last executing test programs: 24m1.763720328s ago: executing program 2 (id=284): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 24m1.421770537s ago: executing program 2 (id=286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000100005800900"], 0x48}}, 0x0) 24m0.068741542s ago: executing program 2 (id=287): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55f8, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 23m59.825863532s ago: executing program 2 (id=293): socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) listen(r4, 0x2) 23m58.565676588s ago: executing program 2 (id=296): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB]}, 0x78) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x7001, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) 23m58.409001157s ago: executing program 2 (id=301): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400"], 0x40}}, 0x0) 23m43.286721169s ago: executing program 32 (id=301): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400"], 0x40}}, 0x0) 9.51780917s ago: executing program 5 (id=6149): socket$packet(0x11, 0x2, 0x300) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x3}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 8.853553288s ago: executing program 5 (id=6154): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x24, 0x10, 0x803, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x40000, 0x40}, [@IFLA_VFINFO_LIST={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040c4}, 0x0) 8.027889115s ago: executing program 5 (id=6156): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1, 0x0, 0x10}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote}, 0x1c) sendmmsg$alg(r0, &(0x7f0000000080)=[{0x20000000, 0xff00, 0x0}], 0x1, 0x0) 7.895863825s ago: executing program 5 (id=6159): r0 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000540)={0x2, 0x2, 0x7, {0x9, 0x910, 0x20000004, 0x5}}) 7.768426074s ago: executing program 5 (id=6163): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='reno\x00', 0x5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c) 7.686441524s ago: executing program 5 (id=6164): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_usb_connect$hid(0x0, 0x49, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2d51, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x14, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) 3.932483752s ago: executing program 3 (id=6195): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000440)={&(0x7f0000000400)=[r1, 0x0], 0x2, 0x80000}) 3.801363822s ago: executing program 3 (id=6199): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfd66, &(0x7f0000000400)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x6}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x3, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x2}, {0x10, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000004) sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r4, 0x2, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc4c85513, &(0x7f0000000b00)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/14, @ANYRES64, @ANYBLOB="00000003230000000000b7080000b2000000bfa200000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a3200"], 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x100) getresuid(&(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380)) 3.28016823s ago: executing program 4 (id=6201): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000740)=@newsa={0xec, 0x10, 0x1, 0x70bd2c, 0x25dfdbfb, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x20, 0x87}, {@in6=@private1, 0x4d6, 0x2b}, @in=@remote, {0x5, 0x5, 0x80000001, 0x1, 0x1, 0x3, 0x8, 0x3}, {0xbfe, 0xe093, 0x5, 0x7}, {0x4, 0x3, 0x4}, 0x70bd2c, 0x34ff, 0x2, 0x0, 0xd}}, 0xec}, 0x1, 0x0, 0x0, 0x4004844}, 0x10) 3.22974112s ago: executing program 3 (id=6203): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x803, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x40000, 0x40}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040c4}, 0x0) 3.1417959s ago: executing program 4 (id=6204): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f00000000c0)=""/25, &(0x7f0000000240)=0x19) 3.11555807s ago: executing program 4 (id=6205): socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(0x3) socket$inet_dccp(0x2, 0x6, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 2.350881367s ago: executing program 3 (id=6206): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @remote, 0x9}]}, &(0x7f00000002c0)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, 0x0) 2.328402917s ago: executing program 0 (id=6207): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1, 0x0, 0x10}, 0x20) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote}, 0x1c) sendmmsg$alg(r0, &(0x7f0000000080)=[{0x20000000, 0xff00, 0x0}], 0x1, 0x0) 2.250004077s ago: executing program 1 (id=6208): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ec21ddd6ef98049f275ee5b0bba59bb748", 0x11) 2.212574737s ago: executing program 1 (id=6209): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) 2.207559887s ago: executing program 0 (id=6210): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x1, [0x8, 0x4, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x8, 0xffff, 0x0, 0x0, 0x1, 0x6, 0xa040, 0x16a, 0x0, 0x0, 0x0, 0x9a]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x98}}, 0x0) 2.081858066s ago: executing program 1 (id=6211): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYBLOB="1f002000000000001c001280160001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2], 0x4c}}, 0x0) 1.434442524s ago: executing program 3 (id=6212): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfd66, &(0x7f0000000400)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x6}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x3, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x2}, {0x10, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000004) sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r4, 0x2, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc4c85513, &(0x7f0000000b00)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/14, @ANYRES64, @ANYBLOB="00000003230000000000b7080000b2000000bfa200000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a3200"], 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x100) getresuid(&(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380)) 1.196857184s ago: executing program 0 (id=6213): bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x3, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x19f, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.196050954s ago: executing program 1 (id=6214): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f00000000c0)=""/25, &(0x7f0000000240)=0x19) 1.073840563s ago: executing program 4 (id=6215): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x803, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x40000, 0x40}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040c4}, 0x0) 1.073627553s ago: executing program 1 (id=6216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 1.070495653s ago: executing program 3 (id=6217): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x3}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 1.031993443s ago: executing program 0 (id=6218): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ec21ddd6ef98049f275ee5b0bba59bb748", 0x11) 993.052713ms ago: executing program 4 (id=6219): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote}, 0x1c) sendmmsg$alg(r0, &(0x7f0000000080)=[{0x20000000, 0xff00, 0x0}], 0x1, 0x0) 137.90585ms ago: executing program 0 (id=6220): syz_io_uring_setup(0x55fb, &(0x7f0000000180)={0x0, 0xdc9, 0xc6, 0x2, 0xe6}, 0x0, 0x0) 13.73753ms ago: executing program 4 (id=6221): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @remote, 0x9}]}, &(0x7f00000002c0)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, 0x0) 11.749069ms ago: executing program 1 (id=6222): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) 0s ago: executing program 0 (id=6223): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x1, [0x8, 0x4, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x8, 0xffff, 0x0, 0x0, 0x1, 0x6, 0xa040, 0x16a, 0x0, 0x0, 0x0, 0x9a]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x9c}}, 0x0) kernel console output (not intermixed with test programs): omes ready [ 926.409966][T14395] netlink: 'syz.5.3160': attribute type 27 has an invalid length. [ 926.424515][T14007] 8021q: adding VLAN 0 to HW filter on device team0 [ 926.443746][ T7693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 926.446158][ T7693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 926.448278][ T7693] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.449847][ T7693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 926.465275][ T7693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 926.467606][ T7693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 926.469933][ T7693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 926.472486][ T7693] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.474057][ T7693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.487590][ T7693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 926.490193][ T7693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 926.500828][ T7693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 926.514404][ T7693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 926.538552][ T7693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 926.547502][ T7693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 926.586102][ T7693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 926.593973][ T7693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 926.600667][ T7693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 926.602996][ T7693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 926.611546][ T7693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 926.615072][T14007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 928.874145][T14446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3171'. [ 928.879429][T14446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3171'. [ 929.255235][ T9093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 929.257247][ T9093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 929.282485][T14007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 929.295032][ T9093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 929.299493][ T9093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 929.316514][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 929.319058][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 929.325640][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 929.332604][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 929.345918][T14007] device veth0_vlan entered promiscuous mode [ 929.354699][T14454] netlink: 'syz.5.3173': attribute type 27 has an invalid length. [ 929.362586][T14007] device veth1_vlan entered promiscuous mode [ 929.387634][ T9093] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 929.390067][ T9093] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 929.404391][ T9093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 929.494140][ T9093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 929.500394][T14007] device veth0_macvtap entered promiscuous mode [ 929.506835][T14007] device veth1_macvtap entered promiscuous mode [ 929.523707][T14007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 929.530890][T14007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 929.536695][T14007] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.538733][T14007] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.540580][T14007] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.545869][T14007] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.556186][ T9093] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 929.558515][ T9093] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 929.560842][ T9093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 929.567459][ T9093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 929.569938][ T9093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 929.573018][ T9093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 929.576995][ T11] tipc: Left network mode [ 931.736783][ T7549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.738501][ T7549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.742700][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 931.804177][ T1827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.805920][ T1827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.809821][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 933.671873][T14498] netlink: 'syz.0.3184': attribute type 27 has an invalid length. [ 933.837907][T14506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3185'. [ 934.032074][ T4326] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 934.036242][ T4326] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 934.038600][ T4326] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 934.041570][ T4326] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 934.043629][ T4326] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 934.045502][ T4326] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 936.465603][ T4326] Bluetooth: hci1: command 0x0409 tx timeout [ 936.822132][T14555] netlink: 'syz.1.3199': attribute type 27 has an invalid length. [ 937.105185][ T7751] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.112475][T14573] bridge0: port 3(vlan2) entered blocking state [ 937.113836][T14573] bridge0: port 3(vlan2) entered disabled state [ 938.498132][ T4326] Bluetooth: hci1: command 0x041b tx timeout [ 938.652380][T14573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3205'. [ 939.604573][T14576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3205'. [ 939.622240][T14517] chnl_net:caif_netlink_parms(): no params data found [ 940.848603][ T4326] Bluetooth: hci1: command 0x040f tx timeout [ 940.979569][ T11] bond0: (slave wlan1): Releasing backup interface [ 941.324645][T14604] netlink: 'syz.0.3211': attribute type 27 has an invalid length. [ 941.525374][T14517] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.527062][T14517] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.529446][T14517] device bridge_slave_0 entered promiscuous mode [ 941.533546][T14517] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.535040][T14517] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.537215][T14517] device bridge_slave_1 entered promiscuous mode [ 942.929985][T10262] Bluetooth: hci1: command 0x0419 tx timeout [ 943.883579][T14517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.887749][T14517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 943.915695][ T11] device hsr_slave_0 left promiscuous mode [ 944.062419][ T11] device hsr_slave_1 left promiscuous mode [ 944.141554][ T11] device bridge_slave_1 left promiscuous mode [ 944.143492][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.194681][ T11] device bridge_slave_0 left promiscuous mode [ 