last executing test programs: 11.984596939s ago: executing program 0 (id=18160): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 11.818979555s ago: executing program 0 (id=18162): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 11.645405103s ago: executing program 0 (id=18165): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0xc, &(0x7f00000002c0)={0x0, 0x29, 0x8, 0x0, 0x20b}, &(0x7f0000000040), &(0x7f00000000c0)) 11.480019009s ago: executing program 0 (id=18168): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 11.310828916s ago: executing program 0 (id=18171): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11.152670962s ago: executing program 0 (id=18173): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) 7.258902202s ago: executing program 4 (id=18209): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 6.98304484s ago: executing program 4 (id=18211): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00), 0x0, 0x4) get_mempolicy(&(0x7f0000000100), 0x0, 0x10001, &(0x7f0000001000/0x1000)=nil, 0x2) 6.758989903s ago: executing program 4 (id=18213): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bffd0", 0x3}], 0x1) 6.514171578s ago: executing program 4 (id=18215): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 4.998274809s ago: executing program 1 (id=18219): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x54404d0a08a4d8, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 4.19457002s ago: executing program 1 (id=18220): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 4.064437922s ago: executing program 1 (id=18221): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000000200), 0x1, 0x4) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2}, 0x24008004) 2.687045191s ago: executing program 4 (id=18225): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x80, @local}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000800)='~', 0x1}], 0x1}, 0x0) 2.350420385s ago: executing program 4 (id=18228): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) gettid() 2.18983496s ago: executing program 3 (id=18229): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.638065486s ago: executing program 2 (id=18231): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 1.554501114s ago: executing program 1 (id=18232): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 1.39311197s ago: executing program 2 (id=18233): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0xe9d, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x9c}}, 0x44) 1.164402653s ago: executing program 3 (id=18234): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 1.111280949s ago: executing program 2 (id=18235): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) 857.753664ms ago: executing program 3 (id=18236): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000005c0)="f5", 0x1, 0x20000880, 0x0, 0x0) 856.969284ms ago: executing program 2 (id=18237): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c010000150001002cbd7000fbdbdf256401010100"/30], 0x15c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 591.425821ms ago: executing program 3 (id=18238): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00), 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000200), 0x1, 0x4) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x24008004) 539.387276ms ago: executing program 2 (id=18239): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) 301.37784ms ago: executing program 2 (id=18240): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0x11, &(0x7f0000000240)={0x0, 0x4000007, 0x0, {[0x800]}}, 0x0, 0x8, &(0x7f0000000200)) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) syz_usb_disconnect(0xffffffffffffffff) pidfd_send_signal(r6, 0x2, 0x0, 0x0) 301.19612ms ago: executing program 3 (id=18241): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) 275.688963ms ago: executing program 1 (id=18242): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) 42.407435ms ago: executing program 3 (id=18243): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xb}, 0xa) 0s ago: executing program 1 (id=18244): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0xe9d, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x9c}}, 0x44) kernel console output (not intermixed with test programs): cuous mode [ 1844.367447][ T1678] device batadv_slave_1 left promiscuous mode [ 1844.862286][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 1845.224736][ T1705] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13606'. [ 1845.654836][ T1716] device batadv_slave_1 entered promiscuous mode [ 1845.672685][ T1714] device batadv_slave_1 left promiscuous mode [ 1845.863258][ T1720] netlink: 120 bytes leftover after parsing attributes in process `syz.2.13612'. [ 1845.897788][ T1720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13612'. [ 1845.928393][ T1720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13612'. [ 1845.956470][ T1720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13612'. [ 1846.108185][ T1725] device batadv_slave_1 entered promiscuous mode [ 1846.136749][ T1724] device batadv_slave_1 left promiscuous mode [ 1846.847900][ T1741] 9pnet_fd: Insufficient options for proto=fd [ 1847.049464][ T1743] device batadv_slave_1 entered promiscuous mode [ 1847.122616][ T1742] device batadv_slave_1 left promiscuous mode [ 1847.274422][ T26] audit: type=1326 audit(1763348790.163:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1751 comm="syz.2.13627" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1387f8f6c9 code=0x0 [ 1848.424710][ T1782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13642'. [ 1853.026578][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.032989][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.788824][ T1881] device batadv_slave_1 entered promiscuous mode [ 1854.817964][ T1880] device batadv_slave_1 left promiscuous mode [ 1855.824532][ T1898] netlink: 68 bytes leftover after parsing attributes in process `syz.0.13697'. [ 1859.578358][ T1953] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13724'. [ 1860.688198][ T1985] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13738'. [ 1860.776218][ T1988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13739'. [ 1862.276822][ T2014] 9pnet_fd: Insufficient options for proto=fd [ 1862.517575][ T2016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13753'. [ 1863.383226][ T2024] device batadv_slave_1 entered promiscuous mode [ 1863.402696][ T2023] device batadv_slave_1 left promiscuous mode [ 1864.082840][ T2030] netlink: 120 bytes leftover after parsing attributes in process `syz.0.13762'. [ 1864.092046][ T2030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13762'. [ 1864.131260][ T2030] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13762'. [ 1864.192135][ T2030] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13762'. [ 1864.938903][ T2046] netlink: 68 bytes leftover after parsing attributes in process `syz.0.13768'. [ 1865.302037][ T2054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13773'. [ 1870.254312][ T2172] netlink: 68 bytes leftover after parsing attributes in process `syz.4.13820'. [ 1870.605655][ T26] audit: type=1326 audit(1763348813.493:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2180 comm="syz.3.13835" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2feab8f6c9 code=0x0 [ 1872.237850][ T2209] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13843'. [ 1882.007888][ T26] audit: type=1326 audit(1763348824.893:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2345 comm="syz.2.13908" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1387f8f6c9 code=0x0 [ 1882.318166][ T2350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13916'. [ 1883.947277][ T26] audit: type=1326 audit(1763348826.833:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2372 comm="syz.2.13927" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1387f8f6c9 code=0x0 [ 1886.434844][ T26] audit: type=1326 audit(1763348829.323:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2435 comm="syz.0.13950" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e1cf8f6c9 code=0x0 [ 1887.410303][ T26] audit: type=1326 audit(1763348830.293:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2469 comm="syz.2.13963" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1387f8f6c9 code=0x0 [ 1887.683635][ T2477] binder_alloc: 2476: binder_alloc_buf, no vma [ 1891.295966][ T26] audit: type=1326 audit(1763348834.183:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2507 comm="syz.0.13976" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e1cf8f6c9 code=0x0 [ 1891.693197][ T2514] binder_alloc: 2513: binder_alloc_buf, no vma [ 1894.953420][ T2576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14004'. [ 1901.526166][ T2709] netlink: 68 bytes leftover after parsing attributes in process `syz.2.14056'. [ 1902.263356][ T2723] binder: BINDER_SET_CONTEXT_MGR already set [ 1902.269782][ T2723] binder: 2721:2723 ioctl 4018620d 200000000040 returned -16 [ 1906.432250][ T2778] netlink: 68 bytes leftover after parsing attributes in process `syz.3.14082'. [ 1907.304858][ T2807] binder_alloc: 2804: binder_alloc_buf, no vma [ 1907.557061][ T2819] netlink: 68 bytes leftover after parsing attributes in process `syz.2.14095'. [ 1907.602100][ T2818] netlink: 120 bytes leftover after parsing attributes in process `syz.3.14096'. [ 1907.641983][ T2818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14096'. [ 1907.702171][ T2818] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14096'. [ 1907.732450][ T2818] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14096'. [ 1908.348670][ T2844] binder_alloc: 2843: binder_alloc_buf, no vma [ 1908.536150][ T2852] netlink: 68 bytes leftover after parsing attributes in process `syz.2.14108'. [ 1911.457036][ T2918] netlink: 120 bytes leftover after parsing attributes in process `syz.2.14142'. [ 1911.493340][ T2918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14142'. [ 1911.521066][ T2918] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14142'. [ 1911.547413][ T2918] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14142'. [ 1912.730632][ T2939] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14151'. [ 1912.861321][ T2937] syz.4.14150 (2937) used greatest stack depth: 18176 bytes left [ 1914.472493][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.478893][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.970218][ T2969] netlink: 68 bytes leftover after parsing attributes in process `syz.3.14166'. [ 1916.139166][ T2998] netlink: 68 bytes leftover after parsing attributes in process `syz.1.14179'. [ 1920.129382][ T3052] netlink: 'syz.3.14207': attribute type 16 has an invalid length. [ 1920.159840][ T3052] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.14207'. [ 1924.857503][ T26] audit: type=1326 audit(1763348867.743:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3145 comm="syz.4.14251" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb4cd8f6c9 code=0x0 [ 1934.489284][ T3284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14319'. [ 1934.763586][ T3288] netlink: 68 bytes leftover after parsing attributes in process `syz.0.14320'. [ 1935.897721][ T3306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14331'. [ 1936.318611][ T3311] netlink: 68 bytes leftover after parsing attributes in process `syz.2.14333'. [ 1937.578980][ T3343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14349'. [ 1938.960717][ T3380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14362'. [ 1940.061336][ T26] audit: type=1326 audit(1763348882.943:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3401 comm="syz.0.14372" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e1cf8f6c9 code=0x0 [ 1943.374502][ T26] audit: type=1326 audit(1763348886.263:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3487 comm="syz.0.14416" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e1cf8f6c9 code=0x0 [ 1943.878313][ T3505] netlink: 68 bytes leftover after parsing attributes in process `syz.1.14424'. [ 1944.271549][ T26] audit: type=1326 audit(1763348887.153:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3516 comm="syz.4.14429" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb4cd8f6c9 code=0x0 [ 1946.738546][ T3588] netlink: 68 bytes leftover after parsing attributes in process `syz.3.14465'. [ 1946.981728][ T3590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14466'. [ 1947.420825][ T3598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14469'. [ 1948.373562][ T3624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14479'. [ 1949.572567][ T3647] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14490'. [ 1949.872924][ T3655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14493'. [ 1951.697199][ T3706] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14517'. [ 1951.804551][ T3710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14519'. [ 1951.949180][ T3712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14520'. [ 1953.011176][ T3739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14533'. [ 1953.047752][ T3736] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14532'. [ 1953.626189][ T3745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14534'. [ 1956.982905][ T3800] netlink: 'syz.0.14561': attribute type 16 has an invalid length. [ 1957.035616][ T3800] netlink: 64130 bytes leftover after parsing attributes in process `syz.0.14561'. [ 1958.493617][ T3823] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14573'. [ 1959.898965][ T3851] netlink: 120 bytes leftover after parsing attributes in process `syz.1.14588'. [ 1959.977254][ T3851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14588'. [ 1960.017577][ T3851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14588'. [ 1960.062169][ T3851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14588'. [ 1964.088552][ T3918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14621'. [ 1964.274912][ T3922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14624'. [ 1965.223696][ T3947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14634'. [ 1965.504397][ T3959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14637'. [ 1966.451019][ T3989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14652'. [ 1968.753537][ T4035] netlink: 'syz.4.14673': attribute type 16 has an invalid length. [ 1968.777221][ T4035] netlink: 64130 bytes leftover after parsing attributes in process `syz.4.14673'. [ 1974.061327][ T4189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14745'. [ 1974.760136][ T4281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1974.769890][ T4281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1974.778036][ T4281] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1974.786504][ T4281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1974.812681][ T4281] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1974.821014][ T4281] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1975.214391][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 1975.543816][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 1975.550976][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1975.598254][ T4199] device bridge_slave_0 entered promiscuous mode [ 1975.623617][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 