last executing test programs: 1m11.368253155s ago: executing program 4 (id=1093): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1], 0x20) 1m11.172550141s ago: executing program 1 (id=1104): unshare(0x22020600) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000feffff070000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) 1m1.014998709s ago: executing program 4 (id=1093): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1], 0x20) 1m0.185149041s ago: executing program 1 (id=1104): unshare(0x22020600) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000feffff070000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) 44.860476878s ago: executing program 4 (id=1093): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1], 0x20) 44.825174439s ago: executing program 1 (id=1104): unshare(0x22020600) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000feffff070000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) 32.835809453s ago: executing program 1 (id=1104): unshare(0x22020600) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000feffff070000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) 31.995539226s ago: executing program 4 (id=1093): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1], 0x20) 21.21718009s ago: executing program 1 (id=1104): unshare(0x22020600) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000feffff070000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) 20.28490835s ago: executing program 4 (id=1093): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1], 0x20) 7.778956383s ago: executing program 1 (id=1104): unshare(0x22020600) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000feffff070000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) 6.455178801s ago: executing program 4 (id=1093): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1], 0x20) 2.3682646s ago: executing program 3 (id=1592): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000100000000000000fe80000000000000ff0300000000000000000000000000000004000000d00000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c"], 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.340294996s ago: executing program 3 (id=1594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000ef74000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00014000000000000001010c0001400000000000000101b81700000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000008c1703800c0000800800034000000002b0020080ac020180300002"], 0x1874}}, 0x0) 2.232354274s ago: executing program 3 (id=1595): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}}}]}}]}, 0x45c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) socket$kcm(0x10, 0x2, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'erspan0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x7, 0x700, 0x0, 0x6, {{0x7, 0x4, 0x0, 0x7, 0x1c, 0x65, 0x0, 0x7f, 0x4, 0x0, @private=0xa010101, @multicast2, {[@generic={0x89, 0x3, 'e'}, @generic={0x86, 0x2}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'vxcan1\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010102, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x37}}, @ip_retopts={{0x44, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x41, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0xe1f3}, {@local, 0x2}, {@multicast1, 0x2000e389}]}, @cipso={0x86, 0x6}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @broadcast, @rand_addr=0x64010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11}}], 0xf0}}], 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r8, 0x89a2, &(0x7f0000000200)='bridge0\x00') 1.784236439s ago: executing program 0 (id=1600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068002400060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x0) 1.759461812s ago: executing program 3 (id=1601): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x2000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x900, @void, @value}, 0x94) 1.620067546s ago: executing program 0 (id=1602): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000040)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='gre0\x00', 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r5, 0x11, 0x0, 0x0, @void, @value=r4}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r6}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote}, {@in6=@private1, 0x4d3, 0x3c}, @in=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@coaddr={0x14, 0xe, @in6=@ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x104}}, 0x40001) r10 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r10, 0x11, 0x0, 0x0, @void, @value=r8}, 0x20) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) 1.548350415s ago: executing program 3 (id=1604): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0xc) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x800000010d, 0x2, &(0x7f0000000080)="922b22c06d1ff7de1259c2df5ae341dbac30653a130057a4cddc7c7e153f6c8fa49896613e0dbe5e8183be97ea9486821fa12ed926f35a8b42e55079654448773f4dff0000000000000000", 0x13) getsockopt$inet_int(r3, 0x10d, 0x2, &(0x7f0000000200), &(0x7f0000000280)=0x1c) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000005142106"], 0x20}, 0x1, 0x0, 0x0, 0x40c5}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0xf, &(0x7f0000000800)=ANY=[@ANYRESOCT=r2, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='sched_switch\x00', r8, 0x0, 0x9}, 0x18) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r9) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r9, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8d00"}) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYRES64=r7, @ANYRES8], 