283.433037][T10687] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2461'. [ 283.440120][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 283.594781][T10698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2462'. [ 283.998975][T10720] loop2: detected capacity change from 0 to 512 [ 284.080006][T10720] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 284.097630][T10720] EXT4-fs (loop2): orphan cleanup on readonly fs [ 284.104226][T10720] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2473: bg 0: block 248: padding at end of block bitmap is not set [ 284.108095][T10720] Quota error (device loop2): write_blk: dquota write failed [ 284.109837][T10720] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 284.111890][T10720] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.2473: Failed to acquire dquot type 1 [ 284.115188][T10720] EXT4-fs (loop2): 1 truncate cleaned up [ 285.339356][T10720] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 285.925656][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 286.347189][T10762] netlink: 'syz.3.2493': attribute type 1 has an invalid length. [ 286.372388][T10762] 8021q: adding VLAN 0 to HW filter on device bond7 [ 286.995987][T10808] __nla_validate_parse: 11 callbacks suppressed [ 286.996004][T10808] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2515'. [ 287.276277][T10822] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2521'. [ 287.440559][T10834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2525'. [ 287.487023][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2527'. [ 287.876599][T10857] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2536'. [ 288.024908][T10864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2540'. [ 288.029310][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2541'. [ 288.452153][T10881] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2546'. [ 288.516732][T10887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2549'. [ 288.546976][T10887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2549'. [ 288.646167][T10900] random: crng reseeded on system resumption [ 289.219333][T10933] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 289.373143][T10941] random: crng reseeded on system resumption [ 289.876645][T10961] netlink: 'syz.4.2583': attribute type 1 has an invalid length. [ 290.534974][T10998] netlink: 'syz.0.2598': attribute type 4 has an invalid length. [ 290.551784][T10998] netlink: 'syz.0.2598': attribute type 4 has an invalid length. [ 292.146924][T11039] __nla_validate_parse: 19 callbacks suppressed [ 292.146939][T11039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2614'. [ 292.521455][T11058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2622'. [ 293.689191][T11076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2628'. [ 293.778500][T11083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2629'. [ 293.820724][T11083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2629'. [ 294.013968][T11093] 8021q: adding VLAN 0 to HW filter on device bond8 [ 294.082819][T11094] 8021q: adding VLAN 0 to HW filter on device bond8 [ 294.093786][T11094] bond8: (slave vcan5): The slave device specified does not support setting the MAC address [ 294.117164][T11094] bond8: (slave vcan5): Error -95 calling set_mac_address [ 295.365728][T11120] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2642'. [ 295.513459][T11129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2649'. [ 295.547244][T11129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2649'. [ 295.801241][T11134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2651'. [ 295.830012][T11134] 8021q: adding VLAN 0 to HW filter on device bond6 [ 296.665759][T11140] 8021q: adding VLAN 0 to HW filter on device bond6 [ 296.671566][T11140] bond6: (slave vcan3): The slave device specified does not support setting the MAC address [ 296.736146][T11140] bond6: (slave vcan3): Error -95 calling set_mac_address [ 296.810340][T11155] tipc: Enabled bearer , priority 0 [ 296.825276][T11155] device syzkaller0 entered promiscuous mode [ 296.827150][T11155] tipc: Resetting bearer [ 296.830622][T11158] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2658'. [ 296.839899][T11154] tipc: Resetting bearer [ 307.955138][T11154] tipc: Disabling bearer [ 308.168690][T11191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2669'. [ 308.225784][T11191] 8021q: adding VLAN 0 to HW filter on device bond9 [ 308.260778][T11189] 8021q: adding VLAN 0 to HW filter on device bond9 [ 308.277772][T11189] bond9: (slave vcan5): The slave device specified does not support setting the MAC address [ 308.281246][T11189] bond9: (slave vcan5): Error -95 calling set_mac_address [ 308.367249][T11206] loop4: detected capacity change from 0 to 512 [ 308.380747][T11206] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 308.386975][T11206] EXT4-fs (loop4): orphan cleanup on readonly fs [ 308.390334][T11206] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2675: bg 0: block 248: padding at end of block bitmap is not set [ 308.393790][T11206] Quota error (device loop4): write_blk: dquota write failed [ 308.395299][T11206] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 308.397378][T11206] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.2675: Failed to acquire dquot type 1 [ 308.401112][T11206] EXT4-fs (loop4): 1 truncate cleaned up [ 308.402752][T11206] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 309.272573][ T4294] EXT4-fs (loop4): unmounting filesystem. [ 309.769318][T11218] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 309.770973][T11218] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 309.775084][T11218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 309.791739][T11218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 309.793631][T11218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 309.796808][T11218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 310.339853][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.402858][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.072127][T11253] loop2: detected capacity change from 0 to 512 [ 311.096188][T11253] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 311.101382][T11262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2694'. [ 311.146771][T11253] EXT4-fs (loop2): orphan cleanup on readonly fs [ 311.147130][T11262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2694'. [ 311.152856][T11253] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2689: bg 0: block 248: padding at end of block bitmap is not set [ 311.204874][T11253] Quota error (device loop2): write_blk: dquota write failed [ 311.212787][T11253] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 311.238145][T11253] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.2689: Failed to acquire dquot type 1 [ 311.241790][T11253] EXT4-fs (loop2): 1 truncate cleaned up [ 311.262731][T11253] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 311.734972][T11292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2703'. [ 312.401389][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2713'. [ 312.439205][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2713'. [ 312.706361][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2717'. [ 312.964229][T11328] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 312.978952][T11328] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 312.995634][T11328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 313.002379][T11328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 313.006623][T11328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 313.035608][T11328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 313.282086][T11343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2726'. [ 313.611683][T11354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2730'. [ 313.648185][T11354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2730'. [ 314.042890][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2733'. [ 