1975.631756][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1975.650326][ T4199] device bridge_slave_1 entered promiscuous mode [ 1975.896365][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1975.909709][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.916113][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1975.936293][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1976.105318][ T4381] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1976.148547][ T4199] team0: Port device team_slave_0 added [ 1976.203839][ T4199] team0: Port device team_slave_1 added [ 1976.278446][ T4381] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1976.431429][ T4381] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1976.483043][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1976.490091][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1976.592092][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1976.624586][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1976.631641][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1976.689378][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1976.731276][ T4381] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1976.862458][ T4275] Bluetooth: hci5: command 0x0409 tx timeout [ 1976.914376][ T4199] device hsr_slave_0 entered promiscuous mode [ 1976.958878][ T4199] device hsr_slave_1 entered promiscuous mode [ 1976.979990][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1976.998318][ T4199] Cannot create hsr debugfs directory [ 1978.069448][ T4241] netlink: 68 bytes leftover after parsing attributes in process `syz.0.14763'. [ 1978.378826][ T4199] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1978.403267][ T4199] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1978.474744][ T4199] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1978.545743][ T4199] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1978.942250][ T4275] Bluetooth: hci5: command 0x041b tx timeout [ 1979.014601][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1979.248191][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 1979.270488][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1979.300577][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1979.383119][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1979.413330][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1979.434802][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1979.441954][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1979.481613][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1979.518800][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1979.539376][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1979.546590][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1979.591898][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1979.641991][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1979.659126][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1979.676847][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1979.693836][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1979.753479][ T4381] device hsr_slave_0 left promiscuous mode [ 1979.776696][ T4381] device hsr_slave_1 left promiscuous mode [ 1979.830007][ T4381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1979.854621][ T4381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1979.876334][ T4381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1979.894589][ T4381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1979.919048][ T4381] device bridge_slave_1 left promiscuous mode [ 1979.948192][ T4381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1979.963710][ T4381] device bridge_slave_0 left promiscuous mode [ 1979.981486][ T4381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1980.143564][ T4381] device veth1_macvtap left promiscuous mode [ 1980.169858][ T4381] device veth0_macvtap left promiscuous mode [ 1980.190188][ T4381] device veth1_vlan left promiscuous mode [ 1980.209752][ T4381] device veth0_vlan left promiscuous mode [ 1980.420171][ T4278] netlink: 68 bytes leftover after parsing attributes in process `syz.4.14773'. [ 1981.027584][ T4275] Bluetooth: hci5: command 0x040f tx timeout [ 1981.913056][ T4381] team0 (unregistering): Port device team_slave_1 removed [ 1982.070878][ T4381] team0 (unregistering): Port device team_slave_0 removed [ 1982.242463][ T4381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1982.409276][ T4381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1983.102171][ T4275] Bluetooth: hci5: command 0x0419 tx timeout [ 1984.234331][ T4381] bond0 (unregistering): Released all slaves [ 1984.411331][ T4199] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1984.462544][ T4199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1984.510323][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1984.533067][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1984.563400][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1984.592744][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1984.622789][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1984.652692][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1984.672470][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1984.706725][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1985.213511][ T4318] netlink: 68 bytes leftover after parsing attributes in process `syz.1.14784'. [ 1985.253659][ T4321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14790'. [ 1985.706546][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1985.734528][T17622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1985.752372][T17622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1985.808735][T17622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1985.828611][T17622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1985.899123][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1985.923440][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1985.964967][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1985.995121][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1986.023266][ T4199] device veth0_vlan entered promiscuous mode [ 1986.062604][ T4199] device veth1_vlan entered promiscuous mode [ 1986.164344][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1986.208378][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1986.233325][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1986.272854][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1986.315312][ T4199] device veth0_macvtap entered promiscuous mode [ 1986.354780][ T4199] device veth1_macvtap entered promiscuous mode [ 1986.411897][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1986.482140][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.512687][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1986.562134][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.608152][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1986.649598][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.700636][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1986.743233][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.799034][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1986.845031][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1986.860244][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1986.906545][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1986.936896][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1986.968606][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1987.000065][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1987.052168][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1987.092156][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1987.127561][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1987.153477][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1987.188587][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1987.238363][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1987.277181][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1987.308414][T17622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1987.326873][T17622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1987.371639][ T4199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1987.401450][ T4199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1987.425495][ T4199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1987.459561][ T4199] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1987.721313][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1987.737354][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1987.798418][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1987.807703][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1987.831192][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1987.858033][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1992.091092][ T4417] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14829'. [ 1995.234593][ T4454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14847'. [ 1995.590776][ T4460] netlink: 'syz.0.14850': attribute type 16 has an invalid length. [ 1995.622158][ T4460] netlink: 64130 bytes leftover after parsing attributes in process `syz.0.14850'. [ 1998.983307][ T4486] netlink: 156 bytes leftover after parsing attributes in process `syz.4.14860'. [ 1999.012199][ T4486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14860'. [ 2000.378125][ T4512] netlink: 156 bytes leftover after parsing attributes in process `syz.2.14875'. [ 2000.412219][ T4512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14875'. [ 2006.593931][ T4586] netlink: 68 bytes leftover after parsing attributes in process `syz.0.14910'. [ 2009.138111][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2009.147800][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2009.162176][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2009.174313][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2009.181899][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2009.192657][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2009.602832][ T4629] netlink: 68 bytes leftover after parsing attributes in process `syz.1.14931'. [ 2009.866520][ T4381] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2010.025107][ T4381] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2010.179443][ T4381] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2010.223351][ T4623] chnl_net:caif_netlink_parms(): no params data found [ 2010.345020][ T4381] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2010.563221][ T4623] bridge0: port 1(bridge_slave_0) entered blocking state [ 2010.594653][ T4623] bridge0: port 1(bridge_slave_0) entered disabled state [ 2010.628108][ T4623] device bridge_slave_0 entered promiscuous mode [ 2010.651925][ T4623] bridge0: port 2(bridge_slave_1) entered blocking state [ 2010.684096][ T4623] bridge0: port 2(bridge_slave_1) entered disabled state [ 2010.703391][ T4623] device bridge_slave_1 entered promiscuous mode [ 2010.867654][ T4623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2010.912733][ T4623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2011.060754][ T4623] team0: Port device team_slave_0 added [ 2011.173595][ T4623] team0: Port device team_slave_1 added [ 2011.262460][ T4275] Bluetooth: hci1: command 0x0409 tx timeout [ 2011.284475][ T4623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2011.322170][ T4623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2011.425336][ T4623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2011.542766][ T4623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2011.549831][ T4623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2011.662745][ T4623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2011.975888][ T4623] device hsr_slave_0 entered promiscuous mode [ 2012.002951][ T4623] device hsr_slave_1 entered promiscuous mode [ 2012.033304][ T4623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2012.049167][ T4623] Cannot create hsr debugfs directory [ 2012.829796][ T4701] netlink: 120 bytes leftover after parsing attributes in process `syz.3.14957'. [ 2012.885249][ T4701] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14957'. [ 2013.315562][ T4381] device hsr_slave_0 left promiscuous mode [ 2013.342556][ T4275] Bluetooth: hci1: command 0x041b tx timeout [ 2013.399312][ T4381] device hsr_slave_1 left promiscuous mode [ 2013.406727][ T4381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2013.431718][ T4381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2013.471340][ T4381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2013.497922][ T4381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2013.562778][ T4381] device bridge_slave_1 left promiscuous mode [ 2013.569857][ T4381] bridge0: port 2(bridge_slave_1) entered disabled state [ 2013.608785][ T4381] device bridge_slave_0 left promiscuous mode [ 2013.620888][ T4381] bridge0: port 1(bridge_slave_0) entered disabled state [ 2013.716697][ T4381] device veth1_macvtap left promiscuous mode [ 2013.746511][ T4381] device veth0_macvtap left promiscuous mode [ 2013.757242][ T4381] device veth1_vlan left promiscuous mode [ 2013.778017][ T4381] device veth0_vlan left promiscuous mode [ 2015.018334][ T4381] team0 (unregistering): Port device team_slave_1 removed [ 2015.132575][ T4381] team0 (unregistering): Port device team_slave_0 removed [ 2015.240355][ T4381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2015.343402][ T4381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2015.422193][ T4275] Bluetooth: hci1: command 0x040f tx timeout [ 2016.470877][ T4381] bond0 (unregistering): Released all slaves [ 2017.064585][ T4623] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2017.121514][ T4623] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2017.158482][ T4623] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2017.191966][ T4760] netlink: 120 bytes leftover after parsing attributes in process `syz.1.14984'. [ 2017.192750][ T4623] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2017.242151][ T4760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14984'. [ 2017.502269][ T4275] Bluetooth: hci1: command 0x0419 tx timeout [ 2017.698786][ T4623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2017.741724][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2017.762801][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2017.808282][ T4623] 8021q: adding VLAN 0 to HW filter on device team0 [ 2017.863684][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2017.883336][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2017.917370][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 2017.924578][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2017.983759][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2018.013936][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2018.033163][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2018.053124][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 