944.196828][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.364259][ T11] bond1 (unregistering): Released all slaves [ 946.354429][ T11] team0 (unregistering): Port device team_slave_1 removed [ 946.534140][ T11] team0 (unregistering): Port device team_slave_0 removed [ 946.732074][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 946.942045][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 947.201662][T10262] Bluetooth: hci3: command 0x0406 tx timeout [ 949.324821][ T11] bond0 (unregistering): Released all slaves [ 949.557257][T14662] bridge0: port 3(vlan2) entered blocking state [ 949.558662][T14662] bridge0: port 3(vlan2) entered disabled state [ 949.571995][T14663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3225'. [ 949.574028][T14663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 949.575704][T14663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 949.577959][T14663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 949.579537][T14663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 949.647155][T14670] netlink: 'syz.0.3229': attribute type 27 has an invalid length. [ 949.661332][T14666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3225'. [ 949.672376][T14517] team0: Port device team_slave_0 added [ 949.676550][T14517] team0: Port device team_slave_1 added [ 949.714444][T14517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 949.715996][T14517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 949.737576][T14517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 949.742387][T14517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 949.744080][T14517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 949.749560][T14517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 949.959355][T14517] device hsr_slave_0 entered promiscuous mode [ 950.012060][T14517] device hsr_slave_1 entered promiscuous mode [ 950.101311][T14517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 950.102967][T14517] Cannot create hsr debugfs directory [ 951.979428][T14707] netlink: 'syz.3.3240': attribute type 27 has an invalid length. [ 952.478487][T14707] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.659118][T14707] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.661031][T14707] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.663151][T14707] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.665051][T14707] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.192067][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3243'. [ 954.194041][T14722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3243'. [ 957.022269][T14763] netlink: 'syz.3.3254': attribute type 27 has an invalid length. [ 957.096514][T14517] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 957.123069][T14517] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 957.163349][T14517] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 957.259665][T14765] bridge0: port 3(vlan2) entered blocking state [ 957.263473][T14765] bridge0: port 3(vlan2) entered disabled state [ 957.281051][T14517] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 957.313549][T14770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3255'. [ 957.368849][T14766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3255'. [ 957.630292][T14517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.726565][T14517] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.738852][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 957.741098][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 957.743295][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 957.746692][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 957.751424][ T8411] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.753045][ T8411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.736263][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 958.747912][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 958.761885][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 958.764263][ T8411] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.765793][ T8411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 958.767984][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 959.204288][T14804] netlink: 'syz.1.3264': attribute type 27 has an invalid length. [ 959.207294][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 959.283787][T14517] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 959.289254][T14517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 959.311583][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 959.319051][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 959.322044][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 959.324813][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 959.327220][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 959.329567][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 959.336735][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 959.339062][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 959.342117][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 959.344857][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 960.492588][T14517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 960.495043][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 960.503019][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 960.942888][ T11] bond0: (slave wlan1): Releasing backup interface [ 961.005778][T14831] bridge0: port 3(vlan2) entered blocking state [ 961.007474][T14831] bridge0: port 3(vlan2) entered disabled state [ 961.407498][T14835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3270'. [ 961.409639][T14839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3270'. [ 961.426643][ T7751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 961.429059][ T7751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 961.597102][ T11] device hsr_slave_0 left promiscuous mode [ 962.685396][ T11] device hsr_slave_1 left promiscuous mode [ 962.931802][ T11] device bridge_slave_1 left promiscuous mode [ 962.933198][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.972248][ T11] device bridge_slave_0 left promiscuous mode [ 962.973730][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.021966][ T11] bond2 (unregistering): Released all slaves [ 964.505520][ T11] bond1 (unregistering): Released all slaves [ 966.395427][ T11] team0 (unregistering): Port device team_slave_1 removed [ 966.582576][ T11] team0 (unregistering): Port device team_slave_0 removed [ 966.762085][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 966.992161][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 969.415136][ T11] bond0 (unregistering): Released all slaves [ 969.672099][T14856] netlink: 'syz.3.3276': attribute type 27 has an invalid length. [ 969.674026][T14517] device veth0_vlan entered promiscuous mode [ 969.675694][T14854] tipc: Started in network mode [ 969.676647][T14854] tipc: Node identity 4, cluster identity 4711 [ 969.677791][T14854] tipc: Node number set to 4 [ 969.793500][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 969.795927][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 969.798276][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 969.800162][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 969.894961][T14517] device veth1_vlan entered promiscuous mode [ 969.937858][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 969.940219][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 969.949887][T14517] device veth0_macvtap entered promiscuous mode [ 969.959984][T14517] device veth1_macvtap entered promiscuous mode [ 969.983184][T14517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 969.987837][T14517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 969.992043][T14517] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.994025][T14517] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.995925][T14517] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.997760][T14517] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.118680][ T7751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.121892][ T7751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.127995][ T7751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.130821][ T7751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.135995][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 970.138421][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 970.140646][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 970.144415][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 970.146795][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 970.157539][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 970.159904][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 970.163028][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 972.674547][T14913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3287'. [ 972.676428][T14910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3287'. [ 972.706970][T14917] netlink: 'syz.1.3289': attribute type 27 has an invalid length. [ 973.046307][T10262] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 973.050167][T10262] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 973.050301][ T9093] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.052548][T10262] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 973.078081][T10262] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 973.084642][T10262] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 973.089566][T10262] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 974.531112][T14926] chnl_net:caif_netlink_parms(): no params data found [ 974.669210][T14926] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.670911][T14926] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.678840][T14926] device bridge_slave_0 entered promiscuous mode [ 974.685038][T14926] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.688711][T14926] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.696019][T14926] device bridge_slave_1 entered promiscuous mode [ 974.737381][T14926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.749575][T14926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.758107][T14950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3297'. [ 974.774226][T14926] team0: Port device team_slave_0 added [ 974.778000][T14926] team0: Port device team_slave_1 added [ 974.793149][T14926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 974.794587][T14926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.799678][T14926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 974.803234][T14926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 974.804715][T14926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 975.067808][ T27] audit: type=1326 audit(1487.041:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.3.3296" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f53b68 code=0x0 [ 975.516058][T14926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 975.765261][T14959] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input9 [ 975.777004][T14926] device hsr_slave_0 entered promiscuous mode [ 975.811833][T14926] device hsr_slave_1 entered promiscuous mode [ 975.833532][T14926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 975.836301][T14926] Cannot create hsr debugfs directory [ 975.837660][T14957] netlink: 'syz.4.3300': attribute type 27 has an invalid length. [ 975.847503][T14962] bridge0: port 3(vlan2) entered blocking state [ 975.851295][T14962] bridge0: port 3(vlan2) entered disabled state [ 975.863245][T14963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3301'. [ 975.868895][T14970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3302'. [ 975.870748][T14964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3302'. [ 976.060125][T10262] Bluetooth: hci5: command 0x0409 tx timeout [ 978.188686][T10262] Bluetooth: hci5: command 0x041b tx timeout [ 979.541003][T15008] netlink: 'syz.4.3314': attribute type 27 has an invalid length. [ 980.174508][T15020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3318'. [ 980.231480][T15023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3318'. [ 980.241503][ T4326] Bluetooth: hci5: command 0x040f tx timeout [ 980.374584][T10262] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 980.379347][T10262] Bluetooth: hci3: Injecting HCI hardware error event [ 980.383382][ T4326] Bluetooth: hci3: hardware error 0x00 [ 981.949860][T15048] netlink: 'syz.1.3326': attribute type 27 has an invalid length. [ 982.233682][T14926] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 982.313590][T14926] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 982.321499][T10262] Bluetooth: hci5: command 0x0419 tx timeout [ 982.414456][T14926] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 982.457360][T14926] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 982.721371][ T4326] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 982.973406][T15075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3331'. [ 982.998257][T14926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.001537][T15072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3331'. [ 983.030690][T14926] 8021q: adding VLAN 0 to HW filter on device team0 [ 983.041825][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 983.043885][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 983.053658][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 983.055761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 983.058051][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.059494][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 983.066373][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 983.068410][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 983.078262][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 983.080121][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.081546][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 983.083679][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 983.101343][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 983.103703][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 983.117697][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 983.119937][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 983.122886][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 983.134563][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 983.136778][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 983.142074][T14926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 983.144703][T14926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 983.165668][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 983.168318][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 983.170455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 984.783899][T14926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 984.785897][ T9093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 984.787600][ T9093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 984.945680][T15093] netlink: 