314.183363][T11366] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.186282][T11366] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.355850][T11366] tipc: Resetting bearer [ 314.364521][T11366] tipc: Resetting bearer [ 314.453401][T11368] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 314.455307][T11368] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 314.484646][T11368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 314.486317][T11368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 314.488575][T11368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 314.491191][T11368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 314.496711][T11368] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.498354][T11368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.520661][T11368] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.522202][T11368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.607039][T11379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2739'. [ 314.744121][T11389] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2742'. [ 316.213051][T11442] device syzkaller1 entered promiscuous mode [ 316.476441][T11457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2753'. [ 316.628019][T11462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2754'. [ 316.889836][T11468] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2756'. [ 317.324348][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 317.457452][T11486] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 317.460058][T11486] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 317.465031][T11486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 317.467048][T11486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 317.474903][T11486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 317.476619][T11486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 317.529942][T11490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2764'. [ 317.711010][T11504] netlink: 'syz.3.2771': attribute type 5 has an invalid length. [ 318.108744][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 318.110659][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 318.124390][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 318.144572][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 318.146425][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 318.161713][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 318.166482][T11520] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.168073][T11520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.189874][T11520] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.191585][T11520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.412445][T11536] __nla_validate_parse: 3 callbacks suppressed [ 318.412461][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2783'. [ 318.799658][T11549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2790'. [ 319.024006][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 319.032251][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 319.035130][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 319.685318][T11577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2801'. [ 319.845955][T11582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2802'. [ 319.947214][T11588] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 319.974608][T11588] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 319.985903][T11588] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 319.993113][T11588] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 320.650708][T11616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2815'. [ 320.826403][T11618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2816'. [ 320.862058][T11620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2817'. [ 320.869382][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2817'. [ 321.263337][T11637] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1, syncid = 4, id = 0 [ 321.269925][T11636] IPVS: stopping backup sync thread 11637 ... [ 321.324146][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2827'. [ 321.403250][T11645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2828'. [ 322.293318][ T4309] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 322.298249][ T4309] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 322.300820][ T4309] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 322.303862][ T4309] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 322.305986][ T4309] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 322.308073][ T4304] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 322.321054][ T4300] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 322.324271][ T4300] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 322.326066][ T4300] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 322.329480][ T4300] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 322.332518][ T4300] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 322.337116][ T4300] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 322.962471][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.207117][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.441004][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.446535][T11711] __nla_validate_parse: 4 callbacks suppressed [ 323.446548][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2850'. [ 323.447998][T11674] chnl_net:caif_netlink_parms(): no params data found [ 323.559732][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.608515][T11674] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.610097][T11674] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.612292][T11674] device bridge_slave_0 entered promiscuous mode [ 323.615102][T11674] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.616678][T11674] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.637068][T11674] device bridge_slave_1 entered promiscuous mode [ 323.655340][T11719] fuse: Unknown parameter 'user_i00000000000000000000' [ 323.704511][T11674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.713866][T11674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.765833][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2853'. [ 323.783961][T11674] team0: Port device team_slave_0 added [ 323.794609][T11674] team0: Port device team_slave_1 added [ 323.869039][T11674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.870604][T11674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.875922][T11674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.892568][T11674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.899738][T11674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.905534][T11674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.978578][T11729] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2856'. [ 323.980518][T11729] netlink: 'syz.3.2856': attribute type 8 has an invalid length. [ 324.037270][T11734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2858'. [ 324.059367][T11674] device hsr_slave_0 entered promiscuous mode [ 324.069080][T11674] device hsr_slave_1 entered promiscuous mode [ 324.121054][T11743] fuse: Bad value for 'fd' [ 324.128287][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2860'. [ 324.133712][T11674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.135441][T11674] Cannot create hsr debugfs directory [ 324.137460][T11734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2858'. [ 324.220393][ T9] tipc: Disabling bearer [ 324.223575][T11746] loop3: detected capacity change from 0 to 512 [ 324.226197][ T9] tipc: Left network mode [ 324.273041][T11750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2864'. [ 324.278216][T11746] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 324.374013][T11746] EXT4-fs (loop3): orphan cleanup on readonly fs [ 324.382790][T11746] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2861: bg 0: block 248: padding at end of block bitmap is not set [ 324.388566][T11746] Quota error (device loop3): write_blk: dquota write failed [ 