last executing test programs: 9.528216985s ago: executing program 2 (id=3487): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32], 0x1c}, 0x1, 0x3000000}, 0x0) 9.410404944s ago: executing program 2 (id=3488): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="63250c30124c3dd4db43084ef8012492b5ea6dbd6c9a3dbd58627c6c4124db02e62c1800710014ae12954b1d2e20d6d38e", 0x31}, {&(0x7f00000001c0)="f55c33346486061801b0727936fb8fe7c28975b92dc5d23f73712ea0f8441592e224e2d8987a46e5f6dbe9b61179684a03ecbe", 0x33}, {&(0x7f0000000540)="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", 0x325}], 0x3, 0x0, 0x0, 0x4}, 0x200000d0) 7.115007526s ago: executing program 2 (id=3502): socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 6.549392294s ago: executing program 4 (id=3501): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000500000000000000950000000000af8dfded13ce9dc46bd9e2412a7750383a62d20000000000e34c53a5ac433c00000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r3, 0x11, 0x0, 0x0, @void, @value=r2}, 0x20) 6.549067724s ago: executing program 1 (id=3503): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="63250c30124c3dd4db43084ef8012492b5ea6dbd6c9a3dbd58627c6c4124db02e62c1800710014ae12954b1d2e20d6d38e839b97f6250b4a11", 0x39}, {&(0x7f00000001c0)="f55c33346486061801b0727936fb8fe7c28975b92dc5d23f73712ea0f8441592e224e2d8987a46e5f6dbe9b61179684a03ecbe", 0x33}, {&(0x7f0000000540)="5400cf0a0f5cd50f67bb6e1e10b3b10975e9eefb9f7f6ac5b1dc3fc9b2844c8ecaebe9073f91c2e6f025a05ab8f5f35ae50cbc30f4bc589402523150e5e015cb67ef3f539648d5bd9918a830efa15b0eed4ae4d6a26d420b9aee06730fd18cb1fd3eb1c3a3e7f0fc9c4806ba27150f25ea65024cdcd2d6a9d2a10aa3daf691f9345ddc797248c9c23461e5e4bae6fe8758a63a2543db0c631cb9518359bad0f64b81afd1b87ee25d607f756f674ba16218797ffeefa2f352dd62265e3acfad99ba24d940b8b481a8c9f2dbf14f8b8aa436bded2f075e4a61972c586c57b7b8e4a4e2046c0a45224ddf49b6a0a314e4d4956d4380ff62df22d693da7fc13e443ef9b74a1744023ee93b73c8d1fea1631f0d8872f5393ea14ce701a8e6b78bfe18494b9d34928a5d49b0a3e6e5730b39719e5f6d3501371d8dcae319ef9ca655c04c2d142334158bbfcd64c4bd24e4651c8754e07e1c69e0e18102293d8a94c39d10f08b2e7e505a6139fc0c49860d042d51ac37f8b89fdf5c7a67bf11a089b443fc5f7e6b093a309f183d05ef6e0f78565ae3c00140209e36d275c5cc9c39e0e8eeb6e8199a95ea970373a3a4fc93f3c7725ec0f8c740e4127f03e56d89f3c2eafcd6100c1d57c9b4c2abed0efcd3b0c58fa70d8f528e324e1da5efe5b3875bfd83c11804706a835791aa78954032fbc0339de429fec0308f0a4ce3f45dfc776040d7911e83e58ef7224793ef2ed4d3905c28d720ead285da813199d41b0f3ed70d0feedf35d8f48e80dd5ddb1b1b1104314afc0fadc985ec30732c5c9fa0d00cb112d19bd6f97b331fad07fbc734209ba54308fdd9458ef30ad05183a4762bba1d565ef0daf179479cf02139f13b9d3886feec2baee9160b3d78c5bfcdd39bcf183ab476897b86d0821ac2770794e49a50b890722861cf33f2498debcf83dadf469937574a16de384e7aa5b56ef747ce32d28c8b87dca1848509e7b3758845f106242263e0b73c805a85bd0c829918ad4ffe22eddef3019b56cc4ec8048dcde5236c2180d81b5066b00289aacbb20eb4a3bde65bdf7ccea011e22ed14f11284641e26f9da8e11d900f80bb4a3fff5e8fdac0d680c176376b5949a6cebedc6d8eb5366890d4", 0x325}], 0x3, 0x0, 0x0, 0x4}, 0x200000d0) 6.351989263s ago: executing program 4 (id=3504): r0 = socket(0x11, 0x3, 0x9) getsockopt$bt_BT_SECURITY(r0, 0x107, 0x11, 0x0, 0x20000002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r1, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r2, &(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x14) 6.108146743s ago: executing program 2 (id=3507): socket$qrtr(0x2a, 0x2, 0x0) epoll_create1(0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) 5.656189071s ago: executing program 3 (id=3512): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x101100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) 5.541449441s ago: executing program 1 (id=3513): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5.38701746s ago: executing program 1 (id=3514): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, 0x0, 0x0) 5.3865314s ago: executing program 4 (id=3515): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r6}, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000002c0), 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtfilter={0x1ac, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x7}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x170, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x7, 0x6, 0x6, 0x9, 0x401, 0x1000, 0x8a0, 0xd7, [{0x9, 0x9, 0x1, 0x3}, {0x2, 0x4, 0x7e, 0x5}, {0x100006, 0x9, 0xfffffffd, 0x4}, {0x1, 0x0, 0x91a1, 0x7d}, {0x2, 0xc2, 0x0, 0x3}, {0x6, 0xa4, 0x7, 0x7}]}}, @TCA_U32_ACT={0xf8, 0x7, [@m_skbmod={0x78, 0x1, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x4, 0x0, 0x6}, 0x8}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="76872445d71d"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x7c, 0xf, 0x0, 0x0, {{0xb}, {0x4}, {0x4d, 0x6, "fcaf0c36325dbdbc8eff568868015795354b848eb1cf7141a4d323707e322f5b56ffc4fd3025a1b79e23fa099a74d7c80e3245ee3f0d64c078138e05cb4c37e7a6b2bd87eacd8de05b"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xd8, 0x80}}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x800) 5.115966559s ago: executing program 1 (id=3516): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000340)=""/157, 0x9d}], 0x1}}], 0x1, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x14f) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000080), 0x4) 4.918275798s ago: executing program 0 (id=3517): socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4.603757387s ago: executing program 1 (id=3518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtfilter={0x11c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xe8, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x7, 0x6, 0x6, 0x9, 0x401, 0x1000, 0x8a0, 0xd7, [{0x9, 0x9, 0x1, 0x3}, {0x2, 0x4, 0x7e, 0x5}, {0x100006, 0x9, 0xfffffffd, 0x4}, {0x1, 0x0, 0x91a1, 0x7d}, {0x2, 0xc2, 0x0, 0x3}, {0x6, 0xa4, 0x7, 0x7}]}}, @TCA_U32_ACT={0x70, 0x7, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x4, 0x0, 0x6}, 0x8}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="76872445d71d"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xd8, 0x80}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 3.884140184s ago: executing program 0 (id=3519): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x38, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.835414964s ago: executing program 0 (id=3520): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b00010062726964676500004000028008000500000000000500290001000000060027"], 0x70}}, 0x0) 3.731150814s ago: executing program 0 (id=3521): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c00008006"], 0x21c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="1c002c"], 0x38}}, 0x0) 2.72912317s ago: executing program 3 (id=3522): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000a80)="ffc1", 0x2}], 0x1}, 0x24008081) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) 1.776059357s ago: executing program 3 (id=3523): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="63250c30124c3dd4db43084ef8012492b5ea6dbd6c9a3dbd58627c6c4124db02e62c1800710014ae12954b1d2e20d6d38e839b97f6250b4a11", 0x39}, {&(0x7f00000001c0)="f55c33346486061801b0727936fb8fe7c28975b92dc5d23f73712ea0f8441592e224e2d8987a46e5f6dbe9b61179684a03ecbe", 0x33}, {&(0x7f0000000540)="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", 0x325}], 0x3, 0x0, 0x0, 0x4}, 0x200000d0) 914.440344ms ago: executing program 3 (id=3524): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r2}, 0x38) 761.983343ms ago: executing program 3 (id=3525): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x20044020) 640.392083ms ago: executing program 3 (id=3526): r0 = socket(0x11, 0x3, 0x9) getsockopt$bt_BT_SECURITY(r0, 0x107, 0x11, 0x0, 0x20000002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r1, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r2, &(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x14) 544.975712ms ago: executing program 0 (id=3527): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, 0x0, 0x0) 452.340632ms ago: executing program 1 (id=3528): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000340)=""/157, 0x9d}], 0x1}}], 0x1, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x14f) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000080), 0x4) 403.617022ms ago: executing program 0 (id=3529): socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 402.812012ms ago: executing program 4 (id=3530): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x38, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 267.624881ms ago: executing program 4 (id=3531): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b00010062726964676500004000028008000500000000000500290001000000060027"], 0x70}}, 0x0) 219.357541ms ago: executing program 2 (id=3532): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) recvmmsg(r0, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000340)=""/157, 0x9d}], 0x1}}], 0x1, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x14f) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080), 0x4) 119.526161ms ago: executing program 4 (id=3533): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) unshare(0x20400) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x4}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000011c0)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x0, r3}, 0x18) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f00000005c0)=""/99, 0x63, 0x0, &(0x7f0000000640)=""/104, 0x68}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001200), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x800000}, 0x10, r5, r4, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_EDIT(r6, 0x0, 0x483, &(0x7f0000003140)={0x2f, @private=0xa010100, 0x4e20, 0x2, 'dh\x00', 0x1a, 0x7fffffff, 0x61}, 0x2c) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000700)={0x1, @default, @bpq0, 0x2, 'syz0\x00', @null, 0x1, 0x1, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @default, @default]}) 0s ago: executing program 2 (id=3534): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='devices.list\x00', 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0xf45) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) kernel console output (not intermixed with test programs): .020421][ T7] usb 2-1: SerialNumber: syz [ 158.050612][ T5855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.557'. [ 158.071483][ T7] usb 2-1: config 0 descriptor?? [ 158.101069][ T7] smsc95xx v2.0.0 [ 158.302574][ T7] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 158.334910][ T7] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 158.371567][ T7] usb 2-1: USB disconnect, device number 5 [ 159.030162][ T5875] loop0: detected capacity change from 0 to 2048 [ 159.086577][ T5875] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.950094][ T5885] loop0: detected capacity change from 0 to 2048 [ 160.114604][ T4297] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 160.182142][ T5897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.571'. [ 161.118681][ T5915] loop2: detected capacity change from 0 to 2048 [ 161.164004][ T5915] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.924686][ T14] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 161.964636][ T5925] binder: 5923:5925 ioctl c0306201 0 returned -14 [ 162.114588][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 162.121662][ T14] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 162.144672][ T14] usb 2-1: config 0 has no interface number 0 [ 162.161304][ T14] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 162.182004][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.200118][ T14] usb 2-1: Product: syz [ 162.209004][ T14] usb 2-1: Manufacturer: syz [ 162.219689][ T14] usb 2-1: SerialNumber: syz [ 162.233706][ T14] usb 2-1: config 0 descriptor?? [ 162.248523][ T14] smsc95xx v2.0.0 [ 162.401531][ T5931] loop0: detected capacity change from 0 to 2048 [ 162.449317][ T14] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 162.487862][ T14] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 162.511562][ T14] usb 2-1: USB disconnect, device number 6 [ 162.541268][ T4251] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 162.614196][ T5935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.586'. [ 162.840102][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.587'. [ 163.566018][ T5962] loop1: detected capacity change from 0 to 2048 [ 163.611789][ T5962] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.271521][ T5968] binder: 5967:5968 ioctl c0306201 0 returned -14 [ 164.502588][ T5974] loop3: detected capacity change from 0 to 2048 [ 164.944538][ T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 165.318207][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 165.328683][ T14] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 166.485449][ T5999] loop3: detected capacity change from 0 to 2048 [ 166.600234][ T5999] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.615548][ T14] usb 5-1: config 0 has no interface number 0 [ 166.626637][ T14] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 166.635850][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.643935][ T14] usb 5-1: Product: syz [ 166.648216][ T14] usb 5-1: Manufacturer: syz [ 166.652916][ T14] usb 5-1: SerialNumber: syz [ 166.659608][ T14] usb 5-1: config 0 descriptor?? [ 166.666901][ T14] smsc95xx v2.0.0 [ 166.868212][ T14] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 166.883610][ T14] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 166.926121][ T14] usb 5-1: USB disconnect, device number 2 [ 167.180240][ T6012] loop2: detected capacity change from 0 to 2048 [ 167.240976][ T4297] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 167.630958][ T6025] binder: 6024:6025 ioctl c0306201 0 returned -14 [ 168.246860][ T6042] loop0: detected capacity change from 0 to 2048 [ 168.292054][ T6042] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.872142][ T6043] loop2: detected capacity change from 0 to 2048 [ 169.344590][ T4306] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 169.535601][ T4306] usb 4-1: Using ep0 maxpacket: 32 [ 169.543975][ T4306] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 169.610512][ T4306] usb 4-1: config 0 has no interface number 0 [ 169.646444][ T4306] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 169.841446][ T4306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.852377][ T4306] usb 4-1: Product: syz [ 169.856932][ T4306] usb 4-1: Manufacturer: syz [ 169.861643][ T4306] usb 4-1: SerialNumber: syz [ 169.876062][ T4306] usb 4-1: config 0 descriptor?? [ 169.885643][ T4306] smsc95xx v2.0.0 [ 170.096694][ T4306] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 170.138348][ T4306] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 170.228559][ T4306] usb 4-1: USB disconnect, device number 4 [ 170.788889][ T6075] netlink: 40 bytes leftover after parsing attributes in process `syz.1.641'. [ 170.808244][ T6075] netlink: 40 bytes leftover after parsing attributes in process `syz.1.641'. [ 170.973727][ T6076] loop0: detected capacity change from 0 to 2048 [ 171.040183][ T6076] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.771589][ T6080] loop3: detected capacity change from 0 to 2048 [ 173.876780][ T6116] loop2: detected capacity change from 0 to 2048 [ 173.907055][ T6116] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.504248][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'. [ 174.802516][ T6129] fuse: Bad value for 'fd' [ 176.674312][ T6160] loop4: detected capacity change from 0 to 2048 [ 176.740200][ T6160] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.216520][ T6163] fuse: Bad value for 'fd' [ 