2018.060322][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2018.108840][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2018.141404][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2018.174637][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2018.220246][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2018.263854][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2018.288958][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2018.314920][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2018.351467][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2018.370839][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2018.416594][ T4623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2018.453380][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2018.481600][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2018.492545][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2018.922309][ T4821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15003'. [ 2019.294194][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2019.313678][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2019.338722][ T4623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2019.565162][ T4841] netlink: 120 bytes leftover after parsing attributes in process `syz.0.15011'. [ 2019.584628][ T4841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15011'. [ 2020.368701][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2020.393528][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2020.445823][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2020.465843][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2020.495133][ T4623] device veth0_vlan entered promiscuous mode [ 2020.510360][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2020.535094][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2020.558924][ T4623] device veth1_vlan entered promiscuous mode [ 2020.619115][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2020.634177][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2020.653382][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2020.676729][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2020.703386][ T4623] device veth0_macvtap entered promiscuous mode [ 2020.743123][ T4623] device veth1_macvtap entered promiscuous mode [ 2020.779175][ T4623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2020.805597][ T4623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.826448][ T4623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2020.868246][ T4623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.902311][ T4623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2020.929112][ T4623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.949560][ T4623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2020.986573][ T4623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2021.013783][ T4623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2021.052477][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2021.072931][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2021.102956][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2021.135326][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2021.161156][ T4623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2021.192248][ T4623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2021.212548][ T4623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2021.238840][ T4623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2021.283620][ T4623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2021.327156][ T4623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2021.357857][ T4623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2021.388867][ T4623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2021.418505][ T4623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2021.445660][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2021.465643][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2021.493495][ T4623] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2021.522877][ T4623] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2021.531651][ T4623] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2021.582363][ T4623] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2021.782786][ T4381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2021.807924][ T4381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2021.839476][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2021.874492][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2021.899452][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2021.930649][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2022.537451][ T4910] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15042'. [ 2023.420447][ T4935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15054'. [ 2023.707357][ T4939] netlink: 68 bytes leftover after parsing attributes in process `syz.0.15057'. [ 2025.911919][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2025.921827][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2025.943117][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2025.952875][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2025.961839][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2025.969824][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2026.633619][ T4985] chnl_net:caif_netlink_parms(): no params data found [ 2027.251930][T10257] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2027.359810][ T4985] bridge0: port 1(bridge_slave_0) entered blocking state [ 2027.367417][ T4985] bridge0: port 1(bridge_slave_0) entered disabled state [ 2027.382914][ T4985] device bridge_slave_0 entered promiscuous mode [ 2027.479519][T10257] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2027.602432][ T4985] bridge0: port 2(bridge_slave_1) entered blocking state [ 2027.609607][ T4985] bridge0: port 2(bridge_slave_1) entered disabled state [ 2027.670022][ T4985] device bridge_slave_1 entered promiscuous mode [ 2027.861835][T10257] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2027.891701][ T4985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2027.931021][ T4985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2028.005271][T10257] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2028.068562][ T4275] Bluetooth: hci3: command 0x0409 tx timeout [ 2028.168813][ T4985] team0: Port device team_slave_0 added [ 2028.255862][ T4985] team0: Port device team_slave_1 added [ 2028.405223][ T4985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2028.415741][ T4985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2028.498063][ T4985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2028.531866][ T4985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2028.572053][ T4985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2028.622346][ T4985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2028.688643][ T5002] netlink: 'syz.0.15083': attribute type 16 has an invalid length. [ 2028.725812][ T5002] netlink: 64130 bytes leftover after parsing attributes in process `syz.0.15083'. [ 2028.983688][ T4985] device hsr_slave_0 entered promiscuous mode [ 2029.013101][ T4985] device hsr_slave_1 entered promiscuous mode [ 2029.062886][ T4985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2029.070530][ T4985] Cannot create hsr debugfs directory [ 2030.142181][ T4275] Bluetooth: hci3: command 0x041b tx timeout [ 2030.478462][T10257] device hsr_slave_0 left promiscuous mode [ 2030.509442][T10257] device hsr_slave_1 left promiscuous mode [ 2030.544317][T10257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2030.551802][T10257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2030.588574][T10257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2030.621852][T10257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2030.642954][T10257] device bridge_slave_1 left promiscuous mode [ 2030.662377][T10257] bridge0: port 2(bridge_slave_1) entered disabled state [ 2030.681965][T10257] device bridge_slave_0 left promiscuous mode [ 2030.688311][T10257] bridge0: port 1(bridge_slave_0) entered disabled state [ 2030.813246][T10257] device veth1_macvtap left promiscuous mode [ 2030.828533][T10257] device veth0_macvtap left promiscuous mode [ 2030.839544][T10257] device veth1_vlan left promiscuous mode [ 2030.871430][T10257] device veth0_vlan left promiscuous mode [ 2032.222765][ T4275] Bluetooth: hci3: command 0x040f tx timeout [ 2032.675730][T10257] team0 (unregistering): Port device team_slave_1 removed [ 2032.863917][T10257] team0 (unregistering): Port device team_slave_0 removed [ 2033.053111][T10257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2033.252567][T10257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2034.302316][ T4275] Bluetooth: hci3: command 0x0419 tx timeout [ 2034.471623][T10257] bond0 (unregistering): Released all slaves [ 2034.593387][ T5059] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2034.652107][ T5059] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2034.702290][ T5059] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2034.810629][ T4985] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2034.840971][ T4985] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2034.902751][ T4985] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2034.941711][ T4985] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2035.342535][ T4985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2035.425454][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2035.452605][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2035.499937][ T4985] 8021q: adding VLAN 0 to HW filter on device team0 [ 2035.549796][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2035.562931][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2035.574930][T10257] bridge0: port 1(bridge_slave_0) entered blocking state [ 2035.582125][T10257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2035.641413][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2035.653016][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2035.692684][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2035.715851][T10257] bridge0: port 2(bridge_slave_1) entered blocking state [ 2035.723068][T10257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2035.733280][ T5105] netlink: 68 bytes leftover after parsing attributes in process `syz.0.15117'. [ 2035.782552][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2035.833623][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2035.853396][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2035.892986][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2035.923725][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2035.953172][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2036.000046][ T4985] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2036.042347][ T4985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2036.093767][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2036.104235][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2036.133499][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2036.160912][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2036.193098][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2036.233338][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2037.108005][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2037.147158][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2037.175108][ T4985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2037.279149][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2037.314174][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2037.357299][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.363711][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.396179][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2037.410639][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2037.435517][ T4985] device veth0_vlan entered promiscuous mode [ 2037.452906][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2037.470301][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2037.521791][ T4985] device veth1_vlan entered promiscuous mode [ 2037.601004][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2037.617776][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2037.643865][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2037.705790][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2037.723521][ T4985] device veth0_macvtap entered promiscuous mode [ 2037.756110][ T4985] device veth1_macvtap entered promiscuous mode [ 2037.803965][ T4985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2037.822467][ T4985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2037.846996][ T4985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2037.882857][ T4985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2037.912144][ T4985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2037.952859][ T4985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2037.988835][ T4985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2038.020141][ T4985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2038.046741][ T4985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2038.066694][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2038.076326][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2038.090947][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2038.101832][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2038.129033][ T4985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2038.189596][ T4985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2038.229953][ T4985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2038.252132][ T4985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2038.272729][ T4985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2038.292066][ T4985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2038.317125][ T4985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2038.342360][ T4985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2038.380308][ T4985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2038.405281][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2038.423055][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2038.460519][ T4985] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2038.487137][ T4985] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2038.512110][ T4985] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2038.520872][ T4985] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2038.714568][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2038.748494][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2038.797875][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2038.823650][ T5163] netlink: 108 bytes leftover after parsing attributes in process `syz.0.15142'. [ 2038.841858][ T4381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2038.861194][ T4381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2038.880512][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2039.708033][ T5198] netlink: 68 bytes leftover after parsing attributes in process `syz.1.15157'. [ 2040.444307][ T5223] netlink: 'syz.4.15170': attribute type 16 has an invalid length. [ 2040.472675][ T5223] netlink: 64130 bytes leftover after parsing attributes in process `syz.4.15170'. [ 2040.565766][ T5225] 9pnet_fd: Insufficient options for proto=fd [ 2044.192863][ T5302] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15211'. [ 2044.447095][ T5311] netlink: 