324.395784][T11746] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 324.402838][T11746] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.2861: Failed to acquire dquot type 1 [ 324.417801][ T4304] Bluetooth: hci5: command 0x0409 tx timeout [ 324.428907][T11746] EXT4-fs (loop3): 1 truncate cleaned up [ 324.480071][T11746] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 325.354608][T11787] fuse: Bad value for 'fd' [ 325.370359][T11784] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2871'. [ 325.372379][T11784] netlink: 'syz.0.2871': attribute type 8 has an invalid length. [ 325.479100][T11789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2873'. [ 325.509662][T11793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2874'. [ 325.946783][T11674] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 326.218656][T11674] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 326.270019][T11828] fuse: Unknown parameter 'user_id00000000000000000000' [ 326.279391][T11674] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 326.497403][ T4304] Bluetooth: hci5: command 0x041b tx timeout [ 326.538301][T11674] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 327.091810][ T9] device hsr_slave_0 left promiscuous mode [ 327.127845][ T9] device hsr_slave_1 left promiscuous mode [ 327.177482][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.179280][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.181646][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.183366][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.186659][ T9] device bridge_slave_1 left promiscuous mode [ 327.191190][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.228390][ T9] device bridge_slave_0 left promiscuous mode [ 327.229877][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.337596][ T9] device veth1_macvtap left promiscuous mode [ 327.339121][ T9] device veth0_macvtap left promiscuous mode [ 327.340449][ T9] device veth1_vlan left promiscuous mode [ 327.341751][ T9] device veth0_vlan left promiscuous mode [ 328.399978][ T9] bond9 (unregistering): Released all slaves [ 328.577661][ T4304] Bluetooth: hci5: command 0x040f tx timeout [ 328.627055][ T4307] EXT4-fs (loop3): unmounting filesystem. [ 329.259878][ T9] bond8 (unregistering): Released all slaves [ 329.309391][ T9] bond7 (unregistering): (slave bridge1): Releasing active interface [ 330.081596][ T9] bond7 (unregistering): Released all slaves [ 330.088778][ T9] bond6 (unregistering): Released all slaves [ 330.102531][ T9] bond5 (unregistering): Released all slaves [ 330.109457][ T9] bond4 (unregistering): Released all slaves [ 330.115716][ T9] bond3 (unregistering): Released all slaves [ 330.122145][ T9] bond2 (unregistering): Released all slaves [ 330.128392][ T9] bond1 (unregistering): Released all slaves [ 330.657580][ T4304] Bluetooth: hci5: command 0x0419 tx timeout [ 331.900643][ T9] team0 (unregistering): Port device team_slave_1 removed [ 332.090978][ T9] team0 (unregistering): Port device team_slave_0 removed [ 332.269068][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.508601][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.099786][ T9] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 335.149168][ T9] bond0 (unregistering): Released all slaves [ 335.392302][T11852] __nla_validate_parse: 2 callbacks suppressed [ 335.392319][T11852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2890'. [ 335.497006][T11674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.549269][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 335.551420][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.559312][T11870] fuse: Unknown parameter 'user_id00000000000000000000' [ 335.596198][T11674] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.629152][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 335.631483][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.634092][ T4478] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.635743][ T4478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.658886][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 335.665403][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 335.680181][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 335.682436][ T4478] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.684083][ T4478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.685891][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 335.708308][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 335.720025][ T280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 335.722971][ T280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 335.725559][ T280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 335.749023][ T280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 335.751479][ T280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 335.779786][T11030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 335.782158][T11030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.784444][T11030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 335.786590][T11030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 335.850986][T11674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 336.055061][T11895] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2903'. [ 336.155221][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 336.157054][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 336.176817][T11674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.193274][T11899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2904'. [ 336.234623][T11899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2904'. [ 336.396506][T11907] fuse: Bad value for 'fd' [ 336.635697][T11921] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2913'. [ 336.658968][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 336.661124][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 336.694521][T11925] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2914'. [ 336.721234][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 336.723746][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 336.726032][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 336.729951][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 336.738119][T11674] device veth0_vlan entered promiscuous mode [ 336.743828][T11927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2915'. [ 336.764103][T11674] device veth1_vlan entered promiscuous mode [ 336.786380][T11927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2915'. [ 336.800152][T11032] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 336.802511][T11032] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 336.804594][T11032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 336.818809][T11032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.824015][T11674] device veth0_macvtap entered promiscuous mode [ 336.833670][T11674] device veth1_macvtap entered promiscuous mode [ 336.869495][T11674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.872153][T11674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.874257][T11674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.876829][T11674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.898637][T11674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.901398][T11674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.916426][T11674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.931715][T11674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.934227][T11674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.936732][T11674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.944211][T11674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.946352][T11674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.958171][T11674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.961661][T11674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.963003][T11937] fuse: Bad value for 'fd' [ 336.964191][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 336.966377][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 