'syz.5.3336': attribute type 2 has an invalid length. [ 984.955345][T15098] netlink: 'syz.4.3338': attribute type 27 has an invalid length. [ 985.860965][T15114] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input10 [ 986.274544][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 986.275998][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 987.262562][ T7634] bond0: (slave wlan1): Releasing backup interface [ 987.884364][ T9093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 987.899106][ T9093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 987.963014][T14926] device veth0_vlan entered promiscuous mode [ 987.979808][T14926] device veth1_vlan entered promiscuous mode [ 988.045713][T15119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3342'. [ 988.175816][T15125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3342'. [ 988.193759][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 988.195935][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 988.205312][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 988.211960][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 988.214353][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 989.719849][T15153] xt_CT: No such helper "syz0" [ 989.808835][T14926] device veth0_macvtap entered promiscuous mode [ 989.845839][T14926] device veth1_macvtap entered promiscuous mode [ 989.875820][T14926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.878158][T14926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.885656][T14926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 989.945825][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 989.948021][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 989.950166][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 989.958771][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 989.960909][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 989.971897][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 989.974327][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 990.104409][ T7634] device hsr_slave_0 left promiscuous mode [ 990.211591][ T7634] device hsr_slave_1 left promiscuous mode [ 993.365711][ T7634] team0 (unregistering): Port device team_slave_1 removed [ 993.552385][ T7634] team0 (unregistering): Port device team_slave_0 removed [ 993.742321][ T7634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 993.962147][ T7634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.407860][ T7634] bond0 (unregistering): Released all slaves [ 996.497377][T14926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.499501][T14926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.504112][T14926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 996.505768][T15165] netlink: 'syz.4.3351': attribute type 27 has an invalid length. [ 996.558116][T15179] bridge0: port 3(vlan2) entered blocking state [ 996.559605][T15179] bridge0: port 3(vlan2) entered disabled state [ 996.575557][T15180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3355'. [ 996.577434][T15180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 996.578936][T15180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.584661][T15180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 996.586537][T15180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 996.886965][T15181] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3355'. [ 996.888918][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 996.891111][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 996.898340][T14926] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.900144][T14926] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.905224][T14926] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.907068][T14926] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.074084][ T1665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.075971][ T1665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.095701][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 997.110761][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.112915][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.117755][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 997.671503][T11082] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 997.895279][T11082] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 997.897162][T11082] usb 1-1: config 0 has no interface number 0 [ 997.900990][T11082] usb 1-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 997.904946][T11082] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.910198][T11082] usb 1-1: Product: syz [ 997.913454][T11082] usb 1-1: Manufacturer: syz [ 997.915689][T11082] usb 1-1: SerialNumber: syz [ 997.928602][T11082] usb 1-1: config 0 descriptor?? [ 997.937933][T11082] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 997.939939][T11082] dvb-usb: bulk message failed: -22 (4/0) [ 997.942936][T11082] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 997.945054][T11082] dvb-usb: bulk message failed: -22 (5/0) [ 997.946277][T11082] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 997.973803][T11082] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 997.988248][T11082] dvb-usb: Pinnacle 400e DVB-S USB2.0 error while loading driver (-19) [ 998.169960][T11082] usb 1-1: USB disconnect, device number 33 [ 998.592647][T15221] netlink: 'syz.1.3365': attribute type 27 has an invalid length. [ 999.690143][T15246] 9pnet_fd: Insufficient options for proto=fd [ 999.755965][T15238] bridge0: port 3(vlan2) entered blocking state [ 999.757445][T15238] bridge0: port 3(vlan2) entered disabled state [ 999.911329][T15243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3370'. [ 999.916923][T15243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 999.918558][T15243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 999.933356][T15243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 999.935119][T15243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1000.072349][T15244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3370'. [ 1000.393331][T15260] netlink: 'syz.0.3376': attribute type 27 has an invalid length. [ 1001.043161][T15260] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.044944][T15260] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.159502][T15260] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.161570][T15260] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.163483][T15260] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.165311][T15260] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.757740][T15299] bridge0: port 3(vlan2) entered blocking state [ 1003.761609][T15299] bridge0: port 3(vlan2) entered disabled state [ 1003.963300][T15308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3388'. [ 1003.992491][T15299] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3388'. [ 1005.415445][T15325] could not allocate digest TFM handle sha384-avx [ 1006.105801][T15346] netlink: 'syz.4.3402': attribute type 27 has an invalid length. [ 1006.234390][T15350] bridge0: port 3(vlan2) entered blocking state [ 1006.240053][T15350] bridge0: port 3(vlan2) entered disabled state [ 1006.338921][T15350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3404'. [ 1006.345766][T15350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3404'. [ 1009.483183][T15388] netlink: 'syz.4.3414': attribute type 27 has an invalid length. [ 1009.606693][T15390] bridge0: port 3(vlan2) entered blocking state [ 1009.608194][T15390] bridge0: port 3(vlan2) entered disabled state [ 1009.711437][T15396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3417'. [ 1011.363267][T15420] netlink: 'syz.3.3427': attribute type 27 has an invalid length. [ 1011.642685][T15426] bridge0: port 3(vlan2) entered blocking state [ 1011.648956][T15426] bridge0: port 3(vlan2) entered disabled state [ 1012.282003][T15434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3429'. [ 1012.635249][T15454] nfs: Unknown parameter 'a' [ 1013.535974][T15460] xt_nfacct: accounting object `syz1' does not exists [ 1013.575458][T15463] netlink: 'syz.3.3439': attribute type 27 has an invalid length. [ 1014.360399][ T4326] Bluetooth: hci2: command 0x0406 tx timeout [ 1016.481830][T15488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3446'. [ 1016.757414][T15499] netlink: 'syz.0.3452': attribute type 27 has an invalid length. [ 1017.845218][T15522] bridge0: port 3(vlan2) entered blocking state [ 1017.846684][T15522] bridge0: port 3(vlan2) entered disabled state [ 1017.857971][T15525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3460'. [ 1018.588854][T15525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3460'. [ 1018.597226][T15529] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3461'. [ 1018.947731][T10262] Bluetooth: hci4: command 0x0406 tx timeout [ 1019.197687][T15536] netlink: 'syz.5.3464': attribute type 27 has an invalid length. [ 1020.916588][T15536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.049869][T15536] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.052651][T15536] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.054454][T15536] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.056162][T15536] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.368214][T15586] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3477'. [ 1024.374049][T15586] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3477'. [ 1024.379298][T15585] bridge0: port 3(vlan2) entered blocking state [ 1024.380798][T15585] bridge0: port 3(vlan2) entered disabled state [ 1027.027177][T15615] netlink: 'syz.1.3486': attribute type 27 has an invalid length. [ 1028.598576][T15634] bridge0: port 3(vlan2) entered blocking state [ 1028.600007][T15634] bridge0: port 3(vlan2) entered disabled state [ 1028.643961][T15638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3494'. [ 1028.656343][T15638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3494'. [ 1028.923404][T15647] netlink: 'syz.1.3498': attribute type 27 has an invalid length. [ 1030.811888][ T27] audit: type=1326 audit(1542.781:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15663 comm="syz.5.3501" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff93353b68 code=0x0 [ 1031.730359][T15672] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3502'. [ 1033.127958][T15687] bridge0: port 3(vlan2) entered blocking state [ 1033.129429][T15687] bridge0: port 3(vlan2) entered disabled state [ 1033.458301][T15687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3507'. [ 1033.917912][T15689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3507'. [ 1034.013740][T15696] netlink: 'syz.0.3510': attribute type 27 has an invalid length. [ 1034.120389][ T27] audit: type=1326 audit(1546.091:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15693 comm="syz.4.3509" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96553b68 code=0x7fc00000 [ 1034.833046][ T27] audit: type=1326 audit(1546.791:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15693 comm="syz.4.3509" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=4 compat=0 ip=0xffff96553b68 code=0x7fc00000 [ 1037.461312][T15739] netlink: 'syz.5.3522': attribute type 27 has an invalid length. [ 1037.757054][T15743] bridge0: port 3(vlan2) entered blocking state [ 1037.765907][T15743] bridge0: port 3(vlan2) entered disabled state [ 1038.503492][T15743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3524'. [ 1038.513215][T15743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3524'. [ 1038.632817][T15748] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3525'. [ 1040.304322][T15768] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3532'. [ 1040.313876][T15769] netlink: 'syz.4.3533': attribute type 27 has an invalid length. [ 1040.521916][T15776] bridge0: port 3(vlan2) entered blocking state [ 1040.531370][T15776] bridge0: port 3(vlan2) entered disabled state [ 1040.566739][T15778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3536'. [ 1040.599719][T15777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3536'. [ 1043.655500][T15816] netlink: 'syz.5.3546': attribute type 27 has an invalid length. [ 1044.623414][T15829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3549'. [ 1044.655983][T15829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3549'. [ 1046.213187][T15845] virtio-fs: tag <(null)> not found [ 1046.545103][T15847] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3554'. [ 1046.551832][T15847] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.553976][T15847] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.555906][T15847] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.557756][T15847] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1047.135798][T15854] netlink: 'syz.0.3557': attribute type 27 has an invalid length. [ 1047.258720][T15858] bridge0: port 3(vlan2) entered blocking state [ 1047.261362][T15858] bridge0: port 3(vlan2) entered disabled state [ 1047.397354][T15858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3560'. [ 1047.447709][T15858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3560'. [ 1047.588166][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 1047.596877][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 1049.103645][T15890] netlink: 'syz.0.3570': attribute type 27 has an invalid length. [ 1049.875001][T15897] ceph: No mds server is up or the cluster is laggy [ 1049.901787][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1049.903134][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1051.147975][T15913] bridge0: port 3(vlan2) entered blocking state [ 1051.152250][T15913] bridge0: port 3(vlan2) entered disabled state [ 1051.242002][T15920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3575'. [ 1053.506387][T15913] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3575'. [ 1057.815563][T15964] bridge0: port 3(vlan2) entered blocking state [ 1057.816848][T15964] bridge0: port 3(vlan2) entered disabled state [ 1057.902810][T15972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3589'. [ 1057.997850][T15964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3589'. [ 1058.587263][T15987] 9pnet_fd: Insufficient options for proto=fd [ 1060.314556][T10262] Bluetooth: hci1: command 0x0406 tx timeout [ 1060.749696][T16018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3604'. [ 1060.762280][T16018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3604'. [ 1064.170774][T16070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3619'. [ 1064.202922][T16068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3619'. [ 1067.138436][T16107] bridge0: port 3(vlan2) entered blocking state [ 1067.147322][T16107] bridge0: port 3(vlan2) entered disabled state [ 1067.230161][T16107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3630'. [ 1067.249585][T16107] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3630'. [ 1067.894061][T16121] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3633'. [ 1067.903443][T16121] netlink: 'syz.5.3633': attribute type 39 has an invalid length. [ 1068.277415][ T4326] Bluetooth: hci2: unknown advertising packet type: 