140 bytes leftover after parsing attributes in process `syz.0.15214'. [ 2044.835181][ T5326] netlink: 68 bytes leftover after parsing attributes in process `syz.4.15219'. [ 2045.743236][ T5350] netlink: 'syz.1.15230': attribute type 16 has an invalid length. [ 2045.804325][ T5350] netlink: 64130 bytes leftover after parsing attributes in process `syz.1.15230'. [ 2048.165457][ T5409] binder: 5408:5409 ioctl 4018620d 0 returned -22 [ 2048.277792][ T5411] 9pnet_fd: Insufficient options for proto=fd [ 2048.938326][ T5427] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15268'. [ 2049.951084][ T5450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15279'. [ 2057.520146][ T5584] binder: 5583:5584 ioctl c0306201 0 returned -14 [ 2058.437575][ T5601] netlink: 108 bytes leftover after parsing attributes in process `syz.1.15353'. [ 2058.833994][ T5609] 9pnet_fd: Insufficient options for proto=fd [ 2058.934381][ T5611] binder: 5610:5611 ioctl c0306201 0 returned -14 [ 2061.458952][ T5660] netlink: 108 bytes leftover after parsing attributes in process `syz.3.15382'. [ 2062.739548][ T5691] netlink: 108 bytes leftover after parsing attributes in process `syz.2.15396'. [ 2063.256878][ T5699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15400'. [ 2063.889987][ T5710] 9pnet_fd: Insufficient options for proto=fd [ 2068.835579][ T5754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15424'. [ 2069.701050][ T5765] netlink: 'syz.0.15431': attribute type 16 has an invalid length. [ 2069.729655][ T5765] netlink: 64130 bytes leftover after parsing attributes in process `syz.0.15431'. [ 2072.164877][ T5813] netlink: 108 bytes leftover after parsing attributes in process `syz.3.15455'. [ 2074.393252][ T5834] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15466'. [ 2076.162615][ T5858] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15477'. [ 2076.717936][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2076.727798][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2076.742325][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2076.751086][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2076.759968][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2076.768326][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2077.457440][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 2077.733343][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 2077.740493][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 2077.793275][ T5861] device bridge_slave_0 entered promiscuous mode [ 2077.854279][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 2077.892194][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 2077.916570][ T5861] device bridge_slave_1 entered promiscuous mode [ 2078.234197][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2078.248126][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2078.368867][T10257] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2078.419739][ T5861] team0: Port device team_slave_0 added [ 2078.465524][ T5861] team0: Port device team_slave_1 added [ 2078.572344][T10257] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2078.613191][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2078.620191][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2078.692781][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2078.748969][T10257] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2078.813226][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2078.827827][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2078.862346][ T4281] Bluetooth: hci4: command 0x0409 tx timeout [ 2078.917473][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2079.004305][T10257] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2079.146484][ T5861] device hsr_slave_0 entered promiscuous mode [ 2079.179845][ T5861] device hsr_slave_1 entered promiscuous mode [ 2079.205181][ T5861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2079.225403][ T5861] Cannot create hsr debugfs directory [ 2079.284875][ T5898] netlink: 'syz.1.15493': attribute type 16 has an invalid length. [ 2079.342812][ T5898] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.15493'. [ 2080.536439][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2080.652740][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2080.691569][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2080.783321][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2080.942210][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 2081.386352][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2081.489716][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2081.498474][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2081.703889][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 2081.728689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2081.740104][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2081.778697][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 2081.785919][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2081.812501][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2081.843153][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2081.870726][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2081.918085][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 2081.925304][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2081.987822][T10257] device hsr_slave_0 left promiscuous mode [ 2082.009201][T10257] device hsr_slave_1 left promiscuous mode [ 2082.019793][ T5945] netlink: 'syz.2.15505': attribute type 16 has an invalid length. [ 2082.032396][T10257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2082.039307][ T5945] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.15505'. [ 2082.039849][T10257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2082.131463][T10257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2082.140619][T10257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2082.201361][T10257] device bridge_slave_1 left promiscuous mode [ 2082.217834][T10257] bridge0: port 2(bridge_slave_1) entered disabled state [ 2082.251286][T10257] device bridge_slave_0 left promiscuous mode [ 2082.268028][T10257] bridge0: port 1(bridge_slave_0) entered disabled state [ 2082.349700][T10257] device veth1_macvtap left promiscuous mode [ 2082.359369][T10257] device veth0_macvtap left promiscuous mode [ 2082.377113][T10257] device veth1_vlan left promiscuous mode [ 2082.400649][T10257] device veth0_vlan left promiscuous mode [ 2083.022119][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 2084.251019][T10257] team0 (unregistering): Port device team_slave_1 removed [ 2084.429354][T10257] team0 (unregistering): Port device team_slave_0 removed [ 2084.579647][T10257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2084.740545][T10257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2085.102228][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 2086.225746][T10257] bond0 (unregistering): Released all slaves [ 2086.410948][T24105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2086.433363][T24105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2086.494570][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2086.516625][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2086.569266][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2086.642086][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2086.694906][ T5861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2086.734080][ T5861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2086.776772][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2086.801867][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2086.836297][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2086.865475][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2086.905252][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2086.936317][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2086.945124][ T6000] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15529'. [ 2087.924231][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2087.962518][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2088.009739][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2088.067842][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2088.091066][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2088.158113][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2088.183229][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2088.222560][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2088.253474][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2088.287025][ T5861] device veth0_vlan entered promiscuous mode [ 2088.345094][ T5861] device veth1_vlan entered promiscuous mode [ 2088.580497][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2088.599374][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2088.620825][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2088.650198][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2088.678136][ T5861] device veth0_macvtap entered promiscuous mode [ 2088.738859][ T5861] device veth1_macvtap entered promiscuous mode [ 2088.818840][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2088.843151][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2088.875995][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2088.903069][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2088.937891][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2088.960749][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2088.983175][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2089.016438][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2089.046521][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2089.068586][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2089.096936][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2089.110694][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2089.133216][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2089.163661][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2089.191012][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2089.212055][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2089.239979][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2089.277610][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2089.302021][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2089.311893][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2089.362034][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2089.403508][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2089.413590][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2089.445342][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2089.504597][ T5861] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2089.532092][ T5861] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2089.552279][ T5861] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2089.590022][ T5861] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2089.625074][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15545'. [ 2089.804235][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2089.855962][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2089.903585][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2089.940239][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2089.958854][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2089.985726][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2090.124954][ T6057] netlink: 68 bytes leftover after parsing attributes in process `syz.1.15550'. [ 2091.660616][ T6085] netlink: 68 bytes leftover after parsing attributes in process `syz.2.15562'. [ 2096.184165][ T6178] 9pnet_fd: Insufficient options for proto=fd [ 2097.089235][ T6196] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15614'. [ 2097.931779][ T6206] netlink: 'syz.0.15619': attribute type 16 has an invalid length. [ 2097.954530][ T6206] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.15619'. [ 2098.786321][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.794484][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2100.110672][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15631'. [ 2100.862184][ T4275] Bluetooth: hci5: command 0x0406 tx timeout [ 2101.198912][ T6251] ======================================================= [ 2101.198912][ T6251] WARNING: The mand mount option has been deprecated and [ 2101.198912][ T6251] and is ignored by this kernel. Remove the mand [ 2101.198912][ T6251] option from the mount to silence this warning. [ 2101.198912][ T6251] ======================================================= [ 2101.257561][ T6257] 9pnet_fd: Insufficient options for proto=fd [ 2101.449342][ T6262] binder: 6260:6262 ioctl 4018620d 0 returned -22 [ 2101.782571][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15645'. [ 2103.822284][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2103.831934][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2103.840423][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2103.878086][T16924] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2103.887458][T16924] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2103.899440][T16924] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2104.490066][ T6289] chnl_net:caif_netlink_parms(): no params data found [ 2104.804876][ T6289] bridge0: port 1(bridge_slave_0) entered blocking state [ 2104.822129][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state [ 2104.830496][ T6289] device bridge_slave_0 entered promiscuous mode [ 2104.839915][ T6289] bridge0: port 2(bridge_slave_1) entered blocking state [ 2104.847293][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state [ 2104.855669][ T6289] device bridge_slave_1 entered promiscuous mode [ 2104.946092][ T6289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2105.148763][ T6289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2105.303685][ T6289] team0: Port device team_slave_0 added [ 2105.376165][T10257] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2105.437800][ T6289] team0: Port device team_slave_1 added [ 2105.580624][T10257] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2105.622577][ T6289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2105.640801][ T6289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2105.742700][ T6289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2105.784078][T10257] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2105.815247][ T6289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2105.823385][ T6289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2105.888532][ T6289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2105.953915][T10257] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2105.982629][ T4275] Bluetooth: hci2: command 0x0409 tx timeout [ 2106.101586][ T6289] device hsr_slave_0 entered promiscuous mode [ 2106.117862][ T6289] device hsr_slave_1 entered promiscuous mode [ 2106.131520][ T6289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2106.148310][ T6289] Cannot create hsr debugfs directory [ 2107.522275][ T6289] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2107.551767][ T6289] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2107.643105][ T6289] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2107.680703][ T6289] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2108.062379][ T4275] Bluetooth: hci2: command 0x041b tx timeout [ 2108.545651][T10257] device hsr_slave_0 left promiscuous mode [ 2108.563983][ T6349] netlink: 'syz.3.15672': attribute type 16 has an invalid length. [ 2108.592146][ T6349] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.15672'. [ 2108.622219][T10257] device hsr_slave_1 left promiscuous mode [ 2108.633515][T10257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2108.652124][T10257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2108.682415][T10257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2108.689875][T10257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2108.722892][T10257] device bridge_slave_1 left promiscuous mode [ 2108.742369][T10257] bridge0: port 2(bridge_slave_1) entered disabled state [ 2108.770577][T10257] device bridge_slave_0 left promiscuous mode [ 2108.788555][T10257] bridge0: port 1(bridge_slave_0) entered disabled state [ 2108.871747][T10257] device veth1_macvtap left promiscuous mode [ 2108.882658][T10257] device veth0_macvtap left promiscuous mode [ 2108.902425][T10257] device veth1_vlan left promiscuous mode [ 2108.908310][T10257] device veth0_vlan left promiscuous mode [ 2109.054722][ T6353] 9pnet_fd: Insufficient options for proto=fd [ 2110.142182][T16924] Bluetooth: hci2: command 0x040f tx timeout [ 2111.023760][T10257] team0 (unregistering): Port device team_slave_1 removed [ 2111.126131][T10257] team0 (unregistering): Port device team_slave_0 removed [ 2111.197401][T10257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2111.267469][T10257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2111.880307][T10257] bond0 (unregistering): Released all slaves [ 2112.022760][ T6370] netlink: 108 bytes leftover after parsing attributes in process `syz.0.15678'. [ 2112.042793][ T6372] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2112.102164][ T6372] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2112.126204][ T6289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2112.141082][ T6372] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2112.183922][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2112.200895][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2112.222284][ T4275] Bluetooth: hci2: command 0x0419 tx timeout [ 2112.240394][ T6289] 8021q: adding VLAN 0 to HW filter on device team0 [ 2112.269462][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2112.311491][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2112.351015][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state [ 2112.358253][ T4381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2112.410501][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2112.424317][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2112.460356][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2112.482303][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state [ 2112.489503][ T4381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2112.505737][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2112.540238][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2112.575751][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2112.625482][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2112.652470][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2112.687533][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2112.723658][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2112.749556][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2112.795146][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2112.875457][ T6289] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2112.909809][ T6289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2112.933021][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2112.957448][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2113.845839][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2113.872264][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2113.928207][ T6289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2114.013803][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2114.044011][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2114.109434][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2114.130146][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2114.176219][ T6289] device veth0_vlan entered promiscuous mode [ 2114.193329][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2114.213635][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2114.248348][ T6289] device veth1_vlan entered promiscuous mode [ 2114.324979][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2114.344235][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2114.375681][ T6289] device veth0_macvtap entered promiscuous mode [ 2114.394264][ T6289] device veth1_macvtap entered promiscuous mode [ 2114.429775][ T6289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.451693][ T6289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.492040][ T6289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.512041][ T6289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.549621][ T6289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.572320][ T6289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.592104][ T6289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.624584][ T6289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.649900][ T6289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2114.671352][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2114.681233][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2114.700600][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2114.718285][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2114.727286][ T6437] netlink: 'syz.0.15705': attribute type 16 has an invalid length. [ 2114.739366][ T6437] netlink: 64130 bytes leftover after parsing attributes in process `syz.0.15705'. [ 2114.748878][ T6435] netlink: 108 bytes leftover after parsing attributes in process `syz.4.15704'. [ 2114.772520][ T6289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2114.817132][ T6289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.849872][ T6289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2114.892516][ T6289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.912049][ T6289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2114.952020][ T6289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.972195][ T6289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2114.993113][ T6289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.025092][ T6289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2115.050795][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2115.073565][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2115.106139][ T6289] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.125423][ T6289] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.155815][ T6289] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.187424][ T6289] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.369119][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2115.402335][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2115.444463][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2115.473139][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2115.502970][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2115.530135][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2115.712573][ T6454] binder: 6453:6454 ioctl 4018620d 0 returned -22 [ 2119.285750][ T6529] netlink: 'syz.2.15749': attribute type 16 has an invalid length. [ 2119.332147][ T6529] netlink: 64130 bytes leftover after parsing attributes in process `syz.2.15749'. [ 2119.785226][ T6542] netlink: 68 bytes leftover after parsing attributes in process `syz.4.15743'. [ 2120.531479][ T6565] netlink: 68 bytes leftover after parsing attributes in process `syz.3.15767'. [ 2120.717286][ T6569] kvm [6568]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x40b [ 2121.720167][ T6593] kvm [6587]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 2121.778290][ T6588] kvm [6587]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x7000003 [ 2121.809341][ T6588] kvm [6587]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x7ffffff [ 2122.677368][ T6600] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2123.051898][ T6604] netlink: 68 bytes leftover after parsing attributes in process `syz.0.15781'. [ 2124.783255][ T6622] netlink: 68 bytes leftover after parsing attributes in process `syz.0.15793'. [ 2125.199571][ T6630] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15795'. [ 2125.559893][ T6638] binder: 6637:6638 ioctl c0306201 0 returned -14 [ 2125.956280][ T6652] netlink: 68 bytes leftover after parsing attributes in process `syz.0.15804'. [ 2125.966037][ T6651] 9pnet_fd: Insufficient options for proto=fd [ 2126.701419][ T6674] netlink: 108 bytes leftover after parsing attributes in process `syz.0.15815'. [ 2126.767300][ T6678] netlink: 'syz.3.15817': attribute type 16 has an invalid length. [ 2126.795940][ T6678] netlink: 64130 bytes leftover after parsing attributes in process `syz.3.15817'. [ 2126.969347][ T6681] netlink: 68 bytes leftover after parsing attributes in process `syz.0.15818'. [ 2128.993139][ T6711] netlink: 108 bytes leftover after parsing attributes in process `syz.1.15829'. [ 2129.217841][ T6715] 9pnet_fd: Insufficient options for proto=fd [ 2130.047194][ T6741] 9pnet_fd: Insufficient options for proto=fd [ 2130.342440][ T6745] kvm [6744]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x0 [ 2131.582043][T16924] Bluetooth: hci1: command 0x0406 tx timeout [ 2135.930666][ T6843] 9pnet_fd: Insufficient options for proto=fd [ 2136.187446][ T6850] netlink: 68 bytes leftover after parsing attributes in process `syz.2.15898'. [ 2136.210803][ T6854] kvm [6853]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 2136.688115][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15906'. [ 2137.022965][ T6883] netlink: 68 bytes leftover after parsing attributes in process `syz.4.15912'. [ 2137.406960][ T6898] binder: 6897:6898 ioctl c0306201 0 returned -14 [ 2138.200334][ T6920] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15931'. [ 2139.255992][ T6950] netlink: 68 bytes leftover after parsing attributes in process `syz.1.15946'. [ 2139.554315][ T6959] misc userio: No port type given on /dev/userio [ 2142.834740][ T7005] kvm [7004]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x40b [ 2142.907589][ T7008] netlink: 'syz.2.15964': attribute type 16 has an invalid length. [ 2142.932235][ T7008] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.15964'. [ 2143.994849][ T7044] 9pnet_fd: Insufficient options for proto=fd [ 2145.003736][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16001'. [ 2151.801890][ T7195] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16057'. [ 2152.062175][ T4275] Bluetooth: hci3: command 0x0406 tx timeout [ 2152.094896][ T7201] 9pnet_fd: Insufficient options for proto=fd [ 2152.863422][ T7215] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16070'. [ 2154.176409][ T7247] netlink: 108 bytes leftover after parsing attributes in process `syz.4.16081'. [ 2154.859685][ T7270] misc userio: No port type given on /dev/userio [ 2155.925953][ T7304] 9pnet_fd: Insufficient options for proto=fd [ 2156.976123][ T7335] netlink: 'syz.1.16122': attribute type 16 has an invalid length. [ 2156.997285][ T7335] netlink: 63370 bytes leftover after parsing attributes in process `syz.1.16122'. [ 2158.209424][ T7367] 9pnet_fd: Insufficient options for proto=fd [ 2158.533061][ T7378] 9pnet_fd: Insufficient options for proto=fd [ 2159.208229][ T7394] 9pnet_fd: Insufficient options for proto=fd [ 2160.227895][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.234287][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2162.178282][ T7470] 9pnet_fd: Insufficient options for proto=fd [ 2163.709458][ T7492] netlink: 108 bytes leftover after parsing attributes in process `syz.2.16193'. [ 2168.648306][ T7591] misc userio: No port type given on /dev/userio [ 2170.251507][ T7629] 9pnet_fd: Insufficient options for proto=fd [ 2171.053767][ T7644] misc userio: No port type given on /dev/userio [ 2174.371165][ T7697] netlink: 108 bytes leftover after parsing attributes in process `syz.2.16288'. [ 2176.337571][ T7727] netlink: 108 bytes leftover after parsing attributes in process `syz.0.16301'. [ 2178.103163][ T7763] 9pnet_fd: Insufficient options for proto=fd [ 2180.438817][ T7837] netlink: 108 bytes leftover after parsing attributes in process `syz.2.16352'. [ 2180.636837][ T7842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16355'. [ 2182.703792][ T7884] misc userio: No port type given on /dev/userio [ 2184.975051][ T7941] misc userio: No port type given on /dev/userio [ 2185.486387][ T7956] 9pnet_fd: Insufficient options for proto=fd [ 2186.151832][ T7973] misc userio: No port type given on /dev/userio [ 2186.444247][ T7982] 9pnet_fd: Insufficient options for proto=fd [ 2189.343226][ T8003] misc userio: No port type given on /dev/userio [ 2190.095186][ T8015] 9pnet_fd: Insufficient options for proto=fd [ 2190.558761][ T8029] netlink: 108 bytes leftover after parsing attributes in process `syz.3.16434'. [ 2191.105490][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16451'. [ 2193.082030][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16464'. [ 2194.416348][ T8083] misc userio: No port type given on /dev/userio [ 2195.916565][ T8123] netlink: 56 bytes leftover after parsing attributes in process `syz.4.16488'. [ 2196.852782][ T8151] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16503'. [ 2197.786911][ T8173] 9pnet_fd: Insufficient options for proto=fd [ 2199.098967][ T8203] 9pnet_fd: Insufficient options for proto=fd [ 2202.500952][ T8237] 9pnet_fd: Insufficient options for proto=fd [ 2203.143523][ T8254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16553'. [ 2203.272338][ T4275] Bluetooth: hci4: command 0x0406 tx timeout [ 2204.378279][ T8306] 9pnet_fd: Insufficient options for proto=fd [ 2205.752142][ T8342] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16594'. [ 2206.830163][ T8361] netlink: 108 bytes leftover after parsing attributes in process `syz.4.16603'. [ 2207.077875][ T8363] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16607'. [ 2211.254743][ T8429] misc userio: No port type given on /dev/userio [ 2212.359602][ T8443] 9pnet_fd: Insufficient options for proto=fd [ 2214.556118][ T8483] syz.4.16660 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 2215.928013][ T8517] 9pnet_fd: Insufficient options for proto=fd [ 2216.960619][ T8547] netlink: 268 bytes leftover after parsing attributes in process `syz.4.16693'. [ 2221.665587][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.672013][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.341097][ T8652] netlink: 108 bytes leftover after parsing attributes in process `syz.3.16743'. [ 2228.000384][ T8725] 9pnet_fd: Insufficient options for proto=fd [ 2228.862063][T16924] Bluetooth: hci2: command 0x0406 tx timeout [ 2230.610010][ T8779] 9pnet_fd: Insufficient options for proto=fd [ 2235.173710][ T8827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16825'. [ 