336.970539][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 336.984322][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 336.986870][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 336.995063][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 337.004036][T11674] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.005914][T11674] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.008586][T11674] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.010635][T11674] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.142413][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.170349][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.175091][T11032] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 337.237688][ T4478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.239554][ T4478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.244099][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 337.278722][T11951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2928'. [ 337.316285][T11953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2925'. [ 337.491109][T11965] fuse: Bad value for 'fd' [ 338.155523][T12010] bridge: RTM_NEWNEIGH with invalid ether address [ 338.408241][ T4304] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.412592][ T4304] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 338.415230][ T4304] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 338.424795][ T4304] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 338.429970][ T4304] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 338.435747][ T4304] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.695035][T12039] device hsr0 entered promiscuous mode [ 338.696753][T12042] device hsr_slave_0 left promiscuous mode [ 338.738432][T12042] device hsr_slave_1 left promiscuous mode [ 338.869391][T12042] device hsr0 left promiscuous mode [ 338.950614][ T4478] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.160346][ T4478] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.435812][ T4478] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.401602][ T4478] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.417208][T12025] chnl_net:caif_netlink_parms(): no params data found [ 340.493982][T12095] __nla_validate_parse: 11 callbacks suppressed [ 340.493998][T12095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2981'. [ 340.497563][ T4304] Bluetooth: hci0: command 0x0409 tx timeout [ 340.609058][T12025] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.610566][T12025] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.612792][T12025] device bridge_slave_0 entered promiscuous mode [ 340.615843][T12025] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.617915][T12025] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.620150][T12025] device bridge_slave_1 entered promiscuous mode [ 340.680914][T12103] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2984'. [ 340.722999][T12025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.727015][T12025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.125608][T12025] team0: Port device team_slave_0 added [ 341.140625][T12025] team0: Port device team_slave_1 added [ 342.053220][T12025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.054710][T12025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.077487][T12025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.082502][T12025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.083863][T12025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.091358][T12025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.166076][T12131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2992'. [ 342.260184][T12025] device hsr_slave_0 entered promiscuous mode [ 342.307966][T12025] device hsr_slave_1 entered promiscuous mode [ 342.327743][T12025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.329329][T12025] Cannot create hsr debugfs directory [ 342.446365][T12155] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2997'. [ 342.578040][ T4304] Bluetooth: hci0: command 0x041b tx timeout [ 342.821230][T12173] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9 [ 343.640261][T12180] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3002'. [ 343.905615][T12199] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3008'. [ 344.073853][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3005'. [ 344.229292][T12187] bond0: (slave bond_slave_0): Releasing backup interface [ 344.426796][T12208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3010'. [ 344.688492][ T4304] Bluetooth: hci0: command 0x040f tx timeout [ 345.838604][T12235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3020'. [ 345.912049][ T4478] device hsr_slave_0 left promiscuous mode [ 345.952762][ T4478] device hsr_slave_1 left promiscuous mode [ 346.217965][ T4478] device veth1_macvtap left promiscuous mode [ 346.219373][ T4478] device veth0_macvtap left promiscuous mode [ 346.220677][ T4478] device veth1_vlan left promiscuous mode [ 346.221969][ T4478] device veth0_vlan left promiscuous mode [ 346.738137][ T4304] Bluetooth: hci0: command 0x0419 tx timeout [ 347.125596][ T4478] bond10 (unregistering): Released all slaves [ 347.930748][ T4478] bond9 (unregistering): Released all slaves [ 348.571708][ T4478] bond8 (unregistering): Released all slaves [ 349.231973][ T4478] bond7 (unregistering): Released all slaves [ 349.890545][ T4478] bond6 (unregistering): Released all slaves [ 350.550235][ T4478] bond5 (unregistering): Released all slaves [ 351.249435][ T4478] bond4 (unregistering): Released all slaves [ 351.891265][ T4478] bond3 (unregistering): Released all slaves [ 352.572707][ T4478] bond2 (unregistering): Released all slaves [ 352.720753][ T4478] bond1 (unregistering): Released all slaves [ 357.582265][ T4478] bond0 (unregistering): Released all slaves [ 357.816798][T12251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3025'. [ 357.981318][T12280] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3032'. [ 358.124852][T12025] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 358.166584][T12025] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 358.238338][T12025] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 358.384107][T12025] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 359.239110][T12316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3041'. [ 359.264099][T12316] 8021q: adding VLAN 0 to HW filter on device bond8 [ 359.279643][T12318] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input10 [ 359.308132][T12317] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3040'. [ 359.374385][T12025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.384051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 359.386216][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 359.414144][T12025] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.439163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 359.441704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 359.448206][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.450019][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.466699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 359.485392][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 359.491863][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 359.494245][ T9157] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.495973][ T9157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.518393][T12331] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3045'. [ 359.527720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 359.537043][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 359.649706][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 359.652672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 359.655080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 359.658434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 359.660973][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 359.667815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 