177.486431][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.677'. [ 180.152475][ T6206] sched: RT throttling activated [ 180.852792][ T6211] loop4: detected capacity change from 0 to 2048 [ 181.213638][ T6211] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.344493][ T6214] fuse: Bad value for 'fd' [ 181.727084][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.693'. [ 182.674764][ T6254] loop3: detected capacity change from 0 to 2048 [ 182.687588][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 182.822061][ T6254] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.054823][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 183.070255][ T27] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 183.221900][ T27] usb 3-1: config 0 has no interface number 0 [ 183.277469][ T27] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 183.342335][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.397406][ T27] usb 3-1: Product: syz [ 183.422009][ T27] usb 3-1: Manufacturer: syz [ 183.431997][ T27] usb 3-1: SerialNumber: syz [ 183.459466][ T27] usb 3-1: config 0 descriptor?? [ 183.489120][ T27] smsc95xx v2.0.0 [ 183.492821][ T27] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 183.543322][ T27] smsc95xx: probe of 3-1:0.67 failed with error -22 [ 183.616435][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.711'. [ 183.695466][ T127] usb 3-1: USB disconnect, device number 3 [ 184.585193][ T6296] loop1: detected capacity change from 0 to 2048 [ 184.649866][ T6296] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.414499][ T127] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 186.604547][ T127] usb 2-1: Using ep0 maxpacket: 32 [ 186.756389][ T6346] loop0: detected capacity change from 0 to 2048 [ 186.925910][ T6346] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.425532][ T127] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 187.433673][ T127] usb 2-1: config 0 has no interface number 0 [ 187.457867][ T127] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 187.470315][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.478440][ T127] usb 2-1: Product: syz [ 187.482710][ T127] usb 2-1: Manufacturer: syz [ 187.487429][ T127] usb 2-1: SerialNumber: syz [ 187.494016][ T127] usb 2-1: config 0 descriptor?? [ 187.714795][ T127] smsc95xx v2.0.0 [ 187.718503][ T127] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 187.733302][ T127] smsc95xx: probe of 2-1:0.67 failed with error -22 [ 187.743880][ T127] usb 2-1: USB disconnect, device number 7 [ 189.125818][ T6389] loop0: detected capacity change from 0 to 2048 [ 189.817408][ T6389] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.133614][ T6403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.756'. [ 191.150271][ T6403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.756'. [ 191.161566][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.756'. [ 191.355486][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.760'. [ 191.987998][ T6428] loop1: detected capacity change from 0 to 2048 [ 192.585301][ T6420] netlink: 'syz.2.765': attribute type 4 has an invalid length. [ 192.651462][ T6428] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.263228][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'. [ 193.292512][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'. [ 193.323742][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.773'. [ 193.849454][ T6463] sctp: [Deprecated]: syz.0.782 (pid 6463) Use of int in max_burst socket option deprecated. [ 193.849454][ T6463] Use struct sctp_assoc_value instead [ 194.116837][ T6466] loop3: detected capacity change from 0 to 2048 [ 194.177745][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.212579][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.242430][ T6466] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.901144][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'. [ 195.192352][ T6489] netlink: 88 bytes leftover after parsing attributes in process `syz.4.789'. [ 195.211123][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.790'. [ 195.700276][ T14] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 195.895558][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 195.917382][ T14] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 196.106192][ T6516] loop2: detected capacity change from 0 to 2048 [ 196.144233][ T6516] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.234959][ T4260] Bluetooth: hci3: command 0x0406 tx timeout [ 196.244940][ T4260] Bluetooth: hci0: command 0x0406 tx timeout [ 196.252884][ T4260] Bluetooth: hci1: command 0x0406 tx timeout [ 196.263769][ T4260] Bluetooth: hci2: command 0x0406 tx timeout [ 196.731344][ T14] usb 2-1: config 0 has no interface number 0 [ 196.743658][ T14] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 196.765233][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.782911][ T14] usb 2-1: Product: syz [ 196.787386][ T14] usb 2-1: Manufacturer: syz [ 196.792034][ T14] usb 2-1: SerialNumber: syz [ 196.799208][ T14] usb 2-1: config 0 descriptor?? [ 196.816019][ T14] smsc95xx v2.0.0 [ 196.824519][ T14] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 196.871580][ T14] smsc95xx: probe of 2-1:0.67 failed with error -22 [ 196.916013][ T6522] __nla_validate_parse: 2 callbacks suppressed [ 196.916033][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.804'. [ 196.954634][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.804'. [ 196.963598][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.804'. [ 197.022747][ T14] usb 2-1: USB disconnect, device number 8 [ 197.047831][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.805'. [ 197.161587][ T6534] netlink: 88 bytes leftover after parsing attributes in process `syz.3.806'. [ 198.010489][ T6554] loop4: detected capacity change from 0 to 2048 [ 199.184633][ T6551] netlink: 'syz.0.813': attribute type 4 has an invalid length. [ 199.205712][ T6554] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.881083][ T6570] netlink: 88 bytes leftover after parsing attributes in process `syz.1.821'. [ 199.961646][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.822'. [ 199.973825][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.822'. [ 199.983251][ T6574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.822'. [ 200.282392][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 202.093596][ T6605] netlink: 'syz.4.832': attribute type 4 has an invalid length. [ 202.211845][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'. [ 202.252927][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'. [ 202.271277][ T6609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.835'. [ 202.435797][ T6613] netlink: 88 bytes leftover after parsing attributes in process `syz.4.836'. [ 202.599224][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.839'. [ 203.430019][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.851'. [ 203.453892][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.851'. [ 203.465215][ T6654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.851'. [ 203.601853][ T6662] netlink: 88 bytes leftover after parsing attributes in process `syz.1.854'. [ 203.917216][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'. [ 206.739058][ T6742] xt_hashlimit: size too large, truncated to 1048576 [ 207.204384][ T6718] loop3: detected capacity change from 0 to 2048 [ 207.237996][ T6718] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.282340][ T6786] __nla_validate_parse: 7 callbacks suppressed [ 210.282360][ T6786] netlink: 56 bytes leftover after parsing attributes in process `syz.1.897'. [ 211.444869][ T6813] loop3: detected capacity change from 0 to 2048 [ 212.010337][ T6813] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.195298][ T6824] team0: Device ip6tnl1 is of different type [ 213.371238][ T6828] netlink: 56 bytes leftover after parsing attributes in process `syz.0.910'. [ 215.225701][ T6869] netlink: 36 bytes leftover after parsing attributes in process `syz.0.924'. [ 216.266372][ T6901] netlink: 40 bytes leftover after parsing attributes in process `syz.0.937'. [ 216.312837][ T6901] netlink: 40 bytes leftover after parsing attributes in process `syz.0.937'. [ 217.345661][ T6915] netlink: 36 bytes leftover after parsing attributes in process `syz.0.941'. [ 217.836807][ T6937] netlink: 'syz.1.940': attribute type 10 has an invalid length. [ 217.967742][ T6937] netlink: 40 bytes leftover after parsing attributes in process `syz.1.940'. [ 218.052859][ T6937] bridge0: port 3(veth0_vlan) entered blocking state [ 218.064859][ T6937] bridge0: port 3(veth0_vlan) entered disabled state [ 218.211659][ T6946] netlink: 40 bytes leftover after parsing attributes in process `syz.3.951'. [ 218.237767][ T6937] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 218.350786][ T6946] netlink: 40 bytes leftover after parsing attributes in process `syz.3.951'. [ 218.630616][ T6952] netlink: 36 bytes leftover after parsing attributes in process `syz.3.954'. [ 219.230536][ T6971] netlink: 108 bytes leftover after parsing attributes in process `syz.3.961'. [ 219.654190][ T6982] netlink: 40 bytes leftover after parsing attributes in process `syz.4.965'. [ 219.692802][ T6982] netlink: 40 bytes leftover after parsing attributes in process `syz.4.965'. [ 220.697623][ T7007] tipc: Started in network mode [ 220.702759][ T7007] tipc: Node identity 1, cluster identity 8 [ 220.710974][ T7007] tipc: Node number set to 1 [ 221.424691][ T7023] loop1: detected capacity change from 0 to 2048 [ 221.551148][ T7023] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.474031][ T7042] __nla_validate_parse: 2 callbacks suppressed [ 222.474049][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.983'. [ 222.685719][ T7049] fuse: Bad value for 'group_id' [ 222.926141][ T7055] netlink: 20 bytes leftover after parsing attributes in process `syz.3.991'. [ 223.734213][ T7073] loop3: detected capacity change from 0 to 2048 [ 224.359902][ T7073] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.467834][ T7077] fuse: Bad value for 'group_id' [ 224.886285][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1002'. [ 224.921347][ T7094] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1004'. [ 225.680145][ T7116] fuse: Bad value for 'group_id' [ 226.015027][ T7119] loop0: detected capacity change from 0 to 2048 [ 226.094584][ T7119] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.856293][ T7126] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1017'. [ 226.959281][ T7134] tipc: Started in network mode [ 226.964201][ T7134] tipc: Node identity ., cluster identity 4711 [ 227.008212][ T7134] tipc: Enabling of bearer rejected, failed to enable media [ 227.250221][ T7145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1021'. [ 227.976687][ T7168] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1030'. [ 228.133453][ T7169] loop2: detected capacity change from 0 to 2048 [ 228.174948][ T7169] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.087035][ T7184] binder: 7182:7184 ioctl c0306201 0 returned -14 [ 231.076603][ T7211] loop2: detected capacity change from 0 to 2048 [ 231.445358][ T7211] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.904714][ T7222] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1048'. [ 233.137649][ T7231] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1049'. [ 233.153888][ T7229] tipc: Started in network mode [ 233.160781][ T7229] tipc: Node identity 1, cluster identity 8 [ 233.174494][ T7229] tipc: Node number set to 1 [ 233.206508][ T7231] device syzkaller0 entered promiscuous mode [ 233.865244][ T7246] loop3: detected capacity change from 0 to 2048 [ 233.941592][ T7246] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.608846][ T7248] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1057'. [ 236.788343][ T7278] loop1: detected capacity change from 0 to 2048 [ 237.206390][ T7278] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.951734][ T7296] fuse: Bad value for 'fd' [ 238.969259][ T7308] netlink: 'syz.1.1078': attribute type 10 has an invalid length. [ 239.472244][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1085'. [ 243.412925][ T7398] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1112'. [ 245.739434][ T7426] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1122'. [ 246.176343][ T7443] fuse: Unknown parameter 'grou00000000000000000000' [ 248.449744][ T7473] fuse: Unknown parameter 'group_i00000000000000000000' [ 249.835269][ T7504] fuse: Unknown parameter 'group_i00000000000000000000' [ 249.873925][ T7507] fuse: Unknown parameter 'group_i00000000000000000000' [ 250.111522][ T7519] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1156'. [ 250.645372][ T7536] fuse: Unknown parameter 'group_i00000000000000000000' [ 251.694704][ T7548] fuse: Unknown parameter 'group_i00000000000000000000' [ 252.000777][ T7553] loop2: detected capacity change from 0 to 2048 [ 252.103404][ T7553] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.737534][ T7558] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1173'. [ 252.900096][ T7563] fuse: Unknown parameter 'group_id00000000000000000000' [ 253.070794][ T7568] tipc: Started in network mode [ 253.146914][ T7568] tipc: Node identity 1, cluster identity 8 [ 253.165653][ T7568] tipc: Node number set to 1 [ 254.162889][ T7585] fuse: Unknown parameter 'group_id00000000000000000000' [ 254.574119][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1185'. [ 254.875430][ T7601] loop4: detected capacity change from 0 to 2048 [ 254.918034][ T7601] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 255.499797][ T7605] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1189'. [ 255.515998][ T7606] fuse: Unknown parameter 'group_id00000000000000000000' [ 255.598068][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.604491][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.766719][ T4263] Bluetooth: Frame is too long (len 12, expected len 4) [ 255.831995][ T7618] fuse: Unknown parameter 'group_id00000000000000000000' [ 256.905112][ T7630] binder: 7626:7630 ioctl c0306201 0 returned -14 [ 257.247931][ T7646] fuse: Unknown parameter 'group_id00000000000000000000' [ 257.252088][ T7644] fuse: Unknown parameter 'group_id00000000000000000000' [ 257.410252][ T7647] loop2: detected capacity change from 0 to 2048 [ 257.489297][ T7647] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.683751][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1203'. [ 258.985275][ T7673] fuse: Bad value for 'user_id' [ 259.180582][ T7675] tipc: Cannot configure node identity twice [ 259.519717][ T7679] fuse: Bad value for 'user_id' [ 259.753608][ T7681] loop1: detected capacity change from 0 to 2048 [ 259.794231][ T7681] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.487776][ T7687] binder: 7682:7687 ioctl c0306201 0 returned -14 [ 260.534218][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1223'. [ 260.909649][ T7698] fuse: Bad value for 'user_id' [ 261.092709][ T7707] fuse: Bad value for 'user_id' [ 261.101895][ T7708] device hsr0 entered promiscuous mode [ 261.653494][ T7718] loop2: detected capacity change from 0 to 2048 [ 261.766887][ T7718] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.562975][ T7732] fuse: Bad value for 'user_id' [ 262.904630][ T7741] binder: 7740:7741 ioctl c0306201 0 returned -14 [ 263.551028][ T7760] loop1: detected capacity change from 0 to 2048 [ 263.597619][ T7760] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.245059][ T7762] fuse: Bad value for 'fd' [ 265.423012][ T7794] binder_alloc: 7792: binder_alloc_buf, no vma [ 265.638781][ T7801] loop2: detected capacity change