0x65 [ 1068.277498][ T4326] Bluetooth: hci2: Dropping invalid advertising data [ 1068.280456][ T4326] Bluetooth: hci2: Malformed LE Event: 0x02 [ 1069.950918][T16147] bridge0: port 3(vlan2) entered blocking state [ 1069.953425][T16147] bridge0: port 3(vlan2) entered disabled state [ 1070.074780][T16147] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3643'. [ 1070.093567][T16147] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3643'. [ 1072.045795][T16191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3657'. [ 1072.052209][T16191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3657'. [ 1072.906811][T16201] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3659'. [ 1076.331234][T16237] bridge0: port 3(vlan2) entered blocking state [ 1076.332866][T16237] bridge0: port 3(vlan2) entered disabled state [ 1076.427472][T16241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3670'. [ 1076.442996][T16241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3670'. [ 1079.075585][T16277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3681'. [ 1079.081064][T16277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3681'. [ 1081.996322][T16316] bridge0: port 3(vlan2) entered blocking state [ 1082.001909][T16316] bridge0: port 3(vlan2) entered disabled state [ 1082.096783][T16316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3694'. [ 1082.111089][T16316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3694'. [ 1084.275840][T16281] Set syz1 is full, maxelem 65536 reached [ 1085.970485][T16359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3707'. [ 1085.978467][T16359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3707'. [ 1088.697658][T16401] ebt_limit: overflow, try lower: 0/0 [ 1091.025569][T16419] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3721'. [ 1091.411161][T16410] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3721'. [ 1095.661998][T16469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3736'. [ 1095.696270][T16469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3736'. [ 1103.573203][T16525] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3750'. [ 1103.580835][T16525] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3750'. [ 1108.427928][T16554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3758'. [ 1110.392940][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.394569][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 1111.518669][T16592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3765'. [ 1113.210862][T16603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3770'. [ 1113.446462][T16609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3783'. [ 1119.170635][T16643] tipc: Enabling of bearer rejected, failed to enable media [ 1120.064680][T16649] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3782'. [ 1120.082302][T16649] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3782'. [ 1121.249890][T16663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3788'. [ 1121.264877][T16663] device bridge_slave_1 left promiscuous mode [ 1121.271515][T16663] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.281492][T10262] Bluetooth: hci5: command 0x0406 tx timeout [ 1121.334582][T16663] device bridge_slave_0 left promiscuous mode [ 1121.336212][T16663] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.646326][T16661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3787'. [ 1128.291996][T16708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3798'. [ 1128.348918][T16711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3798'. [ 1128.632059][T16719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3801'. [ 1131.269944][T16740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3806'. [ 1131.277810][T16740] device bridge_slave_1 left promiscuous mode [ 1131.279335][T16740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.333694][T16740] device bridge_slave_0 left promiscuous mode [ 1131.335238][T16740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.108877][T16764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3812'. [ 1133.118815][T16764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3812'. [ 1133.567025][T16772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3815'. [ 1135.465007][T16790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3824'. [ 1135.466942][T16790] device bridge_slave_1 left promiscuous mode [ 1135.468199][T16790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.733014][T16790] device bridge_slave_0 left promiscuous mode [ 1136.734847][T16790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.594628][T16802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3827'. [ 1137.596615][T16799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3827'. [ 1142.728680][T16882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3845'. [ 1142.745228][T16882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3845'. [ 1146.318348][T16929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3860'. [ 1146.366562][T16925] device netdevsim0 entered promiscuous mode [ 1146.370523][T16923] device netdevsim0 left promiscuous mode [ 1149.112139][T16970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3874'. [ 1149.208558][T16980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3876'. [ 1149.214478][T16980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3876'. [ 1149.223294][T16977] device netdevsim0 entered promiscuous mode [ 1149.225320][T16976] device netdevsim0 left promiscuous mode [ 1151.283244][T17005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3888'. [ 1152.261442][T17022] bridge0: port 3(vlan2) entered blocking state [ 1152.262858][T17022] bridge0: port 3(vlan2) entered disabled state [ 1152.359630][T17029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3890'. [ 1152.365016][T17029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3890'. [ 1152.444055][T17032] device netdevsim0 entered promiscuous mode [ 1152.448308][T17031] device netdevsim0 left promiscuous mode [ 1154.257225][T17060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3900'. [ 1155.429845][T17078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3907'. [ 1155.454794][T17082] device netdevsim0 entered promiscuous mode [ 1155.456605][T17081] device netdevsim0 left promiscuous mode [ 1155.492171][T17074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3907'. [ 1157.547975][T17106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3916'. [ 1157.791988][T17110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3918'. [ 1157.982865][T17117] device netdevsim0 entered promiscuous mode [ 1157.986484][T17115] device netdevsim0 left promiscuous mode [ 1159.177721][T17139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3927'. [ 1159.189035][T17126] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3923'. [ 1160.492396][T17126] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3923'. [ 1160.826588][T17150] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3930'. [ 1161.750121][T17165] device netdevsim0 entered promiscuous mode [ 1161.752105][T17163] device netdevsim0 left promiscuous mode [ 1162.896577][T17181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3938'. [ 1163.132749][T17193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3942'. [ 1163.165552][T17193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3942'. [ 1165.160471][T17208] device netdevsim0 entered promiscuous mode [ 1165.162479][T17207] device netdevsim0 left promiscuous mode [ 1165.276699][T17215] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3949'. [ 1165.378515][T17218] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3950'. [ 1167.441235][T17236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3953'. [ 1168.829193][T17236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3953'. [ 1169.788569][T17254] device netdevsim0 entered promiscuous mode [ 1169.790658][T17250] device netdevsim0 left promiscuous mode [ 1170.501939][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 1170.503547][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 1170.737103][T17269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3965'. [ 1170.789145][T17272] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3966'. [ 1171.380209][T17277] netlink: 'syz.1.3968': attribute type 10 has an invalid length. [ 1171.406599][T17277] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3968'. [ 1171.447406][T17277] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1171.930713][T17286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3969'. [ 1174.421782][T17317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3978'. [ 1174.528909][T17325] device netdevsim0 entered promiscuous mode [ 1174.530679][T17324] device netdevsim0 left promiscuous mode [ 1174.685270][T17330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3982'. [ 1175.807564][T17338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3984'. [ 1175.900624][T17338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3984'. [ 1177.067961][T17362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3991'. [ 1179.189750][T17390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3997'. [ 1179.191735][T17387] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3998'. [ 1179.241865][T17375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3997'. [ 1180.599094][T17407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4013'. [ 1182.470420][T17420] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4003'. [ 1183.715419][T17444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4011'. [ 1183.732685][T17444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4011'. [ 1184.688005][T17463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4018'. [ 1186.037935][T17476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4022'. [ 1187.081272][T17490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4027'. [ 1187.154758][T17490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4027'. [ 1187.518236][T17502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4032'. [ 1189.467043][T17530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4038'. [ 1189.749270][T17537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4042'. [ 1190.302356][T17537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4042'. [ 1193.707888][T17574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4052'. [ 1194.131838][T17590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4059'. [ 1194.139165][T17590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4059'. [ 1196.134386][T17616] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4066'. [ 1197.787289][T17642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4071'. [ 1197.798374][T17642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4071'. [ 1199.954343][T17664] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4079'. [ 1202.907971][T17694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4086'. [ 1202.910080][T17698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4086'. [ 1203.018819][T17711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4092'. [ 1205.806765][T17747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4102'. [ 1205.811575][T17746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4103'. [ 1205.884573][T17747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4102'. [ 1209.856195][T17804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4118'. [ 1209.872712][T17804] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4118'. [ 1212.854373][T17843] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4131'. [ 1215.265851][T17871] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4135'. [ 1215.601600][T17889] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4145'. [ 1219.518237][T17930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4154'. [ 1219.524902][T17930] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4154'. [ 1223.781391][T17961] could not allocate digest TFM handle sha384-avx [ 1224.277173][T17989] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4170'. [ 1224.290844][T17981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4168'. [ 1224.296960][T17981] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4168'. [ 1227.635457][T18033] device netdevsim0 entered promiscuous mode [ 1227.637241][T18029] device netdevsim0 left promiscuous mode [ 1227.722256][T18031] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4182'. [ 1227.726919][T18031] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4182'. [ 1231.554769][T18077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4194'. [ 1231.692122][T18082] device netdevsim0 entered promiscuous mode [ 1231.694230][T18081] device netdevsim0 left promiscuous mode [ 1231.842016][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 1231.843518][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 1233.071514][T18100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4201'. [ 1233.081071][T18100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4201'. [ 1233.676976][T18114] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4206'. [ 1235.334437][T18130] device netdevsim0 entered promiscuous mode [ 1235.336503][T18129] device netdevsim0 left promiscuous mode [ 1235.337986][T18132] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4210'. [ 1235.732605][T18151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4216'. [ 1235.738090][T18151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4216'. [ 1237.596270][T18179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4219'. [ 1239.208942][T18196] device netdevsim0 entered promiscuous mode [ 1239.341743][T18195] device netdevsim0 left promiscuous mode [ 1240.693625][T18215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4230'. [ 1240.698349][T18215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4230'. [ 1241.097241][T18235] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4233'. [ 1243.354650][T18257] device netdevsim0 entered promiscuous mode [ 1243.356587][T18256] device netdevsim0 left promiscuous mode [ 1244.782765][T18278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4245'. [ 1244.787359][T18278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4245'. [ 1244.829922][T18281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4246'. [ 1248.290782][T18311] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4251'. [ 1248.341335][T18315] device netdevsim0 entered promiscuous mode [ 1248.343242][T18310] device netdevsim0 left promiscuous mode [ 1250.966098][T18340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4259'. [ 1251.554115][T18354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4261'. [ 1251.650934][T18355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4261'. [ 1252.034529][T18363] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4267'. [ 1253.345337][T18381] device netdevsim0 entered promiscuous mode [ 1253.361760][T18380] device netdevsim0 left promiscuous mode [ 1255.655588][T18399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4273'. [ 1257.002162][T18411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4275'. [ 