359.674160][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 359.676395][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 359.685695][T12025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 359.692250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 359.922453][T12356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3052'. [ 360.013959][T12356] 8021q: adding VLAN 0 to HW filter on device bond7 [ 360.025394][T12025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.232315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 360.304590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 360.773983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 360.776395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 360.869689][T12025] device veth0_vlan entered promiscuous mode [ 360.875683][T12025] device veth1_vlan entered promiscuous mode [ 360.895504][T11211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 360.899026][T11211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 360.901314][T11211] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 360.904160][T11211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 360.913311][T11211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 360.976875][T11032] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 360.979982][T11032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 360.982215][T11032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 361.001436][T12025] device veth0_macvtap entered promiscuous mode [ 361.046806][T12025] device veth1_macvtap entered promiscuous mode [ 361.070434][T12025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.072639][T12025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.074678][T12025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.076915][T12025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.107251][T12025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.109786][T12025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.111910][T12025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.113987][T12025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.136492][T12025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.146623][ T280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 361.149122][ T280] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 361.151161][ T280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 361.153429][ T280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 361.155734][T12382] netlink: 'syz.4.3058': attribute type 10 has an invalid length. [ 361.170229][T12382] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 361.196415][T12025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.199069][T12025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.201175][T12025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.203476][T12025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.205574][T12025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.227938][T12025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.230023][T12025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.232390][T12025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.260770][T12025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.262831][T12388] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3057'. [ 361.270578][T11032] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 361.272880][T11032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 361.288703][T12025] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.290628][T12025] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.292564][T12025] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.294402][T12025] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.518003][ T280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.534148][ T280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.592691][ T4472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.594712][ T4472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.608641][T12399] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 361.615344][ T280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 361.625701][ T280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 361.630245][T12410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3065'. [ 362.364363][T12410] 8021q: adding VLAN 0 to HW filter on device bond9 [ 362.504033][T12421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3066'. [ 362.716029][T12435] xt_hashlimit: size too large, truncated to 1048576 [ 362.746314][T12441] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3073'. [ 362.846747][T12444] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 362.862787][T12444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 362.873284][T12444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 362.917864][T12447] __nla_validate_parse: 1 callbacks suppressed [ 362.917880][T12447] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3075'. [ 362.993267][T12448] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 362.995049][T12448] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 363.002364][T12448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 363.006160][T12448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 363.312185][T12460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3079'. [ 364.380600][T12477] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3086'. [ 364.391056][T12478] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3087'. [ 364.406383][ T4300] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.410744][ T4300] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.413676][ T4300] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.416260][ T4300] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.440059][ T4300] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 364.442325][ T4300] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 364.545475][T12485] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3088'. [ 366.312775][ T4478] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.352458][T12494] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 366.355369][T12494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 366.363998][T12494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 366.381060][T12492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3091'. [ 366.387157][T12497] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 366.395223][T12497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 366.396891][T12497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 366.497612][ T4300] Bluetooth: hci1: command 0x0409 tx timeout [ 366.531976][ T4478] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.710966][ T4478] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.795153][T12514] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 366.851840][ T4478] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.857725][T12479] chnl_net:caif_netlink_parms(): no params data found [ 366.880338][T12517] device syzkaller1 entered promiscuous mode [ 367.084837][T12479] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.086570][T12479] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.097426][T12479] device bridge_slave_0 entered promiscuous mode [ 367.135153][T12479] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.136965][T12479] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.141861][T12479] device bridge_slave_1 entered promiscuous mode [ 367.239834][T12479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.253261][T12479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.319472][ T4478] tipc: Disabling bearer [ 367.322104][ T4478] tipc: Left network mode [ 367.354588][T12479] team0: Port device team_slave_0 added [ 367.378566][T12479] team0: Port device team_slave_1 added [ 367.423942][T12479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.430522][T12479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.449998][T12479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.463676][T12479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.469820][T12479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.515503][T12479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.474905][T12541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3105'. [ 