from 0 to 2048 [ 265.675412][ T7801] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.068485][ T7800] fuse: Bad value for 'fd' [ 266.773719][ T7815] netlink: zone id is out of range [ 266.793399][ T7815] netlink: zone id is out of range [ 266.832481][ T7815] netlink: zone id is out of range [ 266.853891][ T7815] netlink: zone id is out of range [ 266.879311][ T7815] netlink: zone id is out of range [ 266.924125][ T7815] netlink: zone id is out of range [ 266.954866][ T7815] netlink: zone id is out of range [ 266.970602][ T7815] netlink: zone id is out of range [ 267.040742][ T7815] netlink: zone id is out of range [ 267.056428][ T7815] netlink: zone id is out of range [ 267.951761][ T7840] loop0: detected capacity change from 0 to 2048 [ 268.094454][ T7838] fuse: Bad value for 'fd' [ 268.749655][ T7840] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.241669][ T7878] loop1: detected capacity change from 0 to 2048 [ 271.233846][ T7878] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 271.631221][ T7883] fuse: Bad value for 'fd' [ 271.959622][ T7890] tipc: Cannot configure node identity twice [ 272.500843][ T7907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1312'. [ 273.648411][ T7921] loop3: detected capacity change from 0 to 2048 [ 273.686589][ T7921] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 274.265819][ T7930] net_ratelimit: 2 callbacks suppressed [ 274.265837][ T7930] netlink: zone id is out of range [ 274.296126][ T7930] netlink: zone id is out of range [ 274.308134][ T7930] netlink: zone id is out of range [ 274.322872][ T7933] "syz.3.1321" (7933) uses obsolete ecb(arc4) skcipher [ 274.334463][ T7930] netlink: zone id is out of range [ 274.347618][ T7930] netlink: zone id is out of range [ 274.359652][ T7930] netlink: zone id is out of range [ 274.370599][ T7930] netlink: zone id is out of range [ 274.383121][ T7930] netlink: zone id is out of range [ 274.403588][ T7930] netlink: zone id is out of range [ 274.413686][ T7930] netlink: zone id is out of range [ 274.652331][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1326'. [ 276.332895][ T7966] loop2: detected capacity change from 0 to 2048 [ 276.433823][ T7966] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.146098][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1337'. [ 277.154562][ T7976] tipc: Started in network mode [ 277.174641][ T7976] tipc: Node identity 1, cluster identity 8 [ 277.192748][ T7976] tipc: Node number set to 1 [ 277.589093][ T7988] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1342'. [ 278.993992][ T8012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1352'. [ 280.535488][ T8031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1359'. [ 281.147944][ T8059] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1371'. [ 282.388421][ T8075] fuse: Invalid rootmode [ 282.496074][ T8078] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1378'. [ 283.035886][ T8090] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1384'. [ 283.483548][ T8101] fuse: Bad value for 'rootmode' [ 284.169492][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1391'. [ 284.566956][ T8123] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1398'. [ 284.660132][ T8127] fuse: Bad value for 'rootmode' [ 284.716115][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1402'. [ 285.015259][ T8135] fuse: Invalid rootmode [ 286.216969][ T8158] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1414'. [ 286.264151][ T8160] fuse: Bad value for 'rootmode' [ 286.615806][ T8175] fuse: Bad value for 'rootmode' [ 286.656457][ T8179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1420'. [ 287.936981][ T8200] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1427'. [ 288.396837][ T8215] fuse: Bad value for 'rootmode' [ 289.269157][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1436'. [ 290.702648][ T8242] loop4: detected capacity change from 0 to 2048 [ 291.146157][ T8242] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 291.416988][ T8249] fuse: Unknown parameter 'use00000000000000000000' [ 291.456515][ T8250] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1441'. [ 291.883625][ T8261] loop2: detected capacity change from 0 to 2048 [ 291.909805][ T8261] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.147112][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1444'. [ 292.783596][ T8270] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1446'. [ 294.109282][ T8292] fuse: Unknown parameter 'use00000000000000000000' [ 294.372810][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1459'. [ 294.433872][ T8302] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1460'. [ 294.562106][ T8304] loop2: detected capacity change from 0 to 2048 [ 294.612769][ T8304] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 295.336777][ T8309] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.1463'. [ 296.010540][ T8328] fuse: Unknown parameter 'user_i00000000000000000000' [ 296.313879][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1473'. [ 296.783503][ T8341] loop0: detected capacity change from 0 to 2048 [ 296.823048][ T8341] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 297.385436][ T8343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1477'. [ 297.646027][ T8350] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.1478'. [ 297.809740][ T8357] fuse: Unknown parameter 'user_i00000000000000000000' [ 297.996901][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1486'. [ 298.652306][ T8373] loop4: detected capacity change from 0 to 2048 [ 298.731101][ T8373] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 299.470232][ T8383] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1494'. [ 299.991513][ T8401] fuse: Unknown parameter 'user_i00000000000000000000' [ 300.181053][ T8405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1500'. [ 301.127932][ T8443] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1514'. [ 301.339990][ T8445] fuse: Unknown parameter 'user_id00000000000000000000' [ 301.430632][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1517'. [ 302.042454][ T8467] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1525'. [ 302.200374][ T8476] fuse: Unknown parameter 'user_id00000000000000000000' [ 302.603395][ T8485] loop0: detected capacity change from 0 to 2048 [ 302.772516][ T8485] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 303.500419][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1530'. [ 303.961700][ T8513] fuse: Unknown parameter 'user_id00000000000000000000' [ 304.511502][ T8526] loop1: detected capacity change from 0 to 2048 [ 304.567173][ T8526] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 305.526958][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1549'. [ 305.703867][ T8546] fuse: Unknown parameter 'user_id00000000000000000000' [ 306.245074][ T8568] loop0: detected capacity change from 0 to 2048 [ 306.334054][ T8568] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 307.563090][ T8593] fuse: Bad value for 'fd' [ 308.266199][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1569'. [ 308.844690][ T8617] loop1: detected capacity change from 0 to 2048 [ 308.875663][ T8617] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 311.880425][ T8639] fuse: Bad value for 'fd' [ 311.893299][ T8643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1583'. [ 312.956205][ T8660] loop0: detected capacity change from 0 to 2048 [ 314.387488][ T8660] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 315.410805][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1596'. [ 315.412748][ T8684] fuse: Bad value for 'fd' [ 315.741572][ T8693] batman_adv: batadv0: Adding interface: vlan0 [ 315.788681][ T8693] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.962638][ T8697] loop1: detected capacity change from 0 to 2048 [ 316.369765][ T8693] batman_adv: batadv0: Interface activated: vlan0 [ 316.505969][ T8697] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 317.050738][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.057525][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.850487][ T8719] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.1607'. [ 317.895567][ T8722] fuse: Unknown parameter '0x0000000000000004' [ 318.637969][ T8737] loop2: detected capacity change from 0 to 2048 [ 318.768432][ T8737] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 319.720111][ T8754] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.1621'. [ 320.528841][ T8760] netlink: 'syz.4.1618': attribute type 10 has an invalid length. [ 320.599037][ T8763] fuse: Unknown parameter '0x0000000000000004' [ 320.624456][ T8760] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1618'. [ 320.645253][ T8760] bridge0: port 3(veth0_vlan) entered blocking state [ 320.780127][ T8760] bridge0: port 3(veth0_vlan) entered disabled state [ 320.879853][ T8760] net_ratelimit: 2 callbacks suppressed [ 320.879875][ T8760] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 321.263311][ T8781] loop0: detected capacity change from 0 to 2048 [ 321.353221][ T8781] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.150418][ T8788] fuse: Unknown parameter 'fd0x0000000000000004' [ 322.178804][ T8790] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.1632'. [ 322.486104][ T8799] fuse: Unknown parameter '0x0000000000000004' [ 323.540705][ T8815] netlink: set zone limit has 8 unknown bytes [ 323.775375][ T8825] netlink: 'syz.1.1646': attribute type 72 has an invalid length. [ 323.942698][ T8826] loop3: detected capacity change from 0 to 2048 [ 324.062354][ T8826] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 324.702164][ T8832] fuse: Unknown parameter 'fd0x0000000000000004' [ 324.781830][ T8835] fuse: Unknown parameter '0x0000000000000004' [ 325.017579][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1654'. [ 325.189645][ T8846] batman_adv: batadv0: Adding interface: vlan0 [ 325.196551][ T8846] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.232396][ T8846] batman_adv: batadv0: Interface activated: vlan0 [ 325.990282][ T8852] netlink: set zone limit has 8 unknown bytes [ 326.153048][ T8856] netlink: 'syz.0.1658': attribute type 72 has an invalid length. [ 326.192695][ T8858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1660'. [ 326.740584][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1667'. [ 327.452417][ T8889] netlink: zone id is out of range [ 327.481095][ T8889] netlink: zone id is out of range [ 327.494793][ T8889] netlink: zone id is out of range [ 327.634690][ T8889] netlink: zone id is out of range [ 327.643578][ T8889] netlink: zone id is out of range [ 327.654505][ T8889] netlink: zone id is out of range [ 327.776816][ T8894] netlink: 'syz.1.1674': attribute type 72 has an invalid length. [ 327.855989][ T8896] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1675'. [ 328.137335][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1681'. [ 329.522952][ T8935] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1689'. [ 329.540505][ T8933] netlink: zone id is out of range [ 329.596316][ T8937] fuse: Unknown parameter '0x0000000000000004' [ 329.602663][ T8933] netlink: zone id is out of range [ 329.630459][ T8933] netlink: zone id is out of range [ 330.084562][ T8953] batman_adv: batadv0: Adding interface: vlan0 [ 330.098167][ T8953] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.204715][ T8953] batman_adv: batadv0: Interface activated: vlan0 [ 331.227531][ T8972] fuse: Unknown parameter 'fd0x0000000000000004' [ 331.296628][ T8973] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1703'. [ 331.884294][ T8996] batman_adv: batadv0: Adding interface: vlan0 [ 331.916237][ T8996] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.007683][ T8996] batman_adv: batadv0: Interface activated: vlan0 [ 333.221126][ T9021] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1721'. [ 334.848995][ T9059] netlink: 'syz.1.1730': attribute type 10 has an invalid length. [ 335.054581][ T9059] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1730'. [ 335.109004][ T9065] fuse: Unknown parameter 'fd0x0000000000000004' [ 335.148728][ T9059] bridge0: port 3(veth0_vlan) entered blocking state [ 335.199251][ T9059] bridge0: port 3(veth0_vlan) entered disabled state [ 335.278694][ T9059] net_ratelimit: 3 callbacks suppressed [ 335.278712][ T9059] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 337.701024][ T9131] netlink: zone id is out of range [ 337.715292][ T9131] netlink: zone id is out of range [ 337.731674][ T9131] netlink: zone id is out of range [ 337.747140][ T9131] netlink: zone id is out of range [ 337.771224][ T9131] netlink: set zone limit has 8 unknown bytes [ 339.348135][ T9166] netlink: zone id is out of range [ 339.354840][ T9166] netlink: zone id is out of range [ 339.359994][ T9166] netlink: zone id is out of range [ 339.394780][ T9166] netlink: zone id is out of range [ 340.833569][ T9201] net_ratelimit: 1 callbacks suppressed [ 340.833588][ T9201] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:0000:0000 with DS=0xb [ 340.844151][ T9200] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1790'. [ 340.919992][ T9200] netlink: 'syz.1.1790': attribute type 4 has an invalid length. [ 341.015306][ T9205] netlink: zone id is out of range [ 341.052735][ T9205] netlink: zone id is out of range [ 341.084738][ T9205] netlink: zone id is out of range [ 341.089950][ T9205] netlink: zone id is out of range [ 341.114705][ T9205] netlink: set zone limit has 8 unknown bytes [ 341.234536][ T9212] batman_adv: batadv0: Adding interface: vlan0 [ 341.240764][ T9212] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.362060][ T9212] batman_adv: batadv0: Interface activated: vlan0 [ 342.303056][ T4263] Bluetooth: hci4: link tx timeout [ 342.308562][ T4263] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.340878][ T4263] Bluetooth: hci4: link tx timeout [ 342.346195][ T4263] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.425902][ T4263] Bluetooth: hci4: link tx timeout [ 342.431087][ T4263] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.439952][ T4263] Bluetooth: hci4: link tx timeout [ 342.445210][ T4263] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.520349][ T9243] netlink: zone id is out of range [ 342.531233][ T9243] netlink: zone id is out of range [ 342.536903][ T9243] netlink: zone id is out of range [ 342.542210][ T9243] netlink: zone id is out of range [ 342.813480][ T9255] netlink: 'syz.3.1804': attribute type 10 has an invalid length. [ 342.993247][ T9255] team0: Device veth1_macvtap failed to register rx_handler [ 344.394604][ T4263] Bluetooth: hci4: command 0x0406 tx timeout [ 346.412332][ T9331] netlink: 'syz.2.1834': attribute type 10 has an invalid length. [ 346.463680][ T9331] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1834'. [ 346.539645][ T9331] bridge0: port 3(veth0_vlan) entered blocking state [ 346.588050][ T9331] bridge0: port 3(veth0_vlan) entered disabled state [ 346.657793][ T9331] net_ratelimit: 8 callbacks suppressed [ 346.657812][ T9331] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 347.392022][ T9368] netlink: 'syz.0.1844': attribute type 1 has an invalid length. [ 347.468938][ T9368] device bond1 entered promiscuous mode [ 347.516444][ T9368] 8021q: adding VLAN 0 to HW filter on device bond1 [ 347.533669][ T9375] netlink: zone id is out of range [ 347.539906][ T9375] netlink: zone id is out of range [ 347.545204][ T9375] netlink: zone id is out of range [ 347.550838][ T9375] netlink: zone id is out of range [ 347.556275][ T9375] netlink: zone id is out of range [ 347.583438][ T9372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 