1257.254901][T18411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4275'. [ 1257.284967][T18420] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4279'. [ 1257.534828][T18424] device netdevsim0 entered promiscuous mode [ 1257.536643][T18423] device netdevsim0 left promiscuous mode [ 1262.586233][T18473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4289'. [ 1262.740575][T18479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4293'. [ 1262.882749][T18476] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4292'. [ 1262.943094][T18486] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4292'. [ 1264.417959][T18499] device netdevsim0 entered promiscuous mode [ 1264.542685][T18497] device netdevsim0 left promiscuous mode [ 1266.082591][T18519] tipc: Enabling of bearer rejected, failed to enable media [ 1266.143220][T18522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4306'. [ 1268.201279][T18537] device netdevsim0 entered promiscuous mode [ 1268.206409][T18535] device netdevsim0 left promiscuous mode [ 1268.229260][T18540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4311'. [ 1269.896914][T18557] netlink: 'syz.1.4313': attribute type 4 has an invalid length. [ 1270.400496][T18565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4318'. [ 1273.112776][T18590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4323'. [ 1273.138462][T18591] device netdevsim0 entered promiscuous mode [ 1273.149104][T18584] device netdevsim0 left promiscuous mode [ 1273.199885][T18596] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4326'. [ 1274.228051][T18590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4323'. [ 1274.341432][T18607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4329'. [ 1275.937810][T18631] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4338'. [ 1276.003296][T18633] device netdevsim0 entered promiscuous mode [ 1276.011998][T18632] device netdevsim0 left promiscuous mode [ 1276.136646][T18642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4343'. [ 1276.192713][T18644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4341'. [ 1276.209116][T18644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4341'. [ 1277.500696][T18669] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4352'. [ 1277.663912][T18681] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4355'. [ 1279.147496][T18700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4361'. [ 1280.297243][T18700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4361'. [ 1280.595211][T18721] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4365'. [ 1286.921677][T18766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4378'. [ 1286.926157][T18766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4378'. [ 1291.782622][T18836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4395'. [ 1291.790765][T18836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4395'. [ 1292.955406][T18861] netlink: 'syz.0.4408': attribute type 10 has an invalid length. [ 1292.957054][T18861] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4408'. [ 1292.958956][T18861] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1295.151623][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 1295.152981][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 1296.764168][T18900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4415'. [ 1296.769220][T18900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4415'. [ 1302.452961][T18958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4433'. [ 1302.472049][T18958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4433'. [ 1307.561881][T19017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4454'. [ 1307.592407][T19017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4454'. [ 1312.072343][T19087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4472'. [ 1312.607808][T19087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4472'. [ 1316.092009][T19111] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1316.094192][T19111] F2FS-fs (loop11): Unable to read 1th superblock [ 1316.095909][T19111] I/O error, dev loop11, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1316.097720][T19111] F2FS-fs (loop11): Unable to read 2th superblock [ 1316.807069][T19134] bridge0: port 3(vlan2) entered blocking state [ 1316.810470][T19134] bridge0: port 3(vlan2) entered disabled state [ 1317.286377][T19148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4492'. [ 1317.744325][T19134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4492'. [ 1323.150684][T19162] device geneve0 entered promiscuous mode [ 1325.082150][T19212] bridge0: port 3(vlan2) entered blocking state [ 1325.086715][T19212] bridge0: port 3(vlan2) entered disabled state [ 1325.198379][T19219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4513'. [ 1326.677057][T19212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4513'. [ 1329.157045][T19249] bridge0: port 3(vlan2) entered blocking state [ 1329.162222][T19249] bridge0: port 3(vlan2) entered disabled state [ 1329.256865][T19261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4535'. [ 1329.262507][T19261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4535'. [ 1333.397940][T19300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4540'. [ 1333.481830][T19300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4540'. [ 1338.904281][T19366] bridge0: port 3(vlan2) entered blocking state [ 1338.905776][T19366] bridge0: port 3(vlan2) entered disabled state [ 1339.028949][T19378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4560'. [ 1339.033727][T19366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4560'. [ 1342.848660][T19401] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4569'. [ 1342.853141][T19401] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1342.854920][T19401] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1342.856701][T19401] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1342.858479][T19401] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.755415][T19425] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4575'. [ 1344.758053][T19440] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4575'. [ 1346.422115][T19475] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4590'. [ 1346.426557][T19475] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1346.428446][T19475] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1346.430270][T19475] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1346.432030][T19475] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1351.292659][T19492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4594'. [ 1351.395417][T19495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4594'. [ 1354.301365][T19532] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1354.891708][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 1354.893068][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 1356.211434][T19546] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4606'. [ 1356.217566][T19546] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1356.219497][T19546] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1356.221644][T19546] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1356.223687][T19546] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1358.434253][T19564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4609'. [ 1358.552274][T19569] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4609'. [ 1367.631292][T19629] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4627'. [ 1367.712461][T19629] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1367.714234][T19629] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1367.715964][T19629] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1367.717735][T19629] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1368.443790][T19638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4633'. [ 1368.499633][T19642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4633'. [ 1371.133720][T19690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4649'. [ 1371.167454][T19690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4649'. [ 1376.762552][T19724] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4661'. [ 1376.974076][T19744] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4666'. [ 1376.980003][T19744] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4666'. [ 1378.030220][T19756] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4675'. [ 1378.375381][T19778] bridge0: port 3(vlan2) entered blocking state [ 1378.376836][T19778] bridge0: port 3(vlan2) entered disabled state [ 1379.289616][T19778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4684'. [ 1379.938959][T19804] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4691'. [ 1383.428823][T19849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4700'. [ 1383.443887][T19848] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4704'. [ 1385.432924][T19901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4722'. [ 1388.578455][T19930] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4733'. [ 1389.540929][T19961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4738'. [ 1390.662709][T19983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4760'. [ 1391.671971][T20006] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4753'. [ 1393.778889][T20036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4769'. [ 1394.713083][T20065] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1395.685941][T20091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4789'. [ 1397.916269][T20119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4806'. [ 1398.071495][T20140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4802'. [ 1399.256461][T20170] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4816'. [ 1400.343901][T20193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4818'. [ 1401.231732][T20209] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4828'. [ 1402.472524][T20243] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4840'. [ 1402.543805][T20249] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4839'. [ 1402.548600][T20249] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4839'. [ 1402.682858][T20256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4845'. [ 1404.440205][T20287] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4856'. [ 1404.522809][T20293] bridge0: port 3(vlan2) entered blocking state [ 1404.524318][T20293] bridge0: port 3(vlan2) entered disabled state [ 1404.610082][T20296] bpf_jit: unknown opcode 06 [ 1404.676565][T20296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4851'. [ 1405.233568][T20295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4857'. [ 1405.238342][T20295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4857'. [ 1406.331713][T20328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4869'. [ 1406.695662][T20352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4875'. [ 1406.700359][T20352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4875'. [ 1407.080891][T20358] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4874'. [ 1407.692400][T20364] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4882'. [ 1408.977822][T20386] bridge0: port 3(vlan2) entered blocking state [ 1408.981623][T20386] bridge0: port 3(vlan2) entered disabled state [ 1409.075940][T20386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4890'. [ 1409.703067][T20412] __nla_validate_parse: 2 callbacks suppressed [ 1409.703109][T20412] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4894'. [ 1411.217829][T20435] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4909'. [ 1411.269158][T20439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4907'. [ 1411.340273][T20439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4907'. [ 1414.181331][T20463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4917'. [ 1414.540332][T20471] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4922'. [ 1414.862686][T20481] bridge0: port 3(vlan2) entered blocking state [ 1414.870943][T20481] bridge0: port 3(vlan2) entered disabled state [ 1414.961861][T20486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4926'. [ 1414.967199][T20486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4926'. [ 1416.162440][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 1416.164158][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 1417.008090][T20510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4937'. [ 1419.098034][T20529] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4935'. [ 1419.155840][T20531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4940'. [ 1419.166097][T20531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4940'. [ 1424.211809][T20590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4960'. [ 1424.278789][T20599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4960'. [ 1425.947941][T20632] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4975'. [ 1425.955420][T20632] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4975'. [ 1426.278773][T20655] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4979'. [ 1426.293683][T20655] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4979'. [ 1426.424230][ T4326] Bluetooth: hci2: unknown advertising packet type: 0x65 [ 1426.424278][ T4326] Bluetooth: hci2: Malformed LE Event: 0x02 [ 1430.232033][T20699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4997'. [ 1430.236720][T20699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4997'. [ 1431.493712][T20734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5010'. [ 1432.454478][T20754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5014'. [ 1432.459146][T20754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5014'. [ 1432.677004][T20770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5024'. [ 1433.758462][T20790] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5033'. [ 1433.980162][T20806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5038'. [ 1434.052063][T20803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5030'. [ 1434.054550][T20788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5030'. [ 1435.289069][T20836] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5046'. [ 1435.477701][T20848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5053'. [ 1435.485894][T20848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5053'. [ 1436.015084][T20867] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5059'. [ 1436.823610][T20893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5066'. [ 1436.828761][T20893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5066'. [ 1436.872070][T20897] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5071'. [ 1438.045184][T20922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5086'. [ 1438.190415][T20922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5086'. [ 1438.252410][T20933] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5082'. [ 1439.832477][T20971] bridge0: port 3(vlan2) entered