368.510252][T12479] device hsr_slave_0 entered promiscuous mode [ 368.577398][ T4304] Bluetooth: hci1: command 0x041b tx timeout [ 368.594847][T12479] device hsr_slave_1 entered promiscuous mode [ 368.617513][T12479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.619161][T12479] Cannot create hsr debugfs directory [ 368.624248][T12551] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 368.627935][T12551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 368.636583][T12551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 368.640271][T12560] netlink: 'syz.4.3109': attribute type 1 has an invalid length. [ 368.641899][T12560] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3109'. [ 368.684745][T12552] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 368.764780][T12552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 368.766919][T12552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 369.049464][T12570] device syzkaller1 entered promiscuous mode [ 370.657743][ T4304] Bluetooth: hci1: command 0x040f tx timeout [ 370.699388][T12607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3118'. [ 370.770995][T12612] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11 [ 371.100871][T12617] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 371.104209][T12617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 371.105937][T12617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 371.141906][T12621] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 371.143871][T12621] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 371.155494][T12621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 371.159313][T12621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 371.505740][T12629] device syzkaller1 entered promiscuous mode [ 371.648508][ T4478] device hsr_slave_0 left promiscuous mode [ 371.699929][ T4478] device hsr_slave_1 left promiscuous mode [ 371.703230][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.704772][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.858912][ T4478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.863693][ T4478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.865974][ T4478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.868341][ T4478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.878683][ T4478] device bridge_slave_1 left promiscuous mode [ 371.883789][ T4478] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.087233][ T4478] device bridge_slave_0 left promiscuous mode [ 372.091692][ T4478] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.738368][ T4304] Bluetooth: hci1: command 0x0419 tx timeout [ 372.773682][ T4478] device veth1_macvtap left promiscuous mode [ 372.775279][ T4478] device veth0_macvtap left promiscuous mode [ 372.776758][ T4478] device veth1_vlan left promiscuous mode [ 372.778991][ T4478] device veth0_vlan left promiscuous mode [ 373.650138][ T4478] bond7 (unregistering): Released all slaves [ 374.480430][ T4478] bond6 (unregistering): Released all slaves [ 375.410789][ T4478] bond5 (unregistering): Released all slaves [ 376.109456][ T4478] bond4 (unregistering): Released all slaves [ 376.115848][ T4478] bond3 (unregistering): Released all slaves [ 376.122435][ T4478] bond2 (unregistering): Released all slaves [ 376.129012][ T4478] bond1 (unregistering): Released all slaves [ 378.022764][ T4478] team0 (unregistering): Port device team_slave_1 removed [ 378.229834][ T4478] team0 (unregistering): Port device team_slave_0 removed [ 378.420305][ T4478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.610518][ T4478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.182974][ T4478] bond0 (unregistering): Released all slaves [ 381.455907][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3130'. [ 381.468855][T12656] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3132'. [ 381.530590][T12662] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 381.533614][T12662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 381.535217][T12662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 381.563686][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 381.565413][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 381.572310][T12672] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input12 [ 381.573114][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 381.576371][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 381.622766][T12670] device syzkaller1 entered promiscuous mode [ 381.727054][T12479] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 381.769719][T12479] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 381.870385][T12479] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 381.944982][T12479] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 382.843681][T12704] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 382.856048][T12704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 382.859317][T12706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3147'. [ 382.863118][T12704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 382.917663][T12706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3147'. [ 382.953738][T12710] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 382.956608][T12710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 382.980561][T12710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 383.044428][T12712] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3148'. [ 383.061049][T12479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.077129][T11030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 383.088018][T11030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 383.100298][T12720] device syzkaller1 entered promiscuous mode [ 383.130464][T12479] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.203943][T11030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 383.207047][T11030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 383.220854][T11030] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.222378][T11030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.248706][T11030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 383.266257][T11030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 383.270096][T11030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 383.272324][T11030] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.273805][T11030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.280291][T11030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 383.340056][T11258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 383.342642][T11258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 383.346848][T11258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 383.386733][T11258] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 383.389108][T11258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 383.395689][T11258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 383.409567][T11258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 383.415622][T11258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 383.519936][T12736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3157'. [ 383.549979][T12479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 383.552783][T12479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 383.574505][ T280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 383.577134][ T280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 384.337041][T12749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3160'. [ 384.364272][T12749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3160'. [ 384.476793][T12758] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3162'. [ 384.501332][T12757] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 384.504506][T12757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 384.506184][T12757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 