347.595725][ T9372] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 347.636481][ T9372] bond1: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 347.674296][ T9372] bond1: (slave ip6gre2): making interface the new active one [ 347.716611][ T9372] device ip6gre2 entered promiscuous mode [ 347.763595][ T9372] bond1: (slave ip6gre2): Enslaving as an active interface with an up link [ 347.777028][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 349.263256][ T9410] netlink: zone id is out of range [ 349.274438][ T9410] netlink: zone id is out of range [ 349.279671][ T9410] netlink: zone id is out of range [ 349.307513][ T9410] netlink: zone id is out of range [ 350.901246][ T9444] netlink: 'syz.0.1870': attribute type 2 has an invalid length. [ 350.951955][ T9444] netlink: 'syz.0.1870': attribute type 1 has an invalid length. [ 350.973953][ T9444] netlink: 187320 bytes leftover after parsing attributes in process `syz.0.1870'. [ 352.958687][ T9499] netlink: 892 bytes leftover after parsing attributes in process `syz.4.1894'. [ 353.250902][ T9506] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1897'. [ 354.462704][ T9525] netlink: 'syz.4.1904': attribute type 2 has an invalid length. [ 354.511100][ T9525] netlink: 'syz.4.1904': attribute type 1 has an invalid length. [ 354.533421][ T9525] netlink: 187320 bytes leftover after parsing attributes in process `syz.4.1904'. [ 354.635765][ T9536] netlink: 892 bytes leftover after parsing attributes in process `syz.2.1908'. [ 356.159087][ T9567] netlink: 'syz.2.1924': attribute type 2 has an invalid length. [ 356.188984][ T9567] netlink: 'syz.2.1924': attribute type 1 has an invalid length. [ 356.211808][ T9567] netlink: 187320 bytes leftover after parsing attributes in process `syz.2.1924'. [ 356.236659][ T9569] netlink: 892 bytes leftover after parsing attributes in process `syz.0.1926'. [ 357.613803][ T9599] device macvtap1 entered promiscuous mode [ 357.712034][ T9603] netlink: 860 bytes leftover after parsing attributes in process `syz.2.1939'. [ 358.542092][ T9621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1948'. [ 359.242158][ T9634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 359.284780][ T9634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 359.333387][ T9634] device bridge_slave_0 left promiscuous mode [ 359.361699][ T9634] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.412971][ T9634] device bridge_slave_1 left promiscuous mode [ 359.430858][ T9634] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.462005][ T9634] bond0: (slave bond_slave_0): Releasing backup interface [ 359.511593][ T9634] bond0: (slave bond_slave_1): Releasing backup interface [ 359.585042][ T9634] team0: Port device team_slave_0 removed [ 359.661361][ T9634] team0: Port device team_slave_1 removed [ 359.693187][ T9634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.727362][ T9634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.750339][ T9634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.771102][ T9634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.798912][ T9634] batman_adv: batadv0: Interface deactivated: vlan0 [ 359.816167][ T9634] batman_adv: batadv0: Removing interface: vlan0 [ 359.858405][ T9634] team0: Port device netdevsim0 removed [ 359.896676][ T9636] device vlan0 entered promiscuous mode [ 359.942718][ T9636] team0: Port device vlan0 added [ 360.257136][ T9662] team0: Port device vlan0 removed [ 360.290433][ T9662] batman_adv: batadv0: Adding interface: vlan0 [ 360.314437][ T9662] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.395986][ T9662] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 362.648351][ T9725] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1986'. [ 362.955296][ T9737] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1991'. [ 363.175918][ T9744] Bluetooth: MGMT ver 1.22 [ 363.485324][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2001'. [ 363.948563][ T9743] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 364.272963][ T9779] loop3: detected capacity change from 0 to 2048 [ 364.420962][ T9779] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 365.144901][ T9795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 365.171509][ T9795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 365.181915][ T9795] device bridge_slave_0 left promiscuous mode [ 365.191369][ T9795] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.252370][ T9795] device bridge_slave_1 left promiscuous mode [ 365.269080][ T9795] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.311410][ T9795] bond0: (slave bond_slave_0): Releasing backup interface [ 365.391983][ T9795] bond0: (slave bond_slave_1): Releasing backup interface [ 365.500504][ T9798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2015'. [ 365.542371][ T9795] team0: Port device team_slave_0 removed [ 365.626588][ T9795] team0: Port device team_slave_1 removed [ 365.657842][ T9795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.685272][ T9795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.704753][ T9795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.712585][ T9795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.736088][ T9795] batman_adv: batadv0: Interface deactivated: vlan0 [ 365.742766][ T9795] batman_adv: batadv0: Removing interface: vlan0 [ 365.760961][ T9796] device vlan0 entered promiscuous mode [ 365.807083][ T9796] team0: Port device vlan0 added [ 366.505509][ T9842] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2029'. [ 366.883348][ T9851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2034'. [ 368.162403][ T9907] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2058'. [ 369.808315][ T9973] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2085'. [ 369.944013][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2080'. [ 369.948580][ T9977] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 369.990161][ T9977] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 370.041949][ T9977] device bridge_slave_0 left promiscuous mode [ 370.068559][ T9977] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.103932][ T9977] device bridge_slave_1 left promiscuous mode [ 370.121598][ T9977] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.160372][ T9977] bond0: (slave bond_slave_0): Releasing backup interface [ 370.200462][ T9977] bond0: (slave bond_slave_1): Releasing backup interface [ 370.271137][ T9977] team0: Port device team_slave_0 removed [ 370.317536][ T9977] team0: Port device team_slave_1 removed [ 370.323907][ T9977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.342412][ T9977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.352755][ T9977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.360678][ T9977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.373892][ T9977] batman_adv: batadv0: Interface deactivated: vlan0 [ 370.381697][ T9977] batman_adv: batadv0: Removing interface: vlan0 [ 370.402038][ T9977] bond1: (slave ip6gre2): Releasing backup interface [ 370.409251][ T9977] device ip6gre2 left promiscuous mode [ 370.464927][ T9983] device vlan0 entered promiscuous mode [ 370.532392][ T9983] team0: Port device vlan0 added [ 370.963391][T10003] team0: Port device vlan0 removed [ 370.992429][T10003] batman_adv: batadv0: Adding interface: vlan0 [ 371.021861][T10003] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.136603][T10003] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 371.974193][T10035] net_ratelimit: 1 callbacks suppressed [ 371.974215][T10035] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 372.350688][T10048] device bridge0 entered promiscuous mode [ 372.381116][T10048] device macsec1 entered promiscuous mode [ 372.393357][T10048] device bridge0 left promiscuous mode [ 373.131356][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2115'. [ 375.763208][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2141'. [ 376.856973][T10200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2155'. [ 377.772604][T10231] netlink: 'syz.4.2166': attribute type 39 has an invalid length. [ 378.097135][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2169'. [ 378.480517][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.494406][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.618415][T10258] device bridge1 entered promiscuous mode [ 378.629118][T10258] team0: Port device bridge1 added [ 378.649623][T10258] netlink: 'syz.3.2177': attribute type 10 has an invalid length. [ 378.680004][T10258] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 378.760305][T10258] bridge0: port 1(ip6gretap0) entered blocking state [ 378.803061][T10258] bridge0: port 1(ip6gretap0) entered disabled state [ 378.871885][T10258] device ip6gretap0 entered promiscuous mode [ 378.944157][T10258] bridge0: port 1(ip6gretap0) entered blocking state [ 378.951315][T10258] bridge0: port 1(ip6gretap0) entered forwarding state [ 378.988384][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2182'. [ 379.748301][T10286] loop3: detected capacity change from 0 to 2048 [ 379.795872][T10286] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 381.720459][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2194'. [ 382.730062][T10272] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.742027][T10272] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.759006][T10272] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.769458][T10272] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.028565][T10330] loop1: detected capacity change from 0 to 2048 [ 384.086781][T10330] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 384.899326][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2207'. [ 386.289133][T10365] loop2: detected capacity change from 0 to 2048 [ 386.310007][T10365] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 389.900663][T10477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2261'. [ 391.809932][T10530] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2282'. [ 392.397259][T10547] device syz_tun entered promiscuous mode [ 392.421022][T10547] device batadv_slave_0 entered promiscuous mode [ 392.439201][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 392.732547][T10565] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2296'. [ 393.042450][T10569] IPVS: Scheduler module ip_vs_ªª not found [ 393.820519][T10591] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2308'. [ 395.013311][T10632] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2324'. [ 396.348195][T10673] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2343'. [ 398.253012][T10713] loop2: detected capacity change from 0 to 2048 [ 398.344956][T10713] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 399.512385][T10732] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2367'. [ 400.772663][T10765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2376'. [ 400.847128][T10765] device nr0 entered promiscuous mode [ 402.202983][T10801] loop3: detected capacity change from 0 to 2048 [ 402.323575][T10801] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 404.168248][T10852] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2414'. [ 404.682853][T10866] xt_CT: You must specify a L4 protocol and not use inversions on it [ 404.938389][T10877] Driver unsupported XDP return value 0 on prog (id 471) dev N/A, expect packet loss! [ 405.016892][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2423'. [ 406.040449][T10911] xt_CT: You must specify a L4 protocol and not use inversions on it [ 406.371284][T10923] netlink: 'syz.3.2443': attribute type 26 has an invalid length. [ 406.623841][T10934] netlink: 'syz.2.2448': attribute type 72 has an invalid length. [ 406.637140][T10937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2447'. [ 406.659104][T10934] netlink: 'syz.2.2448': attribute type 8 has an invalid length. [ 407.040680][T10949] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 407.909843][T10967] loop2: detected capacity change from 0 to 2048 [ 408.027778][T10967] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 408.493986][T10971] netlink: 'syz.4.2462': attribute type 72 has an invalid length. [ 408.547645][T10971] netlink: 'syz.4.2462': attribute type 8 has an invalid length. [ 408.892336][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2472'. [ 408.894293][T10986] dccp_invalid_packet: P.Data Offset(0) too small [ 409.608983][T11009] loop1: detected capacity change from 0 to 2048 [ 409.670108][T11009] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 410.369474][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2484'. [ 410.716004][T11026] netlink: 'syz.4.2488': attribute type 10 has an invalid length. [ 410.726892][T11026] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2488'. [ 410.739923][T11026] device team0 entered promiscuous mode [ 410.760976][T11026] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.779886][T11026] bridge0: port 1(team0) entered blocking state [ 410.796956][T11026] bridge0: port 1(team0) entered disabled state [ 411.390653][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2497'. [ 414.553093][T11159] netlink: 'syz.0.2547': attribute type 10 has an invalid length. [ 414.620705][T11159] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2547'. [ 414.665158][T11159] device team0 entered promiscuous mode [ 414.702193][T11159] bridge0: port 1(team0) entered blocking state [ 414.738050][T11159] bridge0: port 1(team0) entered disabled state [ 415.908323][T11205] netlink: 'syz.1.2567': attribute type 10 has an invalid length. [ 415.945233][T11205] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2567'. [ 415.972503][T11205] device team0 entered promiscuous mode [ 415.992931][T11205] device team_slave_0 entered promiscuous mode [ 416.024952][T11205] device team_slave_1 entered promiscuous mode [ 416.050260][T11205] device netdevsim0 entered promiscuous mode [ 416.113140][T11205] bridge0: port 3(team0) entered blocking state [ 416.147175][T11205] bridge0: port 3(team0) entered disabled state [ 416.240091][T11205] bridge0: port 3(team0) entered blocking state [ 416.246586][T11205] bridge0: port 3(team0) entered forwarding state [ 416.832131][T11220] loop2: detected capacity change from 0 to 2048 [ 416.853586][T11220] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 419.071723][T11292] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 420.225084][T11318] dccp_invalid_packet: P.Data Offset(0) too small [ 420.340389][T11322] xt_hashlimit: size too large, truncated to 1048576 [ 421.242740][T11324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2615'. [ 422.875307][T11353] dccp_invalid_packet: P.Data Offset(0) too small [ 426.131383][T11426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2667'. [ 427.523756][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2690'. [ 427.539418][T11502] bridge0: port 1(team0) entered disabled state [ 428.298039][T11523] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2699'. [ 428.752044][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2705'. [ 428.786956][T11536] bridge0: port 1(team0) entered disabled state [ 429.279654][T11552] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2712'. [ 430.424958][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2724'. [ 430.484593][T11581] device ip6gretap0 left promiscuous mode [ 430.494691][T11581] bridge0: port 1(ip6gretap0) entered disabled state [ 430.579997][T11581] device bridge0 left promiscuous mode [ 431.283491][T11603] lo speed is unknown, defaulting to 1000 [ 431.364546][T11603] lo speed is unknown, defaulting to 1000 [ 431.415760][T11603] lo speed is unknown, defaulting