blocking state [ 1439.834003][T20971] bridge0: port 3(vlan2) entered disabled state [ 1439.943712][ T27] audit: type=1326 audit(1951.921:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20977 comm="syz.1.5100" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3153b68 code=0x0 [ 1441.316697][T21005] __nla_validate_parse: 3 callbacks suppressed [ 1441.316713][T21005] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5109'. [ 1442.081541][T21019] tipc: Started in network mode [ 1442.082708][T21019] tipc: Node identity ac14140f, cluster identity 4711 [ 1442.084314][T21019] tipc: New replicast peer: 255.255.255.255 [ 1442.086158][T21019] tipc: Enabled bearer , priority 10 [ 1442.087494][T21010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5112'. [ 1442.229737][T21039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5122'. [ 1443.293137][T11087] tipc: Node number set to 2886997007 [ 1443.348823][T21066] bridge0: port 3(vlan2) entered blocking state [ 1443.350202][T21066] bridge0: port 3(vlan2) entered disabled state [ 1443.436893][T21066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5131'. [ 1443.442762][T21066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5131'. [ 1443.486585][T21078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5134'. [ 1443.516135][T21081] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1444.561474][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1444.703872][T21104] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5146'. [ 1444.797665][T21110] bridge0: port 3(vlan2) entered blocking state [ 1444.799197][T21110] bridge0: port 3(vlan2) entered disabled state [ 1444.891977][T21118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5147'. [ 1444.899292][T21118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5147'. [ 1445.417339][T21137] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5158'. [ 1446.477718][T21161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5161'. [ 1446.490660][T21151] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5161'. [ 1446.692689][T21175] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5170'. [ 1448.005051][T21205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5178'. [ 1448.012216][T21205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5178'. [ 1448.095133][T21210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5182'. [ 1449.456028][T21242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5194'. [ 1449.481644][T21246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5193'. [ 1449.499745][T21246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5193'. [ 1449.697210][T21256] @: renamed from vlan0 [ 1450.997404][T21276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5206'. [ 1451.155331][T21288] bridge0: port 3(vlan0) entered blocking state [ 1451.162186][T21288] bridge0: port 3(vlan0) entered disabled state [ 1451.964453][ T27] audit: type=1326 audit(1963.941:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21317 comm="syz.3.5224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f53b68 code=0x7ffc0000 [ 1451.973624][ T27] audit: type=1326 audit(1963.951:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21317 comm="syz.3.5224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffff87f53b68 code=0x7ffc0000 [ 1451.981305][ T27] audit: type=1326 audit(1963.951:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21317 comm="syz.3.5224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f53b68 code=0x7ffc0000 [ 1452.000586][ T27] audit: type=1326 audit(1963.961:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21317 comm="syz.3.5224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff87f53b68 code=0x7ffc0000 [ 1452.013634][T21319] __nla_validate_parse: 2 callbacks suppressed [ 1452.013651][T21319] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5222'. [ 1452.821342][ T27] audit: type=1326 audit(1964.761:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21317 comm="syz.3.5224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f53b68 code=0x7ffc0000 [ 1452.825963][ T27] audit: type=1326 audit(1964.761:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21317 comm="syz.3.5224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f53b68 code=0x7ffc0000 [ 1452.839201][T21318] syz.3.5224 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1452.841594][ T27] audit: type=1326 audit(1964.811:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21317 comm="syz.3.5224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=103 compat=0 ip=0xffff87f53b68 code=0x7ffc0000 [ 1452.852917][ T27] audit: type=1326 audit(1964.821:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21317 comm="syz.3.5224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f53b68 code=0x7ffc0000 [ 1452.886090][ T27] audit: type=1326 audit(1964.821:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21317 comm="syz.3.5224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f53b68 code=0x7ffc0000 [ 1453.173019][T21343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5231'. [ 1453.179461][T21343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5231'. [ 1453.250054][T21346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5235'. [ 1454.357039][T21359] mmap: syz.4.5240 (21359) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1454.487788][T21365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5241'. [ 1454.505458][T21367] fuse: Bad value for 'fd' [ 1454.679445][T21381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5247'. [ 1454.684366][T21381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5247'. [ 1454.706418][T21383] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5248'. [ 1454.735984][T21385] tipc: Enabling of bearer rejected, failed to enable media [ 1455.990836][T21418] bridge0: port 3(vlan0) entered blocking state [ 1455.998055][T21418] bridge0: port 3(vlan0) entered disabled state [ 1456.029112][T21421] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5264'. [ 1456.127968][T21418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5260'. [ 1457.396080][T21452] __nla_validate_parse: 2 callbacks suppressed [ 1457.396095][T21452] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5276'. [ 1457.686605][T21467] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5283'. [ 1457.692140][T21467] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5283'. [ 1458.535144][T21485] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1458.566670][T21487] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5289'. [ 1458.604915][T21489] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5288'. [ 1459.268227][T21510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5297'. [ 1459.273775][T21510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5297'. [ 1459.699241][T21523] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5303'. [ 1460.793709][T21537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5310'. [ 1460.798505][T21537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5310'. [ 1462.374086][T21599] netlink: 'syz.0.5326': attribute type 33 has an invalid length. [ 1463.674418][T21624] bridge0: port 3(vlan0) entered blocking state [ 1463.678655][T21624] bridge0: port 3(vlan0) entered disabled state [ 1463.729996][T21633] netlink: 'syz.4.5341': attribute type 33 has an invalid length. [ 1463.735266][T21631] __nla_validate_parse: 5 callbacks suppressed [ 1463.735280][T21631] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5339'. [ 1463.784809][T21624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5337'. [ 1463.805604][T21624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5337'. [ 1464.986486][T21665] netlink: 'syz.3.5354': attribute type 33 has an invalid length. [ 1465.200081][T21674] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5356'. [ 1465.256864][T21676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5355'. [ 1465.262668][T21676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5355'. [ 1465.716124][T21692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5362'. [ 1465.741698][T21694] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5363'. [ 1466.548991][T21703] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5367'. [ 1466.627659][T21710] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1466.630194][T21710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5369'. [ 1469.557940][T21807] __nla_validate_parse: 8 callbacks suppressed [ 1469.557957][T21807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5407'. [ 1469.574658][T21807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5407'. [ 1469.622015][T21815] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5410'. [ 1469.752368][T21823] tipc: Enabling of bearer rejected, failed to enable media [ 1470.883728][T21846] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5421'. [ 1470.924770][T21838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5420'. [ 1470.929292][T21838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5420'. [ 1470.935436][T21848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5422'. [ 1472.130289][T21876] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5434'. [ 1472.268484][T21887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5436'. [ 1472.274119][T21887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5436'. [ 1475.657336][T21968] __nla_validate_parse: 5 callbacks suppressed [ 1475.657351][T21968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5468'. [ 1475.860127][T21981] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5473'. [ 1475.872444][T21975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5470'. [ 1476.637534][T21977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5470'. [ 1476.937287][T22014] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5486'. [ 1476.948739][T22010] netlink: 'syz.4.5484': attribute type 4 has an invalid length. [ 1477.016893][T22018] bridge0: port 3(vlan0) entered blocking state [ 1477.018555][T22018] bridge0: port 3(vlan0) entered disabled state [ 1477.171606][T22021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5488'. [ 1477.177550][T22021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5488'. [ 1477.613118][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 1477.614894][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 1478.379439][T22059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5503'. [ 1478.392810][T22059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5503'. [ 1479.694607][T22096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5520'. [ 1480.965452][T22136] __nla_validate_parse: 1 callbacks suppressed [ 1480.965467][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5531'. [ 1480.971121][T22136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5531'. [ 1481.028399][T22139] veth1: mtu greater than device maximum [ 1482.427889][T22167] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5546'. [ 1484.101261][T22167] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5546'. [ 1485.585099][T22233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5569'. [ 1485.595769][T22233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5569'. [ 1487.501872][T22267] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5582'. [ 1487.514589][T22267] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5582'. [ 1489.311485][T22322] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5595'. [ 1489.333181][T22322] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5595'. [ 1491.719704][T22367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5613'. [ 1491.735534][T22367] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5613'. [ 1493.269745][T22413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5627'. [ 1493.415673][T22417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5627'. [ 1495.471646][T22462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5643'. [ 1495.482042][T22462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5643'. [ 1497.349139][T22516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5662'. [ 1497.354919][T22516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5662'. [ 1499.223614][T22579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5682'. [ 1499.232129][T22579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5682'. [ 1499.319552][T22584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5686'. [ 1500.848049][T22614] bridge0: port 3(vlan0) entered blocking state [ 1500.858264][T22614] bridge0: port 3(vlan0) entered disabled state [ 1500.955002][T22614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5697'. [ 1500.965312][T22614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5697'. [ 1501.159868][T22630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5702'. [ 1502.514071][T22651] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5710'. [ 1502.527223][T22651] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5710'. [ 1504.347930][T22707] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5727'. [ 1504.549193][T22721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5731'. [ 1506.092516][T22759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5744'. [ 1507.303281][T22791] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5757'. [ 1507.796996][T22816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5765'. [ 1507.938665][T22822] netlink: 'syz.4.5767': attribute type 33 has an invalid length. [ 1507.975627][T22821] bridge0: port 3(vlan0) entered blocking state [ 1507.977067][T22821] bridge0: port 3(vlan0) entered disabled state [ 1508.072317][T22821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5778'. [ 1508.099242][T22821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5778'. [ 1508.482037][T22854] netlink: 'syz.0.5782': attribute type 33 has an invalid length. [ 1508.596918][T22862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5783'. [ 1508.618544][T22861] netlink: 'syz.4.5794': attribute type 33 has an invalid length. [ 1509.204292][T22887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5786'. [ 1509.230004][T22874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5786'. [ 1509.768286][T22928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5803'. [ 1509.850161][T22936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5807'. [ 1509.880963][T22936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5807'. [ 1510.001426][T22944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5812'. [ 1510.388999][T22976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5824'. [ 1510.396125][T22976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5824'. [ 1511.652191][T23005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5839'. [ 1511.659096][T23022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5841'. [ 1511.661154][T23014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5841'. [ 1512.213270][T23053] bridge0: port 3(vlan0) entered blocking state [ 1512.220130][T23053] bridge0: port 3(vlan0) entered disabled state [ 1512.281920][T23058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5858'. [ 