384.607024][T12759] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 384.613714][T12759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 384.615401][T12759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 384.648305][ T280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 384.649971][ T280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 384.672487][T12479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.729762][ T280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 384.732477][ T280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 384.780100][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 384.782285][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 384.785617][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 384.815969][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 384.838965][T12479] device veth0_vlan entered promiscuous mode [ 384.845029][T12479] device veth1_vlan entered promiscuous mode [ 385.096315][T11030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 385.099799][T11030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 385.102261][T11030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 385.113707][T11030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 385.121430][T12479] device veth0_macvtap entered promiscuous mode [ 385.126310][T12479] device veth1_macvtap entered promiscuous mode [ 385.199201][T12794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3174'. [ 385.214121][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.234635][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.245177][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.256858][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.265078][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.267862][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.269926][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.272165][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.275834][T12479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.137786][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 386.140134][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 386.142335][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 386.148398][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 386.161256][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.163425][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.165363][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.177636][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.179652][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.181615][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.201978][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.209878][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.225993][T12479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.250320][T12818] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 386.253417][T12818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 386.269242][T12818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 386.303688][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 386.306265][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 386.311494][T12479] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.313456][T12479] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.315391][T12479] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.317143][T12479] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.523096][ T1611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.532284][ T1611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.561450][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 386.593277][ T1611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.595744][ T1611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.608751][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 386.729025][T12846] __nla_validate_parse: 3 callbacks suppressed [ 386.729039][T12846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3185'. [ 386.817417][T12846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3185'. [ 387.784633][T12865] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3191'. [ 387.961460][T12873] xt_hashlimit: max too large, truncated to 1048576 [ 388.083099][ T4304] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 388.087222][ T4304] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 388.089788][ T4304] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 388.092071][ T4304] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 388.095312][ T4304] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 388.097158][ T4304] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 389.170507][T12885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3196'. [ 389.175931][T12887] device vxcan3 entered promiscuous mode [ 389.178518][T12885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3196'. [ 389.307188][T12902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3201'. [ 389.373336][T12902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3201'. [ 389.419701][T12879] chnl_net:caif_netlink_parms(): no params data found [ 389.511323][T12914] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3205'. [ 389.555754][T12879] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.557255][T12879] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.560056][T12879] device bridge_slave_0 entered promiscuous mode [ 389.566995][T12879] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.569197][T12879] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.571271][T12879] device bridge_slave_1 entered promiscuous mode [ 389.680694][T12879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.689207][T12879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.754261][T12879] team0: Port device team_slave_0 added [ 389.768948][T12879] team0: Port device team_slave_1 added [ 389.808971][T12932] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 389.813754][T12932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 389.817995][T12932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 389.830557][T12935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3214'. [ 389.864298][T12879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.865889][T12879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.879898][T12879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.882714][T12935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3214'. [ 389.890814][T12879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.892348][T12879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.915381][T12879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.988256][T12940] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 389.989901][T12940] IPv6: NLM_F_CREATE should be set when creating new route [ 390.149516][T12879] device hsr_slave_0 entered promiscuous mode [ 390.168022][T12879] device hsr_slave_1 entered promiscuous mode [ 390.177752][ T4300] Bluetooth: hci3: command 0x0409 tx timeout [ 390.207984][T12879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.209680][T12879] Cannot create hsr debugfs directory [ 390.215307][T12952] ------------[ cut here ]------------ [ 390.216773][T12952] WARNING: CPU: 1 PID: 12952 at net/sched/sch_taprio.c:1020 taprio_get_start_time+0x154/0x180 [ 390.219002][T12952] Modules linked in: [ 390.219789][T12952] CPU: 1 PID: 12952 Comm: syz.2.3222 Not tainted 6.1.119-syzkaller #0 [ 390.221527][T12952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 390.223719][T12952] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 390.225350][T12952] pc : taprio_get_start_time+0x154/0x180 [ 390.226492][T12952] lr : taprio_get_start_time+0x150/0x180 [ 390.227653][T12952] sp : ffff800021286aa0 [ 390.228462][T12952] x29: ffff800021286aa0 x28: ffff0000fdb36000 x27: dfff800000000000 [ 390.230100][T12952] x26: ffff0000d2c04300 x25: ffff0000fdb360f0 x24: dfff800000000000 [ 390.231768][T12952] x23: 0000000000000000 x22: 0000005ad995e140 x21: 0000000000000000 [ 