2235.420077][ T8834] 9pnet_fd: Insufficient options for proto=fd [ 2236.324144][ T8858] netlink: 108 bytes leftover after parsing attributes in process `syz.4.16839'. [ 2237.723229][ T8882] netlink: 108 bytes leftover after parsing attributes in process `syz.2.16850'. [ 2237.982825][ T8887] 9pnet_fd: Insufficient options for proto=fd [ 2239.218109][ T8904] netlink: 108 bytes leftover after parsing attributes in process `syz.4.16863'. [ 2243.685156][ T8974] 9pnet_fd: Insufficient options for proto=fd [ 2244.357594][ T8996] netlink: 108 bytes leftover after parsing attributes in process `syz.3.16902'. [ 2247.633703][ T9058] netlink: 108 bytes leftover after parsing attributes in process `syz.1.16933'. [ 2250.338339][ T9110] 9pnet_fd: Insufficient options for proto=fd [ 2251.951684][ T9147] misc userio: No port type given on /dev/userio [ 2252.354181][ T9153] random: crng reseeded on system resumption [ 2253.326873][ T9157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16978'. [ 2254.115800][ T9171] misc userio: No port type given on /dev/userio [ 2254.557356][ T9176] netlink: 140 bytes leftover after parsing attributes in process `syz.4.16982'. [ 2256.410020][ T9188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16994'. [ 2258.035845][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17006'. [ 2268.165246][ T9300] netlink: 140 bytes leftover after parsing attributes in process `syz.3.17048'. [ 2271.407724][ T9324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17060'. [ 2277.555629][ T9420] netlink: 140 bytes leftover after parsing attributes in process `syz.0.17106'. [ 2279.525904][ T9469] 9pnet_fd: Insufficient options for proto=fd [ 2283.106068][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.112484][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.197769][ T9552] netlink: 268 bytes leftover after parsing attributes in process `syz.1.17170'. [ 2285.278599][ T9583] netlink: 268 bytes leftover after parsing attributes in process `syz.4.17184'. [ 2285.382996][ T9585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17185'. [ 2285.615049][ T9589] netlink: 268 bytes leftover after parsing attributes in process `syz.0.17187'. [ 2289.043930][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17216'. [ 2290.493405][ T9685] netlink: 108 bytes leftover after parsing attributes in process `syz.3.17232'. [ 2292.148360][ T9712] netlink: 140 bytes leftover after parsing attributes in process `syz.3.17244'. [ 2293.108603][ T9737] netlink: 140 bytes leftover after parsing attributes in process `syz.3.17257'. [ 2293.247956][ T9742] 9pnet_fd: Insufficient options for proto=fd [ 2295.928355][ T9785] 9pnet_fd: Insufficient options for proto=fd [ 2301.843267][ T9842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17309'. [ 2303.243970][ T9871] netlink: 268 bytes leftover after parsing attributes in process `syz.3.17322'. [ 2304.955780][ T9898] netlink: 268 bytes leftover after parsing attributes in process `syz.0.17335'. [ 2315.822103][T10123] netlink: 268 bytes leftover after parsing attributes in process `syz.2.17441'. [ 2318.164564][T10142] netlink: 268 bytes leftover after parsing attributes in process `syz.3.17452'. [ 2319.173839][T10160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17460'. [ 2325.751219][T10208] netlink: 244 bytes leftover after parsing attributes in process `syz.2.17482'. [ 2329.339507][T10269] netlink: 268 bytes leftover after parsing attributes in process `syz.0.17511'. [ 2329.788602][T10283] netlink: 268 bytes leftover after parsing attributes in process `syz.4.17519'. [ 2330.043402][T30425] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 2330.130654][T10294] misc userio: No port type given on /dev/userio [ 2330.188899][T10298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17524'. [ 2330.231965][T30425] usb 1-1: Using ep0 maxpacket: 16 [ 2330.249292][T30425] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 2330.289086][T30425] usb 1-1: config 0 has no interface number 0 [ 2330.311766][T30425] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 2330.341480][T30425] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2330.372172][T30425] usb 1-1: Product: syz [ 2330.376401][T30425] usb 1-1: Manufacturer: syz [ 2330.381036][T30425] usb 1-1: SerialNumber: syz [ 2330.412871][T30425] usb 1-1: config 0 descriptor?? [ 2330.436449][T30425] hub 1-1:0.132: bad descriptor, ignoring hub [ 2330.455401][T30425] hub: probe of 1-1:0.132 failed with error -5 [ 2330.487457][T30425] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input6 [ 2330.729104][T10312] netlink: 268 bytes leftover after parsing attributes in process `syz.1.17531'. [ 2330.862511][T16919] usb 1-1: USB disconnect, device number 3 [ 2331.442567][T10340] netlink: 268 bytes leftover after parsing attributes in process `syz.1.17545'. [ 2331.924340][T10355] misc userio: No port type given on /dev/userio [ 2332.468172][T10379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17564'. [ 2332.717620][T10387] misc userio: No port type given on /dev/userio [ 2333.559791][T10420] misc userio: No port type given on /dev/userio [ 2336.461830][T10496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17622'. [ 2336.790876][T10508] misc userio: No port type given on /dev/userio [ 2337.093202][T10517] netlink: 268 bytes leftover after parsing attributes in process `syz.3.17631'. [ 2339.038994][T10581] netlink: 268 bytes leftover after parsing attributes in process `syz.1.17663'. [ 2339.896023][T10614] netlink: 268 bytes leftover after parsing attributes in process `syz.0.17678'. [ 2340.320150][T10626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17685'. [ 2344.339073][T10644] netlink: 268 bytes leftover after parsing attributes in process `syz.0.17692'. [ 2344.554916][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.561311][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2346.087877][T10677] netlink: 268 bytes leftover after parsing attributes in process `syz.2.17709'. [ 2348.098502][T10695] netlink: 268 bytes leftover after parsing attributes in process `syz.2.17720'. [ 2349.393281][T10723] netlink: 268 bytes leftover after parsing attributes in process `syz.0.17731'. [ 2354.244042][T10832] autofs4:pid:10832:autofs_fill_super: called with bogus options [ 2356.122762][T16924] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2356.132016][T16924] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2356.140366][T16924] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2356.161097][T16924] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2356.169930][T16924] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2356.177362][T16924] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2356.967911][T10861] chnl_net:caif_netlink_parms(): no params data found [ 2357.200796][T10884] netlink: 268 bytes leftover after parsing attributes in process `syz.2.17798'. [ 2357.346031][T10861] bridge0: port 1(bridge_slave_0) entered blocking state [ 2357.382822][T10861] bridge0: port 1(bridge_slave_0) entered disabled state [ 2357.400057][T10861] device bridge_slave_0 entered promiscuous mode [ 2357.501492][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2357.550302][T10861] bridge0: port 2(bridge_slave_1) entered blocking state [ 2357.567134][T10861] bridge0: port 2(bridge_slave_1) entered disabled state [ 2357.594774][T10861] device bridge_slave_1 entered promiscuous mode [ 2357.704937][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2357.814631][T10861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2357.900144][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2357.932858][T10861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2358.132866][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2358.177508][T10861] team0: Port device team_slave_0 added [ 2358.215736][T10861] team0: Port device team_slave_1 added [ 2358.222174][ T4275] Bluetooth: hci0: command 0x0409 tx timeout [ 2358.380980][T10861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2358.419080][T10861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2358.506422][T10861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2358.544303][T10861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2358.551295][T10861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2358.652290][T10861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2358.823297][T10861] device hsr_slave_0 entered promiscuous mode [ 2358.850797][T10861] device hsr_slave_1 entered promiscuous mode [ 2360.173236][T10861] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2360.196668][T10861] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2360.302106][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 2360.384975][T10861] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2360.424938][T10861] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2360.885320][ T46] device hsr_slave_0 left promiscuous mode [ 2360.926955][ T46] device hsr_slave_1 left promiscuous mode [ 2360.967515][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2360.981970][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2361.006396][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2361.020896][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2361.062780][ T46] device bridge_slave_1 left promiscuous mode [ 2361.069091][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 2361.096297][ T46] device bridge_slave_0 left promiscuous mode [ 2361.122267][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 2361.186718][ T46] device veth1_macvtap left promiscuous mode [ 2361.202173][ T46] device veth0_macvtap left promiscuous mode [ 2361.208336][ T46] device veth1_vlan left promiscuous mode [ 2361.237574][ T46] device veth0_vlan left promiscuous mode [ 2362.384070][ T4275] Bluetooth: hci0: command 0x040f tx timeout [ 2362.757821][ T46] team0 (unregistering): Port device team_slave_1 removed [ 2362.886824][ T46] team0 (unregistering): Port device team_slave_0 removed [ 2363.003721][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2363.179156][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2364.293243][ T46] bond0 (unregistering): Released all slaves [ 2364.461985][ T4275] Bluetooth: hci0: command 0x0419 tx timeout [ 2364.704999][T10861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2364.773534][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2364.803004][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2364.841277][T10861] 8021q: adding VLAN 0 to HW filter on device team0 [ 2364.888950][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2364.909937][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2364.956239][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state [ 2364.963489][ T4381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2365.013810][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2365.023663][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2365.041809][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2365.062625][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state [ 2365.069791][ T4381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2365.126494][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2365.167267][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2365.219488][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2365.258894][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2365.284932][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2365.307960][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2365.347140][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2365.370967][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2365.409611][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2365.466391][T10861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2365.510896][T10861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2365.540908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2365.560126][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2366.480838][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2366.522275][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2366.539908][T10861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2366.547457][ T4275] Bluetooth: hci0: command 0x0405 tx timeout [ 2367.521411][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2367.539395][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2367.590814][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2367.608509][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2367.631723][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2367.651125][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2367.671791][T10861] device veth0_vlan entered promiscuous mode [ 2367.702954][T10861] device veth1_vlan entered promiscuous mode [ 2367.784348][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2367.816351][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2367.845389][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2367.867127][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2367.904192][T10861] device veth0_macvtap entered promiscuous mode [ 2367.932415][T10861] device veth1_macvtap entered promiscuous mode [ 2367.977558][T10861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2368.008705][T10861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2368.029794][T10861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2368.052076][T10861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2368.076733][T10861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2368.098655][T10861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2368.118859][T10861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2368.140646][T10861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2368.164039][T10861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2368.199589][T10861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2368.221273][T10861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2368.262001][T10861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2368.292014][T10861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2368.327349][T10861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2368.349776][T10861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2368.371960][T10861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2368.413440][T10861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2368.434952][T10861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2368.450151][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2368.465035][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2368.483402][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2368.504877][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2368.523191][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2368.540678][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2368.585537][T10861] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2368.605236][T10861] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2368.632038][T10861] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2368.651095][T10861] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2368.849957][T10257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2368.862397][T10257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2368.881609][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2368.918680][ T4381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2368.930205][ T4381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2368.951509][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2370.983569][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2370.994257][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2371.012469][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2371.020949][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2371.029011][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2371.036369][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2371.071940][ T4342] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2371.272128][ T4342] usb 1-1: Using ep0 maxpacket: 16 [ 2371.280834][ T4342] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 2371.301970][ T4342] usb 1-1: config 0 has no interface number 0 [ 2371.320949][ T4342] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 2371.345753][ T4342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2371.368846][ T4342] usb 1-1: Product: syz [ 2371.381004][ T4342] usb 1-1: Manufacturer: syz [ 2371.412178][ T4342] usb 1-1: SerialNumber: syz [ 2371.468063][ T4342] usb 1-1: config 0 descriptor?? [ 2371.517345][ T4342] hub 1-1:0.132: bad descriptor, ignoring hub [ 2371.538347][ T4342] hub: probe of 1-1:0.132 failed with error -5 [ 2371.591037][ T4342] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input7 [ 2371.735434][T11104] chnl_net:caif_netlink_parms(): no params data found [ 2372.179623][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2372.247454][T11104] bridge0: port 1(bridge_slave_0) entered blocking state [ 2372.263113][T11104] bridge0: port 1(bridge_slave_0) entered disabled state [ 2372.271579][T11104] device bridge_slave_0 entered promiscuous mode [ 2372.306661][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2372.344796][T11104] bridge0: port 2(bridge_slave_1) entered blocking state [ 2372.362249][T11104] bridge0: port 2(bridge_slave_1) entered disabled state [ 2372.382125][T11104] device bridge_slave_1 entered promiscuous mode [ 2372.495879][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2372.592391][T11104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2372.626047][T11104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2372.708026][T11104] team0: Port device team_slave_0 added [ 2372.797130][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2372.843740][T11104] team0: Port device team_slave_1 added [ 2372.923234][T11104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2372.948904][T11104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2373.025328][T11104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2373.066280][T11104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2373.081644][T11104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2373.102402][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 2373.171675][T11104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2373.410592][T11104] device hsr_slave_0 entered promiscuous mode [ 2373.429119][T11104] device hsr_slave_1 entered promiscuous mode [ 2373.462094][T11104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2373.469740][T11104] Cannot create hsr debugfs directory [ 2374.920086][T11187] netlink: 268 bytes leftover after parsing attributes in process `syz.4.17909'. [ 2375.182155][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 2375.358907][T11104] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2375.403232][T11104] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2375.442898][T11104] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2375.666716][T11104] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2375.856715][ T11] device hsr_slave_0 left promiscuous mode [ 2375.882798][ T11] device hsr_slave_1 left promiscuous mode [ 2375.903969][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2375.911449][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2375.949557][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2375.980195][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2376.015846][ T11] device bridge_slave_1 left promiscuous mode [ 2376.032259][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 2376.046380][T11228] netlink: 268 bytes leftover after parsing attributes in process `syz.4.17923'. [ 2376.057154][ T11] device bridge_slave_0 left promiscuous mode [ 2376.066194][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 2376.124591][ T7] usb 1-1: USB disconnect, device number 4 [ 2376.164699][ T11] device veth1_macvtap left promiscuous mode [ 2376.179015][ T11] device veth0_macvtap left promiscuous mode [ 2376.199432][ T11] device veth1_vlan left promiscuous mode [ 2376.220475][ T11] device veth0_vlan left promiscuous mode [ 2377.049147][ T11] team0 (unregistering): Port device team_slave_1 removed [ 2377.116487][ T11] team0 (unregistering): Port device team_slave_0 removed [ 2377.191291][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2377.262157][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 2377.270181][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2377.764547][ T11] bond0 (unregistering): Released all slaves [ 2378.173757][T11104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2378.231830][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2378.241157][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2378.295253][T11104] 8021q: adding VLAN 0 to HW filter on device team0 [ 2378.318103][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2378.331265][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2378.382763][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state [ 2378.389934][ T4381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2378.433472][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2378.452780][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2378.472608][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2378.512932][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state [ 2378.520140][ T4381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2378.562710][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2378.598215][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2378.630861][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2378.684372][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2378.707817][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2378.743799][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2378.787329][T11104] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2378.842464][T11104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2378.877168][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2378.902986][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2378.922674][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2378.970864][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2378.981572][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2379.021194][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2379.342882][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 2379.882735][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2379.897061][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2379.926903][T11104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2379.986265][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2380.008686][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2380.060314][T11104] device veth0_vlan entered promiscuous mode [ 2380.077404][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2380.102828][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2380.127073][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2380.157511][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2380.177659][T11104] device veth1_vlan entered promiscuous mode [ 2380.244007][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2380.267240][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2380.299615][T11104] device veth0_macvtap entered promiscuous mode [ 2380.323967][T11104] device veth1_macvtap entered promiscuous mode [ 2380.376743][T11104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2380.411936][T11104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2380.421820][T11104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2380.467624][T11104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2380.487810][T11104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2380.514946][T11104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2380.545351][T11104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2380.581982][T11104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2380.603614][T11104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2380.614355][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2380.634078][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2380.654021][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2380.674282][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2380.696930][T11104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2380.722084][T11104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2380.751973][T11104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2380.769352][T11104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2380.790155][T11104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2380.811034][T11104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2380.841445][T11104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2380.876960][T11104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2380.893445][T11104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2380.921576][T11104] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2380.951601][T11104] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2380.974266][T11104] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2381.023242][T11104] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2381.055125][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2381.065062][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2381.227722][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2381.257267][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2381.295754][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2381.330630][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2381.355790][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2381.392975][T17622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2384.782083][T23844] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2384.972062][T23844] usb 2-1: Using ep0 maxpacket: 16 [ 2384.980035][T23844] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 2385.017080][T23844] usb 2-1: config 0 has no interface number 0 [ 2385.035412][T23844] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 2385.065185][T23844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2385.091895][T23844] usb 2-1: Product: syz [ 2385.102469][T23844] usb 2-1: Manufacturer: syz [ 2385.117317][T23844] usb 2-1: SerialNumber: syz [ 2385.138832][T23844] usb 2-1: config 0 descriptor?? [ 2385.158686][T23844] hub 2-1:0.132: bad descriptor, ignoring hub [ 2385.178686][T23844] hub: probe of 2-1:0.132 failed with error -5 [ 2385.212067][T23844] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input8 [ 2387.452368][T11405] netlink: 268 bytes leftover after parsing attributes in process `syz.3.17997'. [ 2388.812755][T11428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18008'. [ 2389.769637][ T4369] usb 2-1: USB disconnect, device number 7 [ 2390.283223][ T4369] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2390.389521][T11454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18021'. [ 2390.472105][ T4369] usb 2-1: Using ep0 maxpacket: 16 [ 2390.479400][ T4369] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 2390.498997][ T4369] usb 2-1: config 0 has no interface number 0 [ 2390.517561][ T4369] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 2390.535823][ T4369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2390.552555][ T4369] usb 2-1: Product: syz [ 2390.557572][ T4369] usb 2-1: Manufacturer: syz [ 2390.568828][ T4369] usb 2-1: SerialNumber: syz [ 2390.586245][ T4369] usb 2-1: config 0 descriptor?? [ 2390.602793][ T4369] hub 2-1:0.132: bad descriptor, ignoring hub [ 2390.626614][ T4369] hub: probe of 2-1:0.132 failed with error -5 [ 2390.639228][ T4369] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input9 [ 2391.142414][T23844] usb 2-1: USB disconnect, device number 8 [ 2395.269853][T11500] netlink: 268 bytes leftover after parsing attributes in process `syz.3.18044'. [ 2396.224435][T11530] netlink: 268 bytes leftover after parsing attributes in process `syz.1.18057'. [ 2405.030071][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2405.040356][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2405.057294][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2405.065455][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2405.074363][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2405.081818][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2405.410290][ T4381] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2405.599466][ T4381] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2405.664574][T11784] chnl_net:caif_netlink_parms(): no params data found [ 2405.751363][ T4381] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2405.895232][ T4381] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2405.984526][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2405.990940][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.129025][T11784] bridge0: port 1(bridge_slave_0) entered blocking state [ 2406.165388][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 2406.198441][T11784] device bridge_slave_0 entered promiscuous mode [ 2406.252443][T11784] bridge0: port 2(bridge_slave_1) entered blocking state [ 2406.268356][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 2406.287751][T11784] device bridge_slave_1 entered promiscuous mode [ 2406.428050][T11784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2406.474038][T11784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2406.627434][T11784] team0: Port device team_slave_0 added [ 2406.791340][T11784] team0: Port device team_slave_1 added [ 2406.987421][T11784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2407.015701][T11784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2407.081089][T11784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2407.112271][ T4275] Bluetooth: hci3: command 0x0409 tx timeout [ 2407.219255][T11784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2407.232247][T11784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2407.312032][T11784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2407.631205][T11784] device hsr_slave_0 entered promiscuous mode [ 2407.655504][T11784] device hsr_slave_1 entered promiscuous mode [ 2407.702110][T11784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2407.720710][T11784] Cannot create hsr debugfs directory [ 2408.770088][ T4381] device hsr_slave_0 left promiscuous mode [ 2408.782672][ T4381] device hsr_slave_1 left promiscuous mode [ 2408.802296][ T4381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2408.820017][ T4381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2408.841061][ T4381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2408.870681][ T4381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2408.898066][ T4381] device bridge_slave_1 left promiscuous mode [ 2408.906757][ T4381] bridge0: port 2(bridge_slave_1) entered disabled state [ 2408.933313][ T4381] device bridge_slave_0 left promiscuous mode [ 2408.960469][ T4381] bridge0: port 1(bridge_slave_0) entered disabled state [ 2409.040898][ T4381] device veth1_macvtap left promiscuous mode [ 2409.078403][ T4381] device veth0_macvtap left promiscuous mode [ 2409.114067][ T4381] device veth1_vlan left promiscuous mode [ 2409.137641][ T4381] device veth0_vlan left promiscuous mode [ 2409.182541][ T4275] Bluetooth: hci3: command 0x041b tx timeout [ 2410.805665][ T4381] team0 (unregistering): Port device team_slave_1 removed [ 2410.950789][ T4381] team0 (unregistering): Port device team_slave_0 removed [ 2411.059687][ T4381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2411.168885][ T4381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2411.268618][ T4275] Bluetooth: hci3: command 0x040f tx timeout [ 2412.129893][ T4381] bond0 (unregistering): Released all slaves [ 2412.889041][T11784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2412.939340][T11784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2412.980331][T11784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2413.039335][T11784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2413.341918][ T4275] Bluetooth: hci3: command 0x0419 tx timeout [ 2413.434066][T11784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2413.477013][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2413.490461][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2413.525456][T11784] 8021q: adding VLAN 0 to HW filter on device team0 [ 2413.589790][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2413.620626][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2413.642828][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state [ 2413.650021][ T4381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2413.692400][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2413.721734][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2413.757840][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state [ 2413.765081][ T4381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2413.841539][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2413.864475][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2413.883774][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2413.932256][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2413.971152][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2414.012933][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2414.050806][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2414.082864][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2414.116479][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2414.143693][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2414.162821][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2414.171578][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2414.198522][T11784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2414.417321][T11964] netlink: 268 bytes leftover after parsing attributes in process `syz.2.18237'. [ 2415.064075][T11784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2415.072525][T17622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2415.080476][T17622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2415.165427][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2415.197190][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2415.246481][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2415.262848][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2415.274673][T11784] device veth0_vlan entered promiscuous mode [ 2415.291497][T11990] ------------[ cut here ]------------ [ 2415.297375][T11990] WARNING: CPU: 0 PID: 11990 at net/sched/sch_taprio.c:1020 taprio_get_start_time+0x139/0x160 [ 2415.307834][T11990] Modules linked in: [ 2415.311787][T11990] CPU: 0 PID: 11990 Comm: syz.1.18244 Not tainted syzkaller #0 [ 2415.319422][T11990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2415.329575][T11990] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 2415.335741][T11990] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 1c c9 7c f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 87 99 2c f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 2415.355466][T11990] RSP: 0018:ffffc900038f6d88 EFLAGS: 00010287 [ 2415.361628][T11990] RAX: ffffffff88543cd9 RBX: ffffc900038f6e98 RCX: 0000000000080000 [ 2415.369698][T11990] RDX: ffffc9000de61000 RSI: 00000000000013da RDI: 00000000000013db [ 2415.377774][T11990] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff215c472 [ 2415.385831][T11990] R10: fffffbfff215c472 R11: 1ffffffff215c471 R12: 00000232580d593f [ 2415.393891][T11990] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2415.401955][T11990] FS: 00007fca473c46c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2415.410946][T11990] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2415.417883][T11990] CR2: 0000561bdf539950 CR3: 0000000057095000 CR4: 00000000003506f0 [ 2415.425965][T11990] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2415.434025][T11990] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2415.442079][T11990] Call Trace: [ 2415.445399][T11990] [ 2415.448374][T11990] taprio_change+0x3daa/0x50f0 [ 2415.453255][T11990] ? taprio_destroy+0x4b0/0x4b0 [ 2415.458153][T11990] ? qdisc_create+0x7cb/0x1090 [ 2415.463181][T11990] ? ____sys_sendmsg+0x59b/0x970 [ 2415.468245][T11990] ? ___sys_sendmsg+0x21c/0x290 [ 2415.473185][T11990] ? __se_sys_sendmsg+0x19e/0x270 [ 2415.478259][T11990] ? do_syscall_64+0x4c/0xa0 [ 2415.482964][T11990] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2415.489137][T11990] ? qdisc_alloc+0x95/0xa50 [ 2415.493746][T11990] ? fifo_init+0x3ab/0x650 [ 2415.498281][T11990] ? qdisc_peek_head+0x40/0x40 [ 2415.503143][T11990] ? qdisc_alloc+0x77a/0xa50 [ 2415.507793][T11990] ? mutex_is_locked+0xe/0x40 [ 2415.512689][T11990] ? taprio_peek+0x590/0x590 [ 2415.517323][T11990] qdisc_create+0x7cb/0x1090 [ 2415.522016][T11990] ? qdisc_notify+0x370/0x370 [ 2415.526752][T11990] tc_modify_qdisc+0xb2f/0x1cc0 [ 2415.531679][T11990] ? qdisc_offload_query_caps+0x140/0x140 [ 2415.537531][T11990] ? qdisc_offload_query_caps+0x140/0x140 [ 2415.543341][T11990] ? rtnetlink_rcv_msg+0x1d8/0xed0 [ 2415.548575][T11990] rtnetlink_rcv_msg+0x79b/0xed0 [ 2415.553642][T11990] ? rtnetlink_bind+0x80/0x80 [ 2415.558434][T11990] ? __local_bh_enable_ip+0x12a/0x1b0 [ 2415.564014][T11990] ? lockdep_hardirqs_on+0x94/0x140 [ 2415.569270][T11990] ? __local_bh_enable_ip+0x12a/0x1b0 [ 2415.574869][T11990] ? _local_bh_enable+0xa0/0xa0 [ 2415.579820][T11990] ? __dev_queue_xmit+0x26f/0x3760 [ 2415.585085][T11990] ? __dev_queue_xmit+0x26f/0x3760 [ 2415.590247][T11990] ? __dev_queue_xmit+0x15c9/0x3760 [ 2415.595562][T11990] ? __dev_queue_xmit+0x26f/0x3760 [ 2415.600724][T11990] ? netdev_core_pick_tx+0x340/0x340 [ 2415.606150][T11990] ? ref_tracker_free+0x630/0x7c0 [ 2415.611309][T11990] ? refcount_inc+0x70/0x70 [ 2415.616037][T11990] ? __copy_skb_header+0x417/0x5a0 [ 2415.621230][T11990] ? __skb_clone+0x480/0x790 [ 2415.625967][T11990] netlink_rcv_skb+0x1de/0x420 [ 2415.630860][T11990] ? rtnetlink_bind+0x80/0x80 [ 2415.635661][T11990] ? netlink_ack+0x1100/0x1100 [ 2415.640490][T11990] ? netlink_deliver_tap+0x2e/0x1b0 [ 2415.645817][T11990] netlink_unicast+0x74d/0x8d0 [ 2415.650648][T11990] netlink_sendmsg+0x89e/0xbc0 [ 2415.655537][T11990] ? netlink_getsockopt+0x540/0x540 [ 2415.660797][T11990] ? aa_sock_msg_perm+0x94/0x150 [ 2415.665969][T11990] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2415.671356][T11990] ? security_socket_sendmsg+0x7c/0xa0 [ 2415.677022][T11990] ? netlink_getsockopt+0x540/0x540 [ 2415.682313][T11990] ____sys_sendmsg+0x59b/0x970 [ 2415.687133][T11990] ? __sys_sendmsg_sock+0x30/0x30 [ 2415.692266][T11990] ? __import_iovec+0x315/0x500 [ 2415.697282][T11990] ? import_iovec+0x6f/0xa0 [ 2415.701889][T11990] ___sys_sendmsg+0x21c/0x290 [ 2415.706628][T11990] ? __sys_sendmsg+0x270/0x270 [ 2415.711482][T11990] ? __fdget+0x17c/0x200 [ 2415.715871][T11990] __se_sys_sendmsg+0x19e/0x270 [ 2415.720784][T11990] ? __se_sys_futex+0x14a/0x440 [ 2415.725875][T11990] ? __x64_sys_sendmsg+0x80/0x80 [ 2415.730886][T11990] ? lockdep_hardirqs_on+0x94/0x140 [ 2415.736201][T11990] do_syscall_64+0x4c/0xa0 [ 2415.740666][T11990] ? clear_bhb_loop+0x60/0xb0 [ 2415.745448][T11990] ? clear_bhb_loop+0x60/0xb0 [ 2415.750176][T11990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2415.756177][T11990] RIP: 0033:0x7fca4658f6c9 [ 2415.760664][T11990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2415.780560][T11990] RSP: 002b:00007fca473c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2415.789071][T11990] RAX: ffffffffffffffda RBX: 00007fca467e5fa0 RCX: 00007fca4658f6c9 [ 2415.797188][T11990] RDX: 0000000000000044 RSI: 00002000000007c0 RDI: 0000000000000007 [ 2415.805264][T11990] RBP: 00007fca46611f91 R08: 0000000000000000 R09: 0000000000000000 [ 2415.813344][T11990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2415.821454][T11990] R13: 00007fca467e6038 R14: 00007fca467e5fa0 R15: 00007fff31c81598 [ 2415.829651][T11990] [ 2415.832764][T11990] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2415.840068][T11990] CPU: 0 PID: 11990 Comm: syz.1.18244 Not tainted syzkaller #0 [ 2415.847632][T11990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2415.857701][T11990] Call Trace: [ 2415.860996][T11990] [ 2415.863939][T11990] dump_stack_lvl+0x168/0x22e [ 2415.868639][T11990] ? memcpy+0x3c/0x60 [ 2415.872717][T11990] ? show_regs_print_info+0x12/0x12 [ 2415.877935][T11990] ? load_image+0x3b0/0x3b0 [ 2415.882484][T11990] panic+0x2c9/0x710 [ 2415.886403][T11990] ? bpf_jit_dump+0xd0/0xd0 [ 2415.890941][T11990] __warn+0x2f8/0x4f0 [ 2415.894938][T11990] ? taprio_get_start_time+0x139/0x160 [ 2415.900420][T11990] ? taprio_get_start_time+0x139/0x160 [ 2415.905985][T11990] report_bug+0x2ba/0x4f0 [ 2415.910388][T11990] ? taprio_get_start_time+0x139/0x160 [ 2415.915870][T11990] handle_bug+0x3a/0x70 [ 2415.920043][T11990] exc_invalid_op+0x16/0x40 [ 2415.924579][T11990] asm_exc_invalid_op+0x16/0x20 [ 2415.929457][T11990] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 2415.935553][T11990] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 1c c9 7c f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 87 99 2c f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 2415.955182][T11990] RSP: 0018:ffffc900038f6d88 EFLAGS: 00010287 [ 2415.961263][T11990] RAX: ffffffff88543cd9 RBX: ffffc900038f6e98 RCX: 0000000000080000 [ 2415.969244][T11990] RDX: ffffc9000de61000 RSI: 00000000000013da RDI: 00000000000013db [ 2415.977230][T11990] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff215c472 [ 2415.985216][T11990] R10: fffffbfff215c472 R11: 1ffffffff215c471 R12: 00000232580d593f [ 2415.993202][T11990] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2416.001197][T11990] ? taprio_get_start_time+0x139/0x160 [ 2416.006686][T11990] ? taprio_get_start_time+0x139/0x160 [ 2416.012184][T11990] taprio_change+0x3daa/0x50f0 [ 2416.016979][T11990] ? taprio_destroy+0x4b0/0x4b0 [ 2416.021851][T11990] ? qdisc_create+0x7cb/0x1090 [ 2416.026643][T11990] ? ____sys_sendmsg+0x59b/0x970 [ 2416.031600][T11990] ? ___sys_sendmsg+0x21c/0x290 [ 2416.036477][T11990] ? __se_sys_sendmsg+0x19e/0x270 [ 2416.041693][T11990] ? do_syscall_64+0x4c/0xa0 [ 2416.046296][T11990] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2416.052379][T11990] ? qdisc_alloc+0x95/0xa50 [ 2416.056894][T11990] ? fifo_init+0x3ab/0x650 [ 2416.061324][T11990] ? qdisc_peek_head+0x40/0x40 [ 2416.066096][T11990] ? qdisc_alloc+0x77a/0xa50 [ 2416.070705][T11990] ? mutex_is_locked+0xe/0x40 [ 2416.075423][T11990] ? taprio_peek+0x590/0x590 [ 2416.080027][T11990] qdisc_create+0x7cb/0x1090 [ 2416.084729][T11990] ? qdisc_notify+0x370/0x370 [ 2416.089427][T11990] tc_modify_qdisc+0xb2f/0x1cc0 [ 2416.094304][T11990] ? qdisc_offload_query_caps+0x140/0x140 [ 2416.100052][T11990] ? qdisc_offload_query_caps+0x140/0x140 [ 2416.105785][T11990] ? rtnetlink_rcv_msg+0x1d8/0xed0 [ 2416.110912][T11990] rtnetlink_rcv_msg+0x79b/0xed0 [ 2416.115899][T11990] ? rtnetlink_bind+0x80/0x80 [ 2416.120617][T11990] ? __local_bh_enable_ip+0x12a/0x1b0 [ 2416.126024][T11990] ? lockdep_hardirqs_on+0x94/0x140 [ 2416.131247][T11990] ? __local_bh_enable_ip+0x12a/0x1b0 [ 2416.136650][T11990] ? _local_bh_enable+0xa0/0xa0 [ 2416.141551][T11990] ? __dev_queue_xmit+0x26f/0x3760 [ 2416.146766][T11990] ? __dev_queue_xmit+0x26f/0x3760 [ 2416.151892][T11990] ? __dev_queue_xmit+0x15c9/0x3760 [ 2416.157113][T11990] ? __dev_queue_xmit+0x26f/0x3760 [ 2416.162236][T11990] ? netdev_core_pick_tx+0x340/0x340 [ 2416.167529][T11990] ? ref_tracker_free+0x630/0x7c0 [ 2416.172572][T11990] ? refcount_inc+0x70/0x70 [ 2416.177177][T11990] ? __copy_skb_header+0x417/0x5a0 [ 2416.182311][T11990] ? __skb_clone+0x480/0x790 [ 2416.186925][T11990] netlink_rcv_skb+0x1de/0x420 [ 2416.191708][T11990] ? rtnetlink_bind+0x80/0x80 [ 2416.196401][T11990] ? netlink_ack+0x1100/0x1100 [ 2416.201276][T11990] ? netlink_deliver_tap+0x2e/0x1b0 [ 2416.206493][T11990] netlink_unicast+0x74d/0x8d0 [ 2416.211309][T11990] netlink_sendmsg+0x89e/0xbc0 [ 2416.216102][T11990] ? netlink_getsockopt+0x540/0x540 [ 2416.221314][T11990] ? aa_sock_msg_perm+0x94/0x150 [ 2416.226360][T11990] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2416.231659][T11990] ? security_socket_sendmsg+0x7c/0xa0 [ 2416.237135][T11990] ? netlink_getsockopt+0x540/0x540 [ 2416.242348][T11990] ____sys_sendmsg+0x59b/0x970 [ 2416.247146][T11990] ? __sys_sendmsg_sock+0x30/0x30 [ 2416.252185][T11990] ? __import_iovec+0x315/0x500 [ 2416.257075][T11990] ? import_iovec+0x6f/0xa0 [ 2416.261613][T11990] ___sys_sendmsg+0x21c/0x290 [ 2416.266336][T11990] ? __sys_sendmsg+0x270/0x270 [ 2416.271144][T11990] ? __fdget+0x17c/0x200 [ 2416.275407][T11990] __se_sys_sendmsg+0x19e/0x270 [ 2416.280277][T11990] ? __se_sys_futex+0x14a/0x440 [ 2416.285147][T11990] ? __x64_sys_sendmsg+0x80/0x80 [ 2416.290111][T11990] ? lockdep_hardirqs_on+0x94/0x140 [ 2416.295331][T11990] do_syscall_64+0x4c/0xa0 [ 2416.299849][T11990] ? clear_bhb_loop+0x60/0xb0 [ 2416.304542][T11990] ? clear_bhb_loop+0x60/0xb0 [ 2416.309235][T11990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2416.315147][T11990] RIP: 0033:0x7fca4658f6c9 [ 2416.319569][T11990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2416.339191][T11990] RSP: 002b:00007fca473c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2416.347621][T11990] RAX: ffffffffffffffda RBX: 00007fca467e5fa0 RCX: 00007fca4658f6c9 [ 2416.355610][T11990] RDX: 0000000000000044 RSI: 00002000000007c0 RDI: 0000000000000007 [ 2416.363616][T11990] RBP: 00007fca46611f91 R08: 0000000000000000 R09: 0000000000000000 [ 2416.371620][T11990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2416.379600][T11990] R13: 00007fca467e6038 R14: 00007fca467e5fa0 R15: 00007fff31c81598 [ 2416.387596][T11990] [ 2416.390922][T11990] Kernel Offset: disabled [ 2416.395345][T11990] Rebooting in 86400 seconds..