1514.852239][T10262] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1514.856058][T10262] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1514.859863][T10262] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1514.869999][T10262] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1514.872424][T10262] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1514.881472][T10262] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1515.057390][ T4612] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1515.156759][T23220] __nla_validate_parse: 13 callbacks suppressed [ 1515.156790][T23220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5920'. [ 1515.245342][ T4612] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1515.263092][T23221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5911'. [ 1515.275561][T23226] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5914'. [ 1515.290488][T23216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5911'. [ 1515.312983][T23201] chnl_net:caif_netlink_parms(): no params data found [ 1515.428583][ T4612] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1515.563440][ T4612] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1515.608888][T23201] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.610634][T23201] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.623550][T23201] device bridge_slave_0 entered promiscuous mode [ 1515.636449][T23201] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.638228][T23201] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.640934][T23201] device bridge_slave_1 entered promiscuous mode [ 1515.664311][T23201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1515.669218][T23201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1515.715966][T23201] team0: Port device team_slave_0 added [ 1515.722566][T23201] team0: Port device team_slave_1 added [ 1515.756377][T23201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1515.758443][T23201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1515.769540][T23201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1515.786616][T23201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1515.788378][T23201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1515.804797][T23201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1515.920757][ T4612] tipc: Left network mode [ 1515.964118][T23201] device hsr_slave_0 entered promiscuous mode [ 1515.985222][T23201] device hsr_slave_1 entered promiscuous mode [ 1516.164169][T23260] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5926'. [ 1516.451125][T23273] bridge0: port 3(vlan0) entered blocking state [ 1516.453499][T23273] bridge0: port 3(vlan0) entered disabled state [ 1516.644055][T23279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5928'. [ 1516.661418][T23273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5928'. [ 1516.961607][ T4326] Bluetooth: hci0: command 0x0409 tx timeout [ 1516.988272][T23295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5934'. [ 1517.207471][T23299] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5936'. [ 1518.194195][T23201] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1518.245758][T23337] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5943'. [ 1518.324030][ T4612] device hsr_slave_0 left promiscuous mode [ 1518.361790][ T4612] device hsr_slave_1 left promiscuous mode [ 1519.041386][ T4326] Bluetooth: hci0: command 0x041b tx timeout [ 1520.768462][ T4612] team0 (unregistering): Port device team_slave_1 removed [ 1520.964784][ T4612] team0 (unregistering): Port device team_slave_0 removed [ 1521.121340][ T4326] Bluetooth: hci0: command 0x040f tx timeout [ 1521.162465][ T4612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1521.402575][ T4612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1523.201331][T10262] Bluetooth: hci0: command 0x0419 tx timeout [ 1524.184532][ T4612] bond0 (unregistering): Released all slaves [ 1524.295062][T23201] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1525.246331][T23358] __nla_validate_parse: 1 callbacks suppressed [ 1525.246349][T23358] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5949'. [ 1525.249882][T23363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5951'. [ 1525.263508][T23201] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1525.318941][T23201] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1525.476292][T23380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5957'. [ 1525.493186][T23380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5957'. [ 1525.521054][T23201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1525.558406][ T1827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1525.560954][ T1827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1525.572702][T23201] 8021q: adding VLAN 0 to HW filter on device team0 [ 1525.601096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1525.610431][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1525.614752][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.616486][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1525.621968][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1525.630304][ T1827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1525.635807][ T1827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1525.638308][ T1827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.639951][ T1827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1525.646428][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1525.655735][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1525.682515][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1525.687259][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1525.690736][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1525.702274][ T1827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1525.705481][ T1827] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1525.710065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1525.717470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1525.727958][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1525.744260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1525.752521][T23201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1525.787409][T23403] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5963'. [ 1526.019726][T23411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5966'. [ 1526.095500][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1526.097628][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1526.119586][T23201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1526.140896][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1526.143912][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1526.181942][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1526.184537][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1526.187403][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1526.190427][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1526.200265][T23201] device veth0_vlan entered promiscuous mode [ 1526.216976][T23201] device veth1_vlan entered promiscuous mode [ 1526.273809][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1526.276360][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1526.286712][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1526.289451][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1526.298978][T23201] device veth0_macvtap entered promiscuous mode [ 1526.305920][T23201] device veth1_macvtap entered promiscuous mode [ 1526.351050][T23201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1526.354354][T23432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5970'. [ 1526.364124][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1526.366881][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1526.369565][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1526.376903][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1526.383433][T23201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1526.385324][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1526.388172][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1526.399134][T23432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5970'. [ 1526.405583][T23201] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.407567][T23201] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.409666][T23201] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.417463][T23201] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.524684][T23438] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5974'. [ 1526.538546][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1526.542320][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.550481][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1526.590612][ T8411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1526.592748][ T8411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.597506][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1526.908638][T23460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.928113][T23460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1527.087183][T10262] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1527.091298][T10262] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1527.094994][T10262] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1527.099437][T10262] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1527.102583][T10262] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1527.104733][T10262] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1527.458736][T23464] chnl_net:caif_netlink_parms(): no params data found [ 1527.573491][T23478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5986'. [ 1527.719483][ T4612] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1527.810149][ T4612] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1527.849684][T23464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.851591][T23464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.865256][T23464] device bridge_slave_0 entered promiscuous mode [ 1527.876602][T23464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.881668][T23464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.884241][T23464] device bridge_slave_1 entered promiscuous mode [ 1528.024795][ T4612] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1528.037755][T23464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1528.051746][T23464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1528.143463][ T4612] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1528.152826][T23464] team0: Port device team_slave_0 added [ 1528.156537][T23464] team0: Port device team_slave_1 added [ 1528.204971][T23464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1528.208775][T23464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1528.222703][T23464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1528.230106][T23464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1528.231938][T23464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1528.239795][T23464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1528.304314][T23464] device hsr_slave_0 entered promiscuous mode [ 1528.351760][T23464] device hsr_slave_1 entered promiscuous mode [ 1528.387725][T23517] xt_socket: unknown flags 0xd0 [ 1528.391603][T23464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1528.393231][T23464] Cannot create hsr debugfs directory [ 1529.201641][ T4326] Bluetooth: hci3: command 0x0409 tx timeout [ 1530.255659][T23565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1530.257863][T23565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1530.910166][T23574] __nla_validate_parse: 7 callbacks suppressed [ 1530.910202][T23574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6009'. [ 1530.918861][T23578] bridge0: port 3(vlan0) entered blocking state [ 1530.924836][T23578] bridge0: port 3(vlan0) entered disabled state [ 1530.933241][T23582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6013'. [ 1530.935653][T23579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6013'. [ 1530.938126][T23585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6015'. [ 1531.291511][ T4326] Bluetooth: hci3: command 0x041b tx timeout [ 1532.154171][T23464] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1532.200695][T23464] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1532.268449][T23464] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1533.329394][T23640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6029'. [ 1533.361402][ T4326] Bluetooth: hci3: command 0x040f tx timeout [ 1533.428575][T23464] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1533.463816][T23627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6028'. [ 1533.469645][T23630] bridge0: port 3(vlan2) entered blocking state [ 1533.472142][T23630] bridge0: port 3(vlan2) entered disabled state [ 1533.492767][T23636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6029'. [ 1533.494958][T23636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1533.496603][T23636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1533.504125][T23636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1533.505888][T23636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1533.593188][T23650] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6036'. [ 1533.682110][T23647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6033'. [ 1533.767477][T23659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6039'. [ 1534.403038][T10262] Bluetooth: hci0: command 0x0406 tx timeout [ 1534.940670][ T4612] device hsr_slave_0 left promiscuous mode [ 1535.002892][ T4612] device hsr_slave_1 left promiscuous mode [ 1535.098567][T23668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1535.442034][T10262] Bluetooth: hci3: command 0x0419 tx timeout [ 1537.227114][ T4612] team0 (unregistering): Port device team_slave_1 removed [ 1537.414375][ T4612] team0 (unregistering): Port device team_slave_0 removed [ 1537.622475][ T4612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1537.892396][ T4612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1539.052133][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 1539.053471][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 1540.373246][ T4612] bond0 (unregistering): Released all slaves [ 1540.489906][T23464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1540.501580][T23693] bridge0: port 3(vlan2) entered blocking state [ 1540.503049][T23693] bridge0: port 3(vlan2) entered disabled state [ 1540.519948][T23696] __nla_validate_parse: 1 callbacks suppressed [ 1540.519962][T23696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6052'. [ 1540.524067][T23694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6052'. [ 1540.526125][T23703] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6054'. [ 1540.545662][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1540.547920][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1540.574335][T23464] 8021q: adding VLAN 0 to HW filter on device team0 [ 