to 1000 [ 431.482320][T11603] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 431.552033][T11603] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 431.661286][T11603] lo speed is unknown, defaulting to 1000 [ 431.710879][T11603] lo speed is unknown, defaulting to 1000 [ 431.739677][T11603] lo speed is unknown, defaulting to 1000 [ 431.862270][T11603] lo speed is unknown, defaulting to 1000 [ 431.887970][T11603] lo speed is unknown, defaulting to 1000 [ 431.907423][T11603] lo speed is unknown, defaulting to 1000 [ 434.101321][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2765'. [ 434.671746][T11706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2774'. [ 435.573540][T11732] lo speed is unknown, defaulting to 1000 [ 435.949059][T11732] siw: device registration error -23 [ 436.775595][T11778] netlink: 'syz.3.2804': attribute type 10 has an invalid length. [ 436.802505][T11778] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2804'. [ 436.834277][T11778] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 437.246758][ T4263] Bluetooth: hci4: link tx timeout [ 437.251954][ T4263] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 437.260180][ T4263] Bluetooth: hci4: link tx timeout [ 437.266141][ T4263] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 437.277447][ T4263] Bluetooth: hci4: link tx timeout [ 437.282605][ T4263] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 437.290747][ T4263] Bluetooth: hci4: link tx timeout [ 437.296000][ T4263] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 437.303705][ T4263] Bluetooth: hci4: link tx timeout [ 437.309831][ T4263] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 437.318213][ T4263] Bluetooth: hci4: link tx timeout [ 437.323353][ T4263] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 437.331456][ T4263] Bluetooth: hci4: link tx timeout [ 437.336672][ T4263] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 437.344415][ T4263] Bluetooth: hci4: link tx timeout [ 437.349553][ T4263] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 437.357558][ T4263] Bluetooth: hci4: link tx timeout [ 437.362708][ T4263] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 437.370565][ T4263] Bluetooth: hci4: link tx timeout [ 437.375806][ T4263] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 437.383477][ T4263] Bluetooth: hci4: link tx timeout [ 437.388755][ T4263] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 437.396502][ T4263] Bluetooth: hci4: link tx timeout [ 437.401639][ T4263] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 437.409407][ T4263] Bluetooth: hci4: link tx timeout [ 437.415037][ T4263] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 437.422741][ T4263] Bluetooth: hci4: link tx timeout [ 437.427978][ T4263] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 438.382162][T11826] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 438.870126][T11844] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2830'. [ 439.183008][T11850] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.280808][ T4263] Bluetooth: hci4: command 0x0406 tx timeout [ 439.397664][T11850] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.593852][T11850] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.727056][T11850] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.928493][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.935057][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.959799][T11850] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.978508][T11850] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.993421][T11850] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.009825][T11850] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.119229][T11910] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.190009][T11918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2857'. [ 441.201516][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2857'. [ 441.357620][T11910] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.504659][T11910] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.550784][T11925] xt_hashlimit: size too large, truncated to 1048576 [ 441.627109][T11910] bond0: (slave netdevsim0): Releasing backup interface [ 441.648537][T11910] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.999772][T11910] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.052176][T11910] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.084822][T11910] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.112886][T11910] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.941975][T11947] sctp: [Deprecated]: syz.2.2868 (pid 11947) Use of int in maxseg socket option. [ 442.941975][T11947] Use struct sctp_assoc_value instead [ 443.000945][T11947] syz.2.2868 (11947) used greatest stack depth: 17976 bytes left [ 443.149844][T11952] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2869'. [ 443.605096][T11954] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2870'. [ 446.438118][T12023] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2899'. [ 447.680190][ T4249] device syz_tun left promiscuous mode [ 447.750204][ T4260] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 447.775818][ T4260] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 447.794042][ T4260] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 447.814488][ T4260] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 447.826689][ T4260] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 447.834011][ T4260] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 447.939569][T12052] lo speed is unknown, defaulting to 1000 [ 448.238905][T12052] chnl_net:caif_netlink_parms(): no params data found [ 448.328333][T12052] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.342194][T12052] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.352879][T12052] device bridge_slave_0 entered promiscuous mode [ 448.363209][T12052] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.372357][T12052] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.390842][T12052] device bridge_slave_1 entered promiscuous mode [ 448.461927][T12052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.489360][T12052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.563523][T12052] team0: Port device team_slave_0 added [ 448.586288][T12052] team0: Port device team_slave_1 added [ 448.621199][T12052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.628614][T12052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.657123][T12052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.671878][T12052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.680471][T12052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.707668][T12052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.790183][T12052] device hsr_slave_0 entered promiscuous mode [ 448.805497][T12052] device hsr_slave_1 entered promiscuous mode [ 448.815831][T12052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.823419][T12052] Cannot create hsr debugfs directory [ 449.097468][T12052] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.264087][T12052] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.446768][T12052] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.514708][T12082] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2921'. [ 449.742719][T12052] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.914506][ T4260] Bluetooth: hci0: command 0x0409 tx timeout [ 449.956934][T12052] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 449.989035][T12052] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 450.042342][T12052] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 450.063776][T12052] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 450.248673][T12052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.436582][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 450.450549][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 450.476503][T12052] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.503824][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 450.533403][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 450.552899][ T4364] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.560118][ T4364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.751440][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 450.762595][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 450.779880][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 450.795351][ T4364] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.802545][ T4364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.817451][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 450.852214][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 450.898586][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 450.948858][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 450.976699][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 450.993981][T12116] xt_CT: No such helper "snmp" [ 451.000774][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 451.018557][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 451.031539][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 451.047327][T12121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2935'. [ 451.198431][T12052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 451.220467][T12052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 451.228819][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 451.241347][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 451.250305][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 451.262392][T12126] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2937'. [ 451.596308][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 451.630868][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 451.646959][T12052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.747917][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 451.770102][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 451.877685][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 451.893358][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 451.925473][T12052] device veth0_vlan entered promiscuous mode [ 451.942498][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 451.955839][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 451.981322][T12052] device veth1_vlan entered promiscuous mode [ 451.994676][ T4260] Bluetooth: hci0: command 0x041b tx timeout [ 452.042126][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 452.102381][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 452.137095][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 452.160774][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 452.198295][T12052] device veth0_macvtap entered promiscuous mode [ 452.215808][T12157] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2949'. [ 452.227541][T12158] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2948'. [ 452.258705][T12052] device veth1_macvtap entered promiscuous mode [ 452.270096][T12160] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 452.292314][T12160] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20000 [ 452.348474][T12052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.374655][T12052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.398111][T12052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.428924][T12052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.459808][T12052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.482640][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 452.499742][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 452.531938][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 452.543302][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 452.561706][T12052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.580251][T12052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.604198][T12052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.654472][T12052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.666039][T12052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.707005][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 452.735528][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 452.785267][T12052] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.794040][T12052] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.819565][T12052] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.833481][T12052] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.077128][ T4710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.104465][ T4710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.168947][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 453.213662][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.217604][T12185] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2960'. [ 453.242363][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.265722][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 453.922978][T12211] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2972'. [ 453.949742][T12212] Cannot find map_set index 0 as target [ 454.094363][ T4260] Bluetooth: hci0: command 0x040f tx timeout [ 454.813496][ T4263] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 454.824185][ T4263] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 454.833204][ T4263] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 454.853755][ T4263] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 454.863611][ T4263] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 454.871838][ T4263] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 455.052496][T12233] lo speed is unknown, defaulting to 1000 [ 455.190532][ T4364] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.237883][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2985'. [ 455.316781][ T4364] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.411782][ T4364] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.600230][ T4364] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.683239][T12233] chnl_net:caif_netlink_parms(): no params data found [ 455.880606][T12233] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.892581][T12233] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.901205][T12233] device bridge_slave_0 entered promiscuous mode [ 455.921499][T12233] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.933944][T12233] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.943986][T12233] device bridge_slave_1 entered promiscuous mode [ 455.998857][T12233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.008300][ T4364] tipc: Left network mode [ 456.029465][T12233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.101592][T12233] team0: Port device team_slave_0 added [ 456.155337][ T4263] Bluetooth: hci0: command 0x0419 tx timeout [ 456.257741][T12233] team0: Port device team_slave_1 added [ 456.422835][T12233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.434914][T12233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.551966][T12233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.678604][T12233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.694488][T12233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.805071][T12233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.934774][T12295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2997'. [ 456.954812][ T4260] Bluetooth: hci5: command 0x0409 tx timeout [ 457.158678][T12233] device hsr_slave_0 entered promiscuous mode [ 457.170708][T12233] device hsr_slave_1 entered promiscuous mode [ 457.202135][T12233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 