390.233517][T12952] x20: 0000000000000000 x19: ffff800021286dc0 x18: ffff800021286760 [ 390.235223][T12952] x17: ffff800018b6a000 x16: ffff8000084f280c x15: ffff80001864af80 [ 390.236939][T12952] x14: 1ffff00002b500b2 x13: dfff800000000000 x12: 0000000000080000 [ 390.238886][T12952] x11: 00000000000056ce x10: ffff80002bb34000 x9 : ffff8000108d6bc4 [ 390.240678][T12952] x8 : 00000000000056cf x7 : ffff8000108d6b1c x6 : 0000000000000000 [ 390.242382][T12952] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 390.244076][T12952] x2 : 0000000000000002 x1 : 0000000000000000 x0 : 00000000fffffff2 [ 390.245751][T12952] Call trace: [ 390.246418][T12952] taprio_get_start_time+0x154/0x180 [ 390.247516][T12952] taprio_change+0x2d20/0x39d0 [ 390.248461][T12952] taprio_init+0x4a8/0x530 [ 390.249307][T12952] qdisc_create+0x70c/0xe6c [ 390.250271][T12952] tc_modify_qdisc+0xa14/0x186c [ 390.251341][T12952] rtnetlink_rcv_msg+0x72c/0xd94 [ 390.252449][T12952] netlink_rcv_skb+0x20c/0x3b8 [ 390.253479][T12952] rtnetlink_rcv+0x28/0x38 [ 390.254439][T12952] netlink_unicast+0x65c/0x898 [ 390.255701][T12952] netlink_sendmsg+0x834/0xb18 [ 390.256755][T12952] ____sys_sendmsg+0x55c/0x848 [ 390.257814][T12952] __sys_sendmsg+0x26c/0x33c [ 390.258798][T12952] __arm64_sys_sendmsg+0x80/0x94 [ 390.259973][T12952] invoke_syscall+0x98/0x2bc [ 390.260949][T12952] el0_svc_common+0x138/0x258 [ 390.261989][T12952] do_el0_svc+0x58/0x13c [ 390.262943][T12952] el0_svc+0x58/0x168 [ 390.263874][T12952] el0t_64_sync_handler+0x84/0xf0 [ 390.264963][T12952] el0t_64_sync+0x18c/0x190 [ 390.265883][T12952] irq event stamp: 373 [ 390.266801][T12952] hardirqs last enabled at (372): [] ktime_mono_to_any+0x14c/0x22c [ 390.268900][T12952] hardirqs last disabled at (373): [] el1_dbg+0x24/0x80 [ 390.270791][T12952] softirqs last enabled at (264): [] local_bh_enable+0x10/0x34 [ 390.272644][T12952] softirqs last disabled at (364): [] taprio_change+0x2b98/0x39d0 [ 390.274654][T12952] ---[ end trace 0000000000000000 ]--- [ 391.178302][T12879] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.281306][T12879] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.389974][T12879] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.470464][T12879] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.704022][T12879] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 391.759717][T12879] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 391.819614][T12879] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 391.860761][T12879] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 391.966006][T12879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.972896][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 391.975150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 391.982807][T12879] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.987941][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 391.990315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 391.992520][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.994232][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.996370][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 392.006872][ T280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 392.010481][ T280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 392.012827][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.014458][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.030568][ T280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 392.033325][ T280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 392.040049][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 392.045508][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 392.049053][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 392.053801][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 392.056356][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 392.062438][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 392.064738][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 392.074300][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 392.078314][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 392.081779][T12879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 392.177228][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 392.180256][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 392.188333][T12879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.200852][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 392.203408][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 392.223477][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 392.226072][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 392.229426][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 392.231754][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 392.237169][T12879] device veth0_vlan entered promiscuous mode [ 392.244047][T12879] device veth1_vlan entered promiscuous mode [ 392.257577][ T4300] Bluetooth: hci3: command 0x041b tx timeout [ 392.261170][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 392.263504][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 392.265988][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 392.276253][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 392.284438][T12879] device veth0_macvtap entered promiscuous mode [ 392.289089][T12879] device veth1_macvtap entered promiscuous mode [ 392.300840][T12879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.303134][T12879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.305216][T12879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.308977][T12879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.311526][T12879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.314160][T12879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.316441][T12879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.319257][T12879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.321524][T12879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.324168][T12879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.327951][T12879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.330384][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 392.332751][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 392.335004][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 392.338714][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 392.342842][T12879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.345171][T12879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.347185][T12879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.350052][T12879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.352221][T12879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.354441][T12879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.356496][T12879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.359177][T12879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.361375][T12879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.363722][T12879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.367049][T12879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.369787][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 392.372231][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 392.376726][T12879] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.378760][T12879] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.380597][T12879] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.382566][T12879] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.432243][ T4478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.437867][ T4478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.445146][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 392.448987][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.450949][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.455333][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 394.337718][ T4300] Bluetooth: hci3: command 0x040f tx timeout [ 396.417617][ T4300] Bluetooth: hci3: command 0x0419 tx timeout