1540.578733][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1540.581074][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1540.585190][ T7549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.586758][ T7549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1540.597263][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1540.606966][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1540.613086][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1540.620367][ T7549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1540.621994][ T7549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1540.648460][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1540.660927][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1540.682123][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1540.686178][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1540.690859][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1540.706052][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1540.713493][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1540.717627][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1540.729931][T23464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1540.732748][T23464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1540.864828][T23718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6057'. [ 1541.014095][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1541.284382][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1541.419382][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1541.485505][T23723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1541.491126][T23723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1541.575086][T23725] tipc: Started in network mode [ 1541.576253][T23725] tipc: Node identity 7f000001, cluster identity 4711 [ 1541.578303][T23725] tipc: Enabled bearer , priority 10 [ 1541.665007][T23733] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6064'. [ 1541.689778][T23733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1541.707926][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1541.709737][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1541.720251][T23464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1541.734781][T23733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1541.736661][T23733] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 1541.740162][T23733] bond1: (slave vcan1): Error -95 calling set_mac_address [ 1541.932780][T23742] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6066'. [ 1542.082118][ T7634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1542.084560][ T7634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1542.116815][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1542.120812][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1542.125444][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1542.133456][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1542.141087][T23464] device veth0_vlan entered promiscuous mode [ 1542.152174][T23464] device veth1_vlan entered promiscuous mode [ 1542.173298][T23757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6069'. [ 1542.209960][T23757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6069'. [ 1542.234035][ T1827] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1542.236171][ T1827] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1542.238383][ T1827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1542.243968][ T1827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1542.252744][T23464] device veth0_macvtap entered promiscuous mode [ 1542.269117][T23464] device veth1_macvtap entered promiscuous mode [ 1542.582413][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1542.595260][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1543.066115][T23464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1543.106342][T23464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1543.125995][T23464] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.137968][T23464] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.139788][T23464] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.148094][T23464] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.219053][T14883] tipc: Node number set to 2130706433 [ 1543.228891][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1543.234174][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1543.248033][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1543.257965][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1543.334607][T23777] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6078'. [ 1543.343605][T23773] tipc: Started in network mode [ 1543.344910][T23773] tipc: Node identity 7f000001, cluster identity 4711 [ 1543.347077][T23773] tipc: Enabled bearer , priority 10 [ 1543.377779][ T1827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1543.382454][ T1827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1543.389070][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1543.431560][ T1827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1543.433583][ T1827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1543.438549][ T1827] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1543.513171][T23785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6082'. [ 1544.462553][ T24] tipc: Node number set to 2130706433 [ 1545.362839][T23820] tipc: Started in network mode [ 1545.363912][T23820] tipc: Node identity 7f000001, cluster identity 4711 [ 1545.365921][T23820] tipc: Enabled bearer , priority 10 [ 1545.458995][T23836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1545.465432][T23836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1546.493120][ T24] tipc: Node number set to 2130706433 [ 1546.630273][T23850] bridge0: port 3(vlan2) entered blocking state [ 1546.634536][T23850] bridge0: port 3(vlan2) entered disabled state [ 1546.646208][T23852] __nla_validate_parse: 4 callbacks suppressed [ 1546.646244][T23852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6106'. [ 1546.649751][T23852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1546.652858][T23852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1546.655507][T23852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1546.657538][T23852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1546.736014][T23853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6107'. [ 1546.738101][T23858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6106'. [ 1546.876882][T23868] tipc: Started in network mode [ 1546.880386][T23868] tipc: Node identity 7f000001, cluster identity 4711 [ 1546.885129][T23868] tipc: Enabled bearer , priority 10 [ 1546.908535][T23877] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6114'. [ 1547.133521][T23880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6116'. [ 1547.135318][T23880] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6116'. [ 1548.069364][ T24] tipc: Node number set to 2130706433 [ 1548.933024][T23896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6122'. [ 1549.045021][T23910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6139'. [ 1549.183119][T23924] tipc: Enabling of bearer rejected, already enabled [ 1549.273386][T23931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6130'. [ 1549.279443][T23914] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6130'. [ 1552.244992][T24002] __nla_validate_parse: 3 callbacks suppressed [ 1552.245008][T24002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6160'. [ 1552.390548][T24008] bridge0: port 3(vlan0) entered blocking state [ 1552.392127][T24008] bridge0: port 3(vlan0) entered disabled state [ 1553.093687][T10262] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1553.096308][T24017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6162'. [ 1553.099139][T24012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6162'. [ 1553.101354][T10262] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1553.104467][T10262] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1553.107214][T10262] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1553.109392][T10262] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1553.111811][T10262] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1554.008780][ T4371] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1554.018663][T24044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6173'. [ 1554.149431][ T4371] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1554.294604][ T4371] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1555.114173][ T4371] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1555.121569][T10262] Bluetooth: hci2: command 0x0409 tx timeout [ 1555.125243][T24073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6179'. [ 1555.132077][T24077] bridge0: port 3(vlan0) entered blocking state [ 1555.134134][T24077] bridge0: port 3(vlan0) entered disabled state [ 1555.142951][T24078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6183'. [ 1555.145049][T24081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6183'. [ 1555.183131][T24091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6188'. [ 1555.230309][T24027] chnl_net:caif_netlink_parms(): no params data found [ 1556.100619][T24027] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.110413][T24027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.128638][T24027] device bridge_slave_0 entered promiscuous mode [ 1556.791896][T24027] bridge0: port 2(bridge_slave_1) entered blocking state [ 1556.793972][T24027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.796790][T24027] device bridge_slave_1 entered promiscuous mode [ 1556.799246][T24122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6198'. [ 1556.801877][T24136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6199'. [ 1556.911375][ T4371] tipc: Disabling bearer [ 1556.912669][ T4371] tipc: Left network mode [ 1556.929868][T24027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1556.944759][T24027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1557.201639][ T4326] Bluetooth: hci2: command 0x041b tx timeout [ 1557.722823][T24027] team0: Port device team_slave_0 added [ 1557.738986][T24027] team0: Port device team_slave_1 added [ 1557.840462][T24162] device ip6gretap0 entered promiscuous mode [ 1557.842208][T24162] device macsec1 entered promiscuous mode [ 1557.850929][T24162] device ip6gretap0 left promiscuous mode [ 1557.956724][T24027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1557.958284][T24027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1557.970092][T24027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1558.852130][T24027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1558.853907][T24027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1558.861819][T24027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1558.865523][T24180] __nla_validate_parse: 2 callbacks suppressed [ 1558.865537][T24180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6211'. [ 1558.948377][T24192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6212'. [ 1558.950704][T24189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6212'. [ 1559.093143][T24027] device hsr_slave_0 entered promiscuous mode [ 1559.121672][T24027] device hsr_slave_1 entered promiscuous mode [ 1559.152136][T24027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1559.156467][T24027] Cannot create hsr debugfs directory [ 1559.321655][T10262] Bluetooth: hci2: command 0x040f tx timeout [ 1560.176103][T24215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6217'. [ 1560.186443][T24223] ------------[ cut here ]------------ [ 1560.187894][T24223] WARNING: CPU: 1 PID: 24223 at net/sched/sch_taprio.c:1020 taprio_get_start_time+0x154/0x180 [ 1560.190082][T24223] Modules linked in: [ 1560.190917][T24223] CPU: 1 PID: 24223 Comm: syz.0.6223 Tainted: G W 6.1.121-syzkaller #0 [ 1560.192975][T24223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1560.195025][T24223] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 1560.196667][T24223] pc : taprio_get_start_time+0x154/0x180 [ 1560.197880][T24223] lr : taprio_get_start_time+0x150/0x180 [ 1560.199141][T24223] sp : ffff8000217b6aa0 [ 1560.200003][T24223] x29: ffff8000217b6aa0 x28: ffff0000f3c80000 x27: dfff800000000000 [ 1560.201911][T24223] x26: ffff0000f13da300 x25: ffff0000f3c800f0 x24: dfff800000000000 [ 1560.203634][T24223] x23: 0000000000000003 x22: 0000016b41a849b0 x21: 0000000000000000 [ 1560.205313][T24223] x20: 0000000000000000 x19: ffff8000217b6dc0 x18: ffff8000217b6760 [ 1560.207086][T24223] x17: ffff800018b7b000 x16: ffff8000084f417c x15: ffff80001865bf80 [ 1560.208841][T24223] x14: 1ffff00002b520b2 x13: dfff800000000000 x12: 0000000000080000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1560.210649][T24223] x11: 00000000000056fc x10: ffff80002ea1f000 x9 : ffff8000108deaa0 [ 1560.212585][T24223] x8 : 00000000000056fd x7 : ffff8000083feefc x6 : 0000000000000000 [ 1560.214452][T24223] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 1560.216234][T24223] x2 : 0000000000000002 x1 : 0000000000000000 x0 : 00000000fffffff2 [ 1560.217964][T24223] Call trace: [ 1560.218721][T24223] taprio_get_start_time+0x154/0x180 [ 1560.219977][T24223] taprio_change+0x2d20/0x39d0 [ 1560.221009][T24223] taprio_init+0x4a8/0x530 [ 1560.222091][T24223] qdisc_create+0x70c/0xe6c [ 1560.223052][T24223] tc_modify_qdisc+0xa14/0x186c [ 1560.224088][T24223] rtnetlink_rcv_msg+0x72c/0xd94 [ 1560.225186][T24223] netlink_rcv_skb+0x20c/0x3b8 [ 1560.226241][T24223] rtnetlink_rcv+0x28/0x38 [ 1560.227200][T24223] netlink_unicast+0x65c/0x898 [ 1560.228310][T24223] netlink_sendmsg+0x834/0xb18 [ 1560.229369][T24223] ____sys_sendmsg+0x55c/0x848 [ 1560.230504][T24223] __sys_sendmsg+0x26c/0x33c [ 1560.231517][T24223] __arm64_sys_sendmsg+0x80/0x94 [ 1560.232581][T24223] invoke_syscall+0x98/0x2bc [ 1560.233685][T24223] el0_svc_common+0x138/0x258 [ 1560.234762][T24223] do_el0_svc+0x58/0x13c [ 1560.235712][T24223] el0_svc+0x58/0x168 [ 1560.236590][T24223] el0t_64_sync_handler+0x84/0xf0 [ 1560.237655][T24223] el0t_64_sync+0x18c/0x190 [ 1560.238653][T24223] irq event stamp: 497 [ 1560.239612][T24223] hardirqs last enabled at (496): [] timekeeping_get_ns+0x124/0x3b8 [ 1560.241809][T24223] hardirqs last disabled at (497): [] el1_dbg+0x24/0x80 [ 1560.243590][T24223] softirqs last enabled at (408): [] handle_softirqs+0xb84/0xd58 [ 1560.245581][T24223] softirqs last disabled at (490): [] taprio_change+0x2b98/0x39d0 [ 1560.247642][T24223] ---[ end trace 0000000000000000 ]--- [ 1561.361469][ T4326] Bluetooth: hci2: command 0x0419 tx timeout [ 1562.618982][ T4371] device hsr_slave_0 left promiscuous mode [ 1562.672342][ T4371] device hsr_slave_1 left promiscuous mode [ 1563.516322][ T4371] bond1 (unregistering): Released all slaves [ 1565.827359][ T4371] team0 (unregistering): Port device team_slave_1 removed [ 1565.965268][ T4371] team0 (unregistering): Port device team_slave_0 removed [ 1566.173564][ T4371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1566.433457][ T4371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1568.894439][ T4371] bond0 (unregistering): Released all slaves