457.214429][T12233] Cannot create hsr debugfs directory [ 458.175773][ T4364] device hsr_slave_0 left promiscuous mode [ 458.183975][ T4364] device hsr_slave_1 left promiscuous mode [ 458.207196][ T4364] batman_adv: batadv0: Removing interface: vlan0 [ 458.251593][ T4364] device veth0_macvtap left promiscuous mode [ 458.266246][ T4364] device veth1_vlan left promiscuous mode [ 458.774141][ T4364] team0 (unregistering): Port device bridge1 removed [ 459.034590][ T4260] Bluetooth: hci5: command 0x041b tx timeout [ 460.040365][ T4364] bond0 (unregistering): Released all slaves [ 460.092069][T12353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3011'. [ 460.389526][T12366] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3015'. [ 460.902261][T12233] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 460.922868][T12233] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 460.962524][T12233] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 460.997091][T12233] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 461.114454][ T4260] Bluetooth: hci5: command 0x040f tx timeout [ 461.162605][T12233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.180216][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 461.213170][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 461.233183][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3023'. [ 461.252567][T12233] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.271878][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 461.284254][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 461.300854][ T4364] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.308162][ T4364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.325808][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 461.345467][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 461.364222][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 461.386485][ T4364] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.393695][ T4364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.433539][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 461.499308][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 461.511258][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 461.537776][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 461.555356][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 461.577137][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 461.706435][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 461.725089][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 461.773958][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 461.805727][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 461.860096][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 461.885427][T12233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 462.053274][T12420] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3028'. [ 462.456042][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 462.471596][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 462.507489][T12233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.566052][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 462.592266][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 462.661676][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 462.680091][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 462.698377][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 462.720465][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 462.737203][T12439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3033'. [ 462.755615][T12233] device veth0_vlan entered promiscuous mode [ 462.797897][T12233] device veth1_vlan entered promiscuous mode [ 462.898449][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 462.975919][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 462.984230][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 463.003008][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 463.024978][T12233] device veth0_macvtap entered promiscuous mode [ 463.046155][T12233] device veth1_macvtap entered promiscuous mode [ 463.096945][T12233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.122557][T12233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.143997][T12233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.155383][T12233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.165314][T12233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.176027][T12233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.187801][T12233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.194908][ T4260] Bluetooth: hci5: command 0x0419 tx timeout [ 463.199494][T12233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.212251][T12233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.230604][T12233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.241673][T12233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.255933][T12233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.267973][T12233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.281104][T12233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.296281][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 463.310138][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 463.331495][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 463.362920][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 463.405438][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 463.445903][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 463.469448][T12233] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.485343][T12233] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.494078][T12233] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.510565][T12233] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.647114][ T4364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.665855][ T4364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.708900][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 463.746774][T10287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.781508][T10287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.802668][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 464.088546][T12475] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20000 [ 464.131628][T12476] device ip6tnl2 entered promiscuous mode [ 464.471106][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3044'. [ 464.730371][T12493] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3046'. [ 464.974515][ T4260] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 464.983611][ T4260] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 464.995693][ T4260] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 465.006602][ T4260] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 465.015683][ T4260] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 465.023102][ T4260] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 465.096940][T12500] lo speed is unknown, defaulting to 1000 [ 465.207157][T10287] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.345407][T10287] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.481032][T12515] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3053'. [ 465.617361][T10287] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.730497][T10287] device netdevsim0 left promiscuous mode [ 465.761011][T10287] team0: Port device netdevsim0 removed [ 465.772184][T10287] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.789441][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3057'. [ 465.801495][T12500] chnl_net:caif_netlink_parms(): no params data found [ 466.098842][T12533] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3059'. [ 466.125009][T12500] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.163988][T12500] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.194757][T12500] device bridge_slave_0 entered promiscuous mode [ 466.276390][T12500] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.293819][T12500] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.320636][T12500] device bridge_slave_1 entered promiscuous mode [ 466.330638][T10287] tipc: Left network mode [ 466.582335][T12500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.638884][T12500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.816492][T12500] team0: Port device team_slave_0 added [ 466.887558][T12500] team0: Port device team_slave_1 added [ 467.063094][T12500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.080565][T12500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.114515][ T4263] Bluetooth: hci1: command 0x0409 tx timeout [ 467.132496][T12500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.152961][T12560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3067'. [ 467.193994][T12500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.228541][T12500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.261683][T12500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.422673][T12500] device hsr_slave_0 entered promiscuous mode [ 467.435288][T12500] device hsr_slave_1 entered promiscuous mode [ 467.469700][T12500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.485179][T12500] Cannot create hsr debugfs directory [ 467.720764][T12580] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3073'. [ 468.311269][T10287] device hsr_slave_0 left promiscuous mode [ 468.328132][T10287] device hsr_slave_1 left promiscuous mode [ 468.351101][T10287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.382832][T10287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.420021][T10287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.462847][T10287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.503340][T10287] batman_adv: batadv0: Interface deactivated: vlan0 [ 468.544422][T10287] batman_adv: batadv0: Removing interface: vlan0 [ 468.558550][T10287] bridge0: port 3(team0) entered disabled state [ 468.584786][T10287] device bridge_slave_1 left promiscuous mode [ 468.614162][T12608] syz.3.3082[12608] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 468.619580][T10287] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.628854][T12608] syz.3.3082[12608] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 468.663828][T10287] device bridge_slave_0 left promiscuous mode [ 468.700088][T10287] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.755361][T10287] device veth1_macvtap left promiscuous mode [ 468.761660][T10287] device veth0_macvtap left promiscuous mode [ 468.769502][T10287] device veth1_vlan left promiscuous mode [ 469.195531][ T4263] Bluetooth: hci1: command 0x041b tx timeout [ 469.618069][T10287] device team_slave_1 left promiscuous mode [ 469.628452][T10287] team0 (unregistering): Port device team_slave_1 removed [ 469.672599][T10287] device team_slave_0 left promiscuous mode [ 469.680963][T10287] team0 (unregistering): Port device team_slave_0 removed [ 469.723735][T10287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.770449][T10287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.272433][T10287] bond0 (unregistering): Released all slaves [ 470.359426][T12605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3080'. [ 470.371726][ T4296] lo speed is unknown, defaulting to 1000 [ 470.402632][T12625] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3087'. [ 471.246328][T12643] tipc: Enabled bearer , priority 0 [ 471.284492][ T4263] Bluetooth: hci1: command 0x040f tx timeout [ 471.537139][T12651] device syzkaller0 entered promiscuous mode [ 471.586169][T12651] tipc: Resetting bearer [ 471.653115][T12500] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 471.878875][ T4710] tipc: Resetting bearer [ 471.895761][T12643] sch_fq: defrate 511 ignored. [ 472.202160][T12500] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 472.237141][T12500] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 472.306424][ T952] tipc: Node number set to 771766885 [ 472.338518][T12632] tipc: Resetting bearer [ 473.358724][ T4263] Bluetooth: hci1: command 0x0419 tx timeout [ 474.262858][T12691] syz.2.3106[12691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 474.262963][T12691] syz.2.3106[12691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 474.424081][T12693] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 474.468252][T12632] tipc: Disabling bearer [ 474.498233][T12500] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 474.864446][T12500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.921667][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 474.951725][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 475.009228][T12500] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.082734][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 475.102059][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 475.143946][T10287] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.151153][T10287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.190215][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 475.230684][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 475.260247][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 475.277981][T10287] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.285305][T10287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.305643][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 475.341302][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 475.383359][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 475.401135][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 475.430870][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 475.447192][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 475.464122][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 475.475084][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 475.485369][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 475.498096][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 475.537901][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 475.570588][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 476.232998][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 476.243098][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 476.357634][T12500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.496467][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 476.512374][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 476.600097][T12500] device veth0_vlan entered promiscuous mode [ 476.645979][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 476.664869][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 476.710231][T12500] device veth1_vlan entered promiscuous mode [ 476.749016][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 476.767059][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 476.781640][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 476.792166][T12766] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3128'. [ 476.866357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 476.886307][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 476.913663][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 476.936536][T12500] device veth0_macvtap entered promiscuous mode [ 476.965084][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 476.989599][T12500] device veth1_macvtap entered promiscuous mode [ 477.181879][T12500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.212940][T12500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.239524][T12500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.278335][T12500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.292050][T12500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.319172][T12500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.353472][T12500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.367290][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 477.407426][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 477.530869][T12500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.541803][T12500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.554998][T12500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.569382][T12500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.581290][T12500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.608647][T12500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.625725][T12500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.652496][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 477.674184][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 477.733642][T12500] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.781000][T12500] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.797894][T12500] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.812503][T12500] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.075745][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.102479][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.149754][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 478.179210][ T4363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.204419][ T4363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.262703][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 479.598011][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3155'. [ 479.683609][ T4263] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 479.692805][ T4263] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 479.700830][ T4263] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 479.711408][ T4263] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 479.719483][ T4263] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 479.726757][ T4263] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 480.592760][ T11] tipc: Left network mode [ 480.612846][T12862] chnl_net:caif_netlink_parms(): no params data found [ 481.083675][T12909] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20000 [ 481.389780][T12862] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.406100][T12862] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.423628][T12862] device bridge_slave_0 entered promiscuous mode [ 481.482675][T12862] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.496882][T12862] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.565633][T12862] device bridge_slave_1 entered promiscuous mode [ 481.720320][T12862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.747931][T12862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.754747][ T4260] Bluetooth: hci2: command 0x0409 tx timeout [ 481.908664][T12862] team0: Port device team_slave_0 added [ 481.945839][T12862] team0: Port device team_slave_1 added [ 481.979102][T12937] netlink: 'syz.2.3182': attribute type 9 has an invalid length. [ 482.027676][T12937] netlink: 'syz.2.3182': attribute type 6 has an invalid length. [ 482.206220][T12955] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20000 [ 482.295415][T12862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.311444][T12862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.405998][T12862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.601395][T12862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.621584][T12862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.782394][T12862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.248454][ T11] device hsr_slave_0 left promiscuous mode [ 483.366438][ T11] device hsr_slave_1 left promiscuous mode [ 483.418640][T12990] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20000 [ 483.834854][ T4260] Bluetooth: hci2: command 0x041b tx timeout [ 483.927837][ T11] team0 (unregistering): Port device vlan0 removed [ 484.778249][ T11] bond0 (unregistering): Released all slaves [ 484.795173][T12862] device hsr_slave_0 entered promiscuous mode [ 484.802363][T12862] device hsr_slave_1 entered promiscuous mode [ 484.809289][T12862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.817245][T12862] Cannot create hsr debugfs directory [ 485.915062][ T4260] Bluetooth: hci2: command 0x040f tx timeout [ 485.977097][T12862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 485.998149][T12862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 486.018741][T12862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 486.045002][T12862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 486.193813][T12862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.224777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 486.240109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 486.272276][T12862] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.299114][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 486.332147][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 486.362422][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.369675][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.423999][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 486.479277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 486.499531][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 486.529068][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.536316][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.594861][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 486.647717][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 486.705993][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 486.727662][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 486.751200][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 486.774064][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 486.824998][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 486.845897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 486.882087][T12862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 486.915245][T12862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 486.938174][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 486.959378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 486.985247][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 487.756349][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 487.785475][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 487.801190][T12862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.998296][ T4260] Bluetooth: hci2: command 0x0419 tx timeout [ 488.351093][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 488.360418][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 488.398616][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 488.420185][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 488.436894][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 488.445660][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 488.459577][T12862] device veth0_vlan entered promiscuous mode [ 488.495964][T12862] device veth1_vlan entered promiscuous mode [ 488.551222][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 488.577225][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 488.599481][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 488.632829][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 488.679590][T12862] device veth0_macvtap entered promiscuous mode [ 488.703153][T12862] device veth1_macvtap entered promiscuous mode [ 488.771002][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.791884][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.813208][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.841198][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.884418][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.924439][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.971788][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.014486][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.052318][T12862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.088673][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.124383][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.179353][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.214467][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.251505][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.281436][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.324110][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.386255][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.417972][T12862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.445109][ T9009] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 489.465727][ T9009] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 489.495411][ T9009] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 489.536849][ T9009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 489.579180][ T9009] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 489.619583][ T9009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 489.649914][T12862] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.675130][T12862] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.690557][T12862] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.714405][T12862] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.947163][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.977671][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.007972][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 490.096338][ T4757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.116259][ T4757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.138111][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 490.503796][T13196] tipc: Started in network mode [ 490.518033][T13196] tipc: Node identity c6c551f9fb51, cluster identity 4711 [ 490.539353][T13196] tipc: Enabled bearer , priority 0 [ 490.615569][T13196] device syzkaller0 entered promiscuous mode [ 490.622376][T13196] tipc: Resetting bearer [ 490.753786][T13196] sch_fq: defrate 511 ignored. [ 491.662553][ T7297] tipc: Node number set to 1033130489 [ 491.895646][ T4260] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 491.909411][ T4260] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 491.918800][ T4260] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 491.937755][ T4260] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 491.945733][ T4260] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 491.953402][ T4260] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 492.025767][ T4363] tipc: Resetting bearer [ 492.034721][T13193] tipc: Resetting bearer [ 493.997024][ T4263] Bluetooth: hci3: command 0x0409 tx timeout [ 494.299641][T13193] tipc: Disabling bearer [ 494.639492][ T9009] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.781381][ T9009] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.882464][ T9009] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.941043][T13226] chnl_net:caif_netlink_parms(): no params data found [ 494.994858][ T9009] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.185627][T13226] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.218123][T13226] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.265752][T13226] device bridge_slave_0 entered promiscuous mode [ 495.386322][T13226] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.393440][T13226] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.427384][T13226] device bridge_slave_1 entered promiscuous mode [ 495.546776][T13286] device batadv0 entered promiscuous mode [ 495.570594][T13286] device macsec1 entered promiscuous mode [ 495.582986][T13286] device batadv0 left promiscuous mode [ 495.775943][T13226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.829397][T13226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.855317][ T9009] tipc: Left network mode [ 495.893010][T13296] tipc: Started in network mode [ 495.911424][T13296] tipc: Node identity d6be5803bde5, cluster identity 4711 [ 495.951339][T13296] tipc: Enabled bearer , priority 0 [ 495.968668][T13226] team0: Port device team_slave_0 added [ 496.074757][ T4263] Bluetooth: hci3: command 0x041b tx timeout [ 496.408180][T13298] device syzkaller0 entered promiscuous mode [ 496.459445][T13298] tipc: Resetting bearer [ 496.826189][T13226] team0: Port device team_slave_1 added [ 497.064519][ T4294] tipc: Node number set to 1801148419 [ 497.527297][T13338] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20000 [ 498.156364][ T4263] Bluetooth: hci3: command 0x040f tx timeout [ 499.327238][T13287] tipc: Resetting bearer [ 500.241749][ T4263] Bluetooth: hci3: command 0x0419 tx timeout [ 501.367113][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.374186][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.491080][T13287] tipc: Disabling bearer [ 501.626258][T13226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.633260][T13226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.707031][T13226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.823209][T13226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.845008][T13226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.871863][T13364] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20000 [ 501.883708][T13226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.147127][T13226] device hsr_slave_0 entered promiscuous mode [ 502.182147][T13226] device hsr_slave_1 entered promiscuous mode [ 502.206322][T13226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 502.225335][T13226] Cannot create hsr debugfs directory [ 502.301301][T13370] device batadv0 entered promiscuous mode [ 502.324761][T13370] device macsec1 entered promiscuous mode [ 502.347124][T13370] device batadv0 left promiscuous mode [ 503.009440][T13396] tipc: Enabled bearer , priority 0 [ 503.383923][T13396] device syzkaller0 entered promiscuous mode [ 503.423127][T13396] tipc: Resetting bearer [ 503.759603][T13388] tipc: Resetting bearer [ 506.207846][T13388] tipc: Disabling bearer [ 506.506266][ T9009] device hsr_slave_0 left promiscuous mode [ 506.552753][ T9009] device hsr_slave_1 left promiscuous mode [ 506.576163][ T9009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.583999][ T9009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.698272][ T9009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.712681][ T9009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.726153][ T9009] batman_adv: batadv0: Interface deactivated: vlan0 [ 506.736896][ T9009] batman_adv: batadv0: Removing interface: vlan0 [ 506.751032][ T9009] device bridge_slave_1 left promiscuous mode [ 506.758995][ T9009] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.772667][ T9009] device bridge_slave_0 left promiscuous mode [ 506.779546][ T9009] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.812968][ T9009] device veth1_macvtap left promiscuous mode [ 506.819146][ T9009] device veth0_macvtap left promiscuous mode [ 506.825578][ T9009] device veth1_vlan left promiscuous mode [ 507.543635][ T9009] team0 (unregistering): Port device team_slave_1 removed [ 507.600333][ T9009] team0 (unregistering): Port device team_slave_0 removed [ 507.683553][ T9009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.730797][ T9009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.200140][ T9009] bond0 (unregistering): Released all slaves [ 508.601160][T13226] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 508.671611][T13226] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 508.716994][T13226] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 508.770697][T13226] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 509.152842][T13226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.279010][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 509.289641][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 509.318084][T13226] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.350170][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 509.378431][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 509.408687][T10287] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.416030][T10287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.461226][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 509.515841][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 509.526195][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 509.591033][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.598249][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.645740][ T9009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 509.671776][ T4757] tipc: Left network mode [ 509.685698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 509.721337][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 509.760415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 509.788382][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 510.123635][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 510.145624][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 510.268444][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 510.297274][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 510.452580][T13226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 510.487696][T13226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 510.571889][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 510.602210][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 511.536445][ T9009] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 511.544043][ T9009] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 511.588696][T13226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.722423][T13561] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20000 [ 512.283340][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 512.318212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 512.878203][T13226] device veth0_vlan entered promiscuous mode [ 512.897040][ T5225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 512.912338][ T5225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 512.933345][ T5225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 512.948347][ T5225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 512.971727][ T4757] device batadv_slave_0 left promiscuous mode [ 512.999136][ T4757] device hsr_slave_0 left promiscuous mode [ 513.016579][ T4757] device hsr_slave_1 left promiscuous mode [ 513.050858][ T4757] batman_adv: batadv0: Removing interface: vlan0 [ 513.099042][ T4757] device veth1_macvtap left promiscuous mode [ 513.106450][ T4757] device veth0_macvtap left promiscuous mode [ 513.112694][ T4757] device veth1_vlan left promiscuous mode [ 513.127668][ T4757] device veth0_vlan left promiscuous mode [ 513.580778][ T4757] bond1 (unregistering): Released all slaves [ 515.063940][ T4757] bond0 (unregistering): Released all slaves [ 515.122761][T13226] device veth1_vlan entered promiscuous mode [ 515.154496][ T9009] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 515.223037][ T9009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 515.232572][ T9009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 515.252482][T13226] device veth0_macvtap entered promiscuous mode [ 515.271814][T13226] device veth1_macvtap entered promiscuous mode [ 515.302256][T13226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.314217][T13226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.333072][T13226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.370304][T13226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.404924][T13226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.415939][T13226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.427304][T13226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.451493][T13226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.462208][T13607] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20000 [ 515.472636][T13226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.547899][ T5225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 515.559815][ T5225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 515.573014][ T5225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 515.591514][ T5225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 515.616530][T13226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.647923][T13226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.667058][T13226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.693372][T13226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.712391][T13226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.723352][T13226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.747944][T13226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.774000][T13226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.793655][T13226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.808764][ T5225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 515.818489][ T5225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 515.851296][T13226] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.861963][T13226] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.880546][T13226] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.892117][T13226] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.053797][ T5225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.098064][ T5225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.148000][ T9009] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 516.190558][ T4364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.221442][ T4364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.272853][ T5225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 517.148477][T13637] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20000 [ 517.584666][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 517.584685][ T26] audit: type=1326 audit(1737622532.697:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13642 comm="syz.1.3361" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d65385d29 code=0x100000 [ 519.445186][T13674] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20000 [ 522.167407][T13722] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3391'. [ 523.633448][ T26] audit: type=1326 audit(1737622538.737:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13741 comm="syz.1.3399" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d65385d29 code=0x0 [ 524.435362][T13760] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3405'. [ 525.809558][T13785] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20000 [ 526.497966][T13797] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3419'. [ 529.832085][T13856] device syzkaller0 entered promiscuous mode [ 535.802493][T13959] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 536.198933][T13963] device syzkaller0 entered promiscuous mode [ 539.141527][T14006] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 540.396169][T14047] device syzkaller0 entered promiscuous mode [ 546.122865][T14118] [ 546.125249][T14118] ====================================================== [ 546.132288][T14118] WARNING: possible circular locking dependency detected [ 546.139326][T14118] 6.1.126-syzkaller #0 Not tainted [ 546.144460][T14118] ------------------------------------------------------ [ 546.151494][T14118] syz.4.3533/14118 is trying to acquire lock: [ 546.157575][T14118] ffffffff8e6538d8 (nr_node_list_lock){+...}-{2:2}, at: nr_rt_device_down+0xb1/0x7b0 [ 546.167107][T14118] [ 546.167107][T14118] but task is already holding lock: [ 546.174464][T14118] ffffffff8e653878 (nr_neigh_list_lock){+...}-{2:2}, at: nr_rt_device_down+0x24/0x7b0 [ 546.184043][T14118] [ 546.184043][T14118] which lock already depends on the new lock. [ 546.184043][T14118] [ 546.194440][T14118] [ 546.194440][T14118] the existing dependency chain (in reverse order) is: [ 546.203445][T14118] [ 546.203445][T14118] -> #2 (nr_neigh_list_lock){+...}-{2:2}: [ 546.211352][T14118] lock_acquire+0x1f8/0x5a0 [ 546.216415][T14118] _raw_spin_lock_bh+0x31/0x40 [ 546.221714][T14118] nr_rt_ioctl+0x394/0xfb0 [ 546.226684][T14118] sock_do_ioctl+0x152/0x450 [ 546.231798][T14118] sock_ioctl+0x47f/0x770 [ 546.236651][T14118] __se_sys_ioctl+0xf1/0x160 [ 546.241769][T14118] do_syscall_64+0x3b/0xb0 [ 546.246719][T14118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.253148][T14118] [ 546.253148][T14118] -> #1 (&nr_node->node_lock){+...}-{2:2}: [ 546.261145][T14118] lock_acquire+0x1f8/0x5a0 [ 546.266177][T14118] _raw_spin_lock_bh+0x31/0x40 [ 546.271467][T14118] nr_rt_ioctl+0x18e/0xfb0 [ 546.276409][T14118] sock_do_ioctl+0x152/0x450 [ 546.281519][T14118] sock_ioctl+0x47f/0x770 [ 546.286364][T14118] __se_sys_ioctl+0xf1/0x160 [ 546.291473][T14118] do_syscall_64+0x3b/0xb0 [ 546.296416][T14118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.302844][T14118] [ 546.302844][T14118] -> #0 (nr_node_list_lock){+...}-{2:2}: [ 546.310679][T14118] validate_chain+0x1661/0x5950 [ 546.316052][T14118] __lock_acquire+0x125b/0x1f80 [ 546.321433][T14118] lock_acquire+0x1f8/0x5a0 [ 546.326465][T14118] _raw_spin_lock_bh+0x31/0x40 [ 546.331765][T14118] nr_rt_device_down+0xb1/0x7b0 [ 546.337143][T14118] nr_device_event+0x12b/0x140 [ 546.342430][T14118] raw_notifier_call_chain+0xd0/0x170 [ 546.348326][T14118] __dev_notify_flags+0x304/0x610 [ 546.353876][T14118] dev_change_flags+0xe7/0x190 [ 546.359167][T14118] dev_ifsioc+0x177/0x1160 [ 546.364101][T14118] dev_ioctl+0x508/0xf70 [ 546.368863][T14118] sock_do_ioctl+0x26b/0x450 [ 546.373972][T14118] sock_ioctl+0x47f/0x770 [ 546.378818][T14118] __se_sys_ioctl+0xf1/0x160 [ 546.384030][T14118] do_syscall_64+0x3b/0xb0 [ 546.389002][T14118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.395444][T14118] [ 546.395444][T14118] other info that might help us debug this: [ 546.395444][T14118] [ 546.405686][T14118] Chain exists of: [ 546.405686][T14118] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 546.405686][T14118] [ 546.419523][T14118] Possible unsafe locking scenario: [ 546.419523][T14118] [ 546.426971][T14118] CPU0 CPU1 [ 546.432332][T14118] ---- ---- [ 546.437700][T14118] lock(nr_neigh_list_lock); [ 546.442468][T14118] lock(&nr_node->node_lock); [ 546.449751][T14118] lock(nr_neigh_list_lock); [ 546.456948][T14118] lock(nr_node_list_lock); [ 546.461536][T14118] [ 546.461536][T14118] *** DEADLOCK *** [ 546.461536][T14118] [ 546.469676][T14118] 2 locks held by syz.4.3533/14118: [ 546.474871][T14118] #0: ffffffff8e50b968 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x4f5/0xf70 [ 546.483592][T14118] #1: ffffffff8e653878 (nr_neigh_list_lock){+...}-{2:2}, at: nr_rt_device_down+0x24/0x7b0 [ 546.493699][T14118] [ 546.493699][T14118] stack backtrace: [ 546.499602][T14118] CPU: 0 PID: 14118 Comm: syz.4.3533 Not tainted 6.1.126-syzkaller #0 [ 546.507848][T14118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 546.517997][T14118] Call Trace: [ 546.521275][T14118] [ 546.524205][T14118] dump_stack_lvl+0x1e3/0x2cb [ 546.528903][T14118] ? nf_tcp_handle_invalid+0x642/0x642 [ 546.534378][T14118] ? print_circular_bug+0x12b/0x1a0 [ 546.539585][T14118] check_noncircular+0x2fa/0x3b0 [ 546.544527][T14118] ? add_chain_block+0x850/0x850 [ 546.549469][T14118] ? lockdep_lock+0x11f/0x2a0 [ 546.554156][T14118] ? mark_lock+0x9a/0x340 [ 546.558511][T14118] ? _find_first_zero_bit+0xd0/0x100 [ 546.563826][T14118] validate_chain+0x1661/0x5950 [ 546.568691][T14118] ? print_irqtrace_events+0x210/0x210 [ 546.574179][T14118] ? reacquire_held_locks+0x660/0x660 [ 546.579563][T14118] ? try_to_del_timer_sync+0x264/0x2f0 [ 546.585032][T14118] ? reacquire_held_locks+0x660/0x660 [ 546.590431][T14118] ? timer_delete+0x2f0/0x2f0 [ 546.595127][T14118] ? reacquire_held_locks+0x660/0x660 [ 546.600508][T14118] ? timer_delete_sync+0x129/0x2f0 [ 546.605629][T14118] ? timer_delete_sync+0x156/0x2f0 [ 546.610751][T14118] ? timer_delete_sync+0x24b/0x2f0 [ 546.615869][T14118] ? try_to_del_timer_sync+0x2f0/0x2f0 [ 546.621336][T14118] ? mark_lock+0x9a/0x340 [ 546.625683][T14118] __lock_acquire+0x125b/0x1f80 [ 546.630555][T14118] lock_acquire+0x1f8/0x5a0 [ 546.635073][T14118] ? nr_rt_device_down+0xb1/0x7b0 [ 546.640124][T14118] ? read_lock_is_recursive+0x10/0x10 [ 546.645508][T14118] ? nr_rt_device_down+0xb1/0x7b0 [ 546.650818][T14118] ? __bpf_trace_softirq+0x10/0x10 [ 546.655943][T14118] ? __rwlock_init+0x140/0x140 [ 546.660707][T14118] ? lockdep_hardirqs_on+0x94/0x130 [ 546.665913][T14118] ? nr_rt_device_down+0xb1/0x7b0 [ 546.671030][T14118] _raw_spin_lock_bh+0x31/0x40 [ 546.675811][T14118] ? nr_rt_device_down+0xb1/0x7b0 [ 546.680850][T14118] nr_rt_device_down+0xb1/0x7b0 [ 546.685736][T14118] ? nr_device_event+0x123/0x140 [ 546.690681][T14118] ? do_raw_spin_unlock+0x137/0x8a0 [ 546.695882][T14118] ? br_switchdev_event+0x490/0x490 [ 546.701082][T14118] ? nr_device_event+0x88/0x140 [ 546.705950][T14118] nr_device_event+0x12b/0x140 [ 546.710719][T14118] raw_notifier_call_chain+0xd0/0x170 [ 546.716099][T14118] __dev_notify_flags+0x304/0x610 [ 546.721134][T14118] ? __dev_change_flags+0x6e0/0x6e0 [ 546.726336][T14118] ? __dev_change_flags+0x505/0x6e0 [ 546.731545][T14118] ? dev_get_flags+0x1c0/0x1c0 [ 546.736330][T14118] ? trace_raw_output_contention_end+0xd0/0xd0 [ 546.742497][T14118] dev_change_flags+0xe7/0x190 [ 546.747310][T14118] dev_ifsioc+0x177/0x1160 [ 546.751733][T14118] ? dev_ioctl+0xf70/0xf70 [ 546.756370][T14118] ? mutex_lock_nested+0x10/0x10 [ 546.761324][T14118] ? apparmor_capable+0x12e/0x190 [ 546.766354][T14118] ? full_name_hash+0x8f/0xe0 [ 546.771061][T14118] ? dev_load+0x1d/0x1e0 [ 546.775326][T14118] dev_ioctl+0x508/0xf70 [ 546.779588][T14118] ? get_user_ifreq+0x167/0x1f0 [ 546.784462][T14118] sock_do_ioctl+0x26b/0x450 [ 546.789061][T14118] ? sock_show_fdinfo+0xb0/0xb0 [ 546.793925][T14118] ? do_futex+0x3b5/0x490 [ 546.798260][T14118] ? security_bpf+0x7d/0xa0 [ 546.802779][T14118] sock_ioctl+0x47f/0x770 [ 546.807111][T14118] ? sock_poll+0x410/0x410 [ 546.811535][T14118] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 546.817531][T14118] ? print_irqtrace_events+0x210/0x210 [ 546.823000][T14118] ? print_irqtrace_events+0x210/0x210 [ 546.828508][T14118] ? bpf_lsm_file_ioctl+0x5/0x10 [ 546.833449][T14118] ? security_file_ioctl+0x7d/0xa0 [ 546.838561][T14118] ? sock_poll+0x410/0x410 [ 546.842982][T14118] __se_sys_ioctl+0xf1/0x160 [ 546.847577][T14118] do_syscall_64+0x3b/0xb0 [ 546.852008][T14118] ? clear_bhb_loop+0x45/0xa0 [ 546.856692][T14118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.862601][T14118] RIP: 0033:0x7f4843f85d29 [ 546.867053][T14118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.886761][T14118] RSP: 002b:00007f4844d37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 546.895182][T14118] RAX: ffffffffffffffda RBX: 00007f4844175fa0 RCX: 00007f4843f85d29 [ 546.903158][T14118] RDX: 0000000020000000 RSI: 0000000000008914 RDI: 0000000000000009 [ 546.911130][T14118] RBP: 00007f4844001b08 R08: 0000000000000000 R09: 0000000000000000 [ 546.919102][T14118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.927071][T14118] R13: 0000000000000000 R14: 00007f4844175fa0 R15: 00007ffd1f06f6f8 [ 546.935052][T14118] [ 547.009937][T14118] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20000