0x48}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="a0000000d300b1a21a8d22d9c38710ee4e7337abbc28366be85ceb95130799de71be079d1975689d26c3e23f9a86225c5d7a769e310c9b4ff2e5e1fbd7eefc87c6ed4ed3f3855c776d14e87a4dfaca9356f8beec616df836919aae1f938576456817", @ANYRES16=r10, @ANYBLOB="00082cbd7000fedbdf250300000008000200030000004c000480050003000600000005000300050000000500030000000000050003000500000005000300020000000500030007000000050003000500000005000300010000000500030000000000200008801c000780080005005693df5b080006003c0000000800050059809a4c080001000300000008000200020000000800010002000000"], 0xa0}, 0x1, 0x0, 0x0, 0x2004811}, 0x40000) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r11, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x30}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r9, &(0x7f00000007c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0x2c, 0x0, 0x302, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0xc}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080d0}, 0x4c881) 1.213766536s ago: executing program 0 (id=1608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) 1.076131858s ago: executing program 2 (id=1609): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1709000000000000000001000000080009000200000414001f00fe8000000000000000000000000000aa1400200000000000000000400000ffffac1414bb0500070000000000060002000100000008000a"], 0x5c}}, 0x0) 982.329455ms ago: executing program 0 (id=1610): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000100000000000000fe80000000000000ff0300000000000000000000000000000000000400d00000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c0044"], 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 953.588555ms ago: executing program 2 (id=1611): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='.\x00'}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000010c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000300000000030000000300000000000004000000000000000147d722ce4e838719"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_xfrm(r0, &(0x7f0000005ac0)={0x0, 0x0, &(0x7f0000005a80)={&(0x7f00000058c0)=ANY=[@ANYBLOB="cc0000001b0001002bbd7000fddbdf2500000000002400000400000000000001ac1414390000000000000000000000004e2200014e2400050200a0a03b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="090000000000000007000000000000000600000000000000020000000000000007000000000000000c00000000000000a604000000000000060000000000000002000000000000000000000000000000f4fffffffffffffff2ffffffffffffff790a0000b26b6e00010101010000000005000000000000000a00100002"], 0xcc}, 0x1, 0x0, 0x0, 0x44040}, 0x20000004) 767.933245ms ago: executing program 2 (id=1612): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180200001a000000000000000000000085000000bc000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000cd00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 767.599182ms ago: executing program 0 (id=1613): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000100000000000000fe80000000000000ff0300000000000000000000000000000005000000d00000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c"], 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 646.897797ms ago: executing program 0 (id=1614): setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) unshare(0x42000000) r0 = socket$inet6(0xa, 0x806, 0x0) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r2, 0x0, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) pipe(0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r6, 0x0, 0x0) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x0, 0x9}, {0x6, 0x0, 0x8}]}) write$ppp(r5, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000003002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, 0x0, 0x10) 639.388754ms ago: executing program 2 (id=1615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000f574000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00014000000000000001010c0001400000000000000101b81700000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000008c1703800c0000800800034000000002b0020080ac020180300002"], 0x1874}}, 0x0) 445.651723ms ago: executing program 2 (id=1616): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}}}]}}]}, 0x45c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) socket$kcm(0x10, 0x2, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'erspan0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x7, 0x700, 0x0, 0x6, {{0x7, 0x4, 0x0, 0x7, 0x1c, 0x65, 0x0, 0x7f, 0x4, 0x0, @private=0xa010101, @multicast2, {[@generic={0x89, 0x3, 'e'}, @generic={0x86, 0x2}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'vxcan1\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010102, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x37}}, @ip_retopts={{0x44, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x41, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0xe1f3}, {@local, 0x2}, {@multicast1, 0x2000e389}]}, @cipso={0x86, 0x6}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @broadcast, @rand_addr=0x64010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11}}], 0xf0}}], 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r8, 0x89a2, &(0x7f0000000200)='bridge0\x00') 421.130579ms ago: executing program 3 (id=1617): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be00442f010022ebffff0000000000ffff7f000001ff020000000000000000000000000001"], 0x7a) 0s ago: executing program 2 (id=1618): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000020002001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}}, 0x4000) kernel console output (not intermixed with test programs): T9258] hsr_slave_0: entered promiscuous mode [ 187.382579][ T9258] hsr_slave_1: entered promiscuous mode [ 187.404024][ T9258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.411962][ T9258] Cannot create hsr debugfs directory [ 187.476514][ T9253] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.486846][ T9345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1123'. [ 187.520391][ T9341] batadv_slave_1: left promiscuous mode [ 187.638150][ T9253] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.662443][ T9346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1123'. [ 187.678866][ T9346] rdma_rxe: rxe_newlink: failed to add lo [ 187.703219][ T9351] netlink: 61963 bytes leftover after parsing attributes in process `syz.0.1125'. [ 187.778518][ T9253] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.845545][ T9353] netlink: 'syz.3.1126': attribute type 4 has an invalid length. [ 187.865076][ T5837] Bluetooth: hci1: command tx timeout [ 187.900985][ T9354] netlink: 'syz.3.1126': attribute type 4 has an invalid length. [ 187.934719][ T9358] FAULT_INJECTION: forcing a failure. [ 187.934719][ T9358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.955525][ T9358] CPU: 0 UID: 0 PID: 9358 Comm: syz.0.1128 Not tainted 6.14.0-rc7-syzkaller-01889-gcc04ed502457 #0 [ 187.955552][ T9358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 187.955563][ T9358] Call Trace: [ 187.955570][ T9358] [ 187.955579][ T9358] dump_stack_lvl+0x241/0x360 [ 187.955611][ T9358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.955646][ T9358] ? __pfx__printk+0x10/0x10 [ 187.955672][ T9358] ? snprintf+0xda/0x120 [ 187.955695][ T9358] should_fail_ex+0x40a/0x550 [ 187.955727][ T9358] _copy_to_user+0x31/0xb0 [ 187.955756][ T9358] simple_read_from_buffer+0xca/0x150 [ 187.955786][ T9358] proc_fail_nth_read+0x1e9/0x250 [ 187.955816][ T9358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.955852][ T9358] ? rw_verify_area+0x243/0x630 [ 187.955871][ T9358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.955899][ T9358] vfs_read+0x1f8/0xb40 [ 187.955920][ T9358] ? fdget_pos+0x254/0x320 [ 187.955951][ T9358] ? __pfx___mutex_lock+0x10/0x10 [ 187.955981][ T9358] ? __pfx_vfs_read+0x10/0x10 [ 187.955998][ T9358] ? do_sys_openat2+0x17a/0x1d0 [ 187.956030][ T9358] ? __fget_files+0x2a/0x410 [ 187.956061][ T9358] ? __fget_files+0x395/0x410 [ 187.956089][ T9358] ? __fget_files+0x2a/0x410 [ 187.956129][ T9358] ksys_read+0x18f/0x2b0 [ 187.956151][ T9358] ? __pfx_ksys_read+0x10/0x10 [ 187.956170][ T9358] ? do_syscall_64+0x100/0x230 [ 187.956198][ T9358] ? do_syscall_64+0xb6/0x230 [ 187.956227][ T9358] do_syscall_64+0xf3/0x230 [ 187.956254][ T9358] ? clear_bhb_loop+0x35/0x90 [ 187.956282][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.956306][ T9358] RIP: 0033:0x7f1739d8bb7c [ 187.956334][ T9358] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 187.956350][ T9358] RSP: 002b:00007f173abf0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 187.956369][ T9358] RAX: ffffffffffffffda RBX: 00007f1739fa5fa0 RCX: 00007f1739d8bb7c [ 187.956382][ T9358] RDX: 000000000000000f RSI: 00007f173abf00a0 RDI: 0000000000000004 [ 187.956393][ T9358] RBP: 00007f173abf0090 R08: 0000000000000000 R09: 0000000000000000 [ 187.956404][ T9358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.956415][ T9358] R13: 0000000000000000 R14: 00007f1739fa5fa0 R15: 00007ffd21b6c1f8 [ 187.956442][ T9358] [ 188.195942][ T5837] Bluetooth: hci3: command tx timeout [ 188.332573][ T9258] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.405477][ T9253] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 188.419216][ T9253] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 188.464805][ T9258] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.511905][ T9253] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 188.558684][ T9253] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 188.586648][ T9258] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.697346][ T9258] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.819325][ T9253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.888148][ T9253] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.930324][ T6952] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.937533][ T6952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.012858][ T9384] bond0: entered promiscuous mode [ 189.026911][ T9384] bond_slave_0: entered promiscuous mode [ 189.032877][ T9384] bond_slave_1: entered promiscuous mode [ 189.039274][ T9384] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 189.052278][ T9384] bond0: left promiscuous mode [ 189.057265][ T9384] bond_slave_0: left promiscuous mode [ 189.062803][ T9384] bond_slave_1: left promiscuous mode [ 189.099584][ T6952] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.106778][ T6952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.182382][ T9386] lo speed is unknown, defaulting to 1000 [ 189.218958][ T9258] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 189.262730][ T9258] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 189.298502][ T9258] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 189.323848][ T9258] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 189.595635][ T9258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.615795][ T9258] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.656519][ T6952] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.663639][ T6952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.696254][ T6952] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.701699][ T9399] __nla_validate_parse: 2 callbacks suppressed [ 189.701720][ T9399] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1144'. [ 189.703430][ T6952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.819939][ T9401] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1144'. [ 189.830029][ T9399] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1144'. [ 189.869768][ T9405] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 189.943252][ T9253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.950859][ T5837] Bluetooth: hci1: command tx timeout [ 190.008089][ T9409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1148'. [ 190.049130][ T9405] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 190.059835][ T9405] macvtap1: entered promiscuous mode [ 190.084441][ T9405] macvtap1: entered allmulticast mode [ 190.117166][ T9405] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 190.164268][ T9405] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 190.179325][ T9405] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 190.210947][ T9417] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1149'. [ 190.224411][ T9418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1149'. [ 190.265235][ T5837] Bluetooth: hci3: command tx timeout [ 190.530147][ T9426] netlink: 61963 bytes leftover after parsing attributes in process `syz.3.1151'. [ 190.674162][ T9433] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1153'. [ 190.703268][ T9433] netlink: 'syz.2.1153': attribute type 1 has an invalid length. [ 190.711803][ T9253] veth0_vlan: entered promiscuous mode [ 190.753753][ T9437] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1153'. [ 190.765455][ T9253] veth1_vlan: entered promiscuous mode [ 190.773523][ T9437] netlink: 'syz.2.1153': attribute type 1 has an invalid length. [ 190.870962][ T9258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.928330][ T9253] veth0_macvtap: entered promiscuous mode [ 190.958759][ T9253] veth1_macvtap: entered promiscuous mode [ 191.011007][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.032047][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.048688][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.060063][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.073431][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.094807][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.112923][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.127544][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.142290][ T9253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.224102][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.255961][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.275260][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.298679][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.325620][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.342106][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.377529][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.404140][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.419530][ T9253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.458215][ T9258] veth0_vlan: entered promiscuous mode [ 191.464475][ T9461] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 191.503093][ T9253] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.512262][ T9253] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.523357][ T9253] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.550464][ T9253] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.590348][ T9258] veth1_vlan: entered promiscuous mode [ 191.613468][ T9463] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 191.621356][ T9463] macvtap0: entered promiscuous mode [ 191.631206][ T9463] macvtap0: entered allmulticast mode [ 191.638321][ T9463] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 191.648252][ T9463] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 191.655652][ T9463] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 191.693798][ T9470] netlink: 61687 bytes leftover after parsing attributes in process `syz.2.1165'. [ 191.897850][ T9258] veth0_macvtap: entered promiscuous mode [ 191.922800][ T6952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.940229][ T6952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.952759][ T9472] lo speed is unknown, defaulting to 1000 [ 191.961144][ T9258] veth1_macvtap: entered promiscuous mode [ 192.024901][ T5837] Bluetooth: hci1: command tx timeout [ 192.063185][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.064831][ T6952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.103035][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.124669][ T6952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.131735][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.159355][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.173336][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.193157][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.204315][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.233301][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.244364][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.265278][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.286438][ T9258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.338241][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.349642][ T5837] Bluetooth: hci3: command tx timeout [ 192.365754][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.384742][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.395895][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.406228][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.418215][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.428942][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.439787][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.450092][ T9258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.461987][ T9258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.498113][ T9258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.546650][ T9489] bond0: entered promiscuous mode [ 192.551757][ T9489] bond_slave_0: entered promiscuous mode [ 192.558924][ T9489] bond_slave_1: entered promiscuous mode [ 192.565937][ T9489] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 192.574322][ T9489] bond0: left promiscuous mode [ 192.579683][ T9489] bond_slave_0: left promiscuous mode [ 192.591741][ T9489] bond_slave_1: left promiscuous mode [ 192.643255][ T9258] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.661371][ T9258] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.674276][ T9258] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.693590][ T9258] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.157430][ T6963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.165921][ T6963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.338294][ T6958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.364725][ T6958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.885113][ T9520] lo speed is unknown, defaulting to 1000 [ 194.164371][ T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.331438][ T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.343300][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 194.354921][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 194.366045][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 194.376586][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 194.403031][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 194.412680][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.508830][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.518219][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.570036][ T9526] lo speed is unknown, defaulting to 1000 [ 194.700328][ T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.846189][ T9539] __nla_validate_parse: 2 callbacks suppressed [ 194.846209][ T9539] netlink: 61687 bytes leftover after parsing attributes in process `syz.0.1190'. [ 194.986866][ T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.136452][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 195.184562][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 195.193651][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 195.212861][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 195.225514][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 195.233535][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 195.454844][ T9548] lo speed is unknown, defaulting to 1000 [ 195.551712][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.587397][ T9557] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1195'. [ 195.746794][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.761141][ T9560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1195'. [ 195.826931][ T9560] rdma_rxe: rxe_newlink: failed to add lo [ 195.873746][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.936724][ T9526] chnl_net:caif_netlink_parms(): no params data found [ 195.998029][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.174015][ T9573] netlink: 632 bytes leftover after parsing attributes in process `syz.3.1198'. [ 196.282445][ T9526] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.291744][ T9526] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.299618][ T9526] bridge_slave_0: entered allmulticast mode [ 196.316248][ T9526] bridge_slave_0: entered promiscuous mode [ 196.335601][ T9526] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.342773][ T9526] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.374874][ T9526] bridge_slave_1: entered allmulticast mode [ 196.382191][ T9526] bridge_slave_1: entered promiscuous mode [ 196.429347][ T9575] bond0: entered promiscuous mode [ 196.434453][ T9575] bond_slave_0: entered promiscuous mode [ 196.443179][ T9575] bond_slave_1: entered promiscuous mode [ 196.453517][ T9575] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 196.463664][ T9575] bond0: left promiscuous mode [ 196.468721][ T9575] bond_slave_0: left promiscuous mode [ 196.484921][ T9575] bond_slave_1: left promiscuous mode [ 196.504760][ T5843] Bluetooth: hci1: command tx timeout [ 196.584756][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 196.706786][ T9526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.752793][ T9580] lo speed is unknown, defaulting to 1000 [ 196.759326][ T9526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.759428][ T9591] netlink: 61963 bytes leftover after parsing attributes in process `syz.2.1204'. [ 196.781719][ T9548] chnl_net:caif_netlink_parms(): no params data found [ 196.897382][ T63] bridge_slave_1: left allmulticast mode [ 196.903696][ T63] bridge_slave_1: left promiscuous mode [ 196.935634][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.032174][ T63] bridge_slave_0: left allmulticast mode [ 197.040964][ T63] bridge_slave_0: left promiscuous mode [ 197.066254][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.098489][ T63] bridge_slave_1: left allmulticast mode [ 197.114532][ T63] bridge_slave_1: left promiscuous mode [ 197.131758][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.156804][ T63] bridge_slave_0: left allmulticast mode [ 197.164020][ T63] bridge_slave_0: left promiscuous mode [ 197.173372][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.308212][ T5837] Bluetooth: hci3: command tx timeout [ 198.017745][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.030882][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.041904][ T63] bond0 (unregistering): Released all slaves [ 198.171193][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.188454][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.202179][ T63] bond0 (unregistering): Released all slaves [ 198.226444][ T9526] team0: Port device team_slave_0 added [ 198.282576][ T9526] team0: Port device team_slave_1 added [ 198.561166][ T9526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.570239][ T9526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.596875][ T9526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.608740][ T5837] Bluetooth: hci1: command tx timeout [ 198.618677][ T9526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.626094][ T9526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.653049][ T9526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.731436][ T9626] netlink: 61963 bytes leftover after parsing attributes in process `syz.2.1216'. [ 198.825082][ T9548] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.833262][ T9548] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.845277][ T9548] bridge_slave_0: entered allmulticast mode [ 198.867909][ T9548] bridge_slave_0: entered promiscuous mode [ 198.879767][ T9548] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.898562][ T9548] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.915178][ T9548] bridge_slave_1: entered allmulticast mode [ 198.927655][ T9548] bridge_slave_1: entered promiscuous mode [ 199.196964][ T9526] hsr_slave_0: entered promiscuous mode [ 199.203351][ T9526] hsr_slave_1: entered promiscuous mode [ 199.213561][ T9526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.222941][ T9526] Cannot create hsr debugfs directory [ 199.243035][ T9638] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 199.271957][ T9641] macvtap1: entered promiscuous mode [ 199.288128][ T9641] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 199.295787][ T9641] macvtap1: entered allmulticast mode [ 199.301331][ T9641] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 199.319601][ T9641] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 199.332412][ T9641] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 199.386439][ T5837] Bluetooth: hci3: command tx timeout [ 199.393305][ T9647] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 199.424180][ T9648] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 199.445975][ T9648] macvtap1: entered promiscuous mode [ 199.451512][ T9648] macvtap1: entered allmulticast mode [ 199.461969][ T9648] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 199.499472][ T9648] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 199.507915][ T9648] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 199.658436][ T9548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.712912][ T9548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.874862][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1226'. [ 199.911129][ T9657] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 200.098051][ T9548] team0: Port device team_slave_0 added [ 200.114138][ T9662] netlink: 61963 bytes leftover after parsing attributes in process `syz.0.1228'. [ 200.158118][ T9548] team0: Port device team_slave_1 added [ 200.528206][ T9666] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1230'. [ 200.586021][ T9676] xt_hashlimit: size too large, truncated to 1048576 [ 200.654920][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1233'. [ 200.666632][ T9548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.673683][ T9548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.674901][ T5837] Bluetooth: hci1: command tx timeout [ 200.709333][ T9548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.770541][ T63] hsr_slave_0: left promiscuous mode [ 200.779267][ T63] hsr_slave_1: left promiscuous mode [ 200.786460][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.794022][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.804069][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.811990][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.825951][ T63] hsr_slave_0: left promiscuous mode [ 200.839624][ T63] hsr_slave_1: left promiscuous mode [ 200.845787][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.854023][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.864315][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.872346][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.924252][ T63] veth1_macvtap: left promiscuous mode [ 200.930526][ T63] veth0_macvtap: left promiscuous mode [ 200.936734][ T63] veth1_vlan: left promiscuous mode [ 200.942244][ T63] veth0_vlan: left promiscuous mode [ 200.952010][ T63] veth1_macvtap: left promiscuous mode [ 200.958423][ T63] veth0_macvtap: left promiscuous mode [ 200.965405][ T63] veth1_vlan: left promiscuous mode [ 200.970762][ T63] veth0_vlan: left promiscuous mode [ 201.467135][ T5837] Bluetooth: hci3: command tx timeout [ 201.541841][ T63] team0 (unregistering): Port device team_slave_1 removed [ 201.590197][ T63] team0 (unregistering): Port device team_slave_0 removed [ 202.378317][ T63] team0 (unregistering): Port device team_slave_1 removed [ 202.431277][ T63] team0 (unregistering): Port device team_slave_0 removed [ 202.746985][ T5837] Bluetooth: hci1: command tx timeout [ 202.862045][ T9678] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 202.968019][ T9682] macvtap1: entered promiscuous mode [ 202.973493][ T9682] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 202.982849][ T9682] macvtap1: entered allmulticast mode [ 202.990291][ T9682] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 203.001076][ T9682] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 203.012475][ T9682] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 203.051154][ T9548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.072500][ T9548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.132711][ T9548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.338925][ T9548] hsr_slave_0: entered promiscuous mode [ 203.369821][ T9548] hsr_slave_1: entered promiscuous mode [ 203.376827][ T9548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.384445][ T9548] Cannot create hsr debugfs directory [ 203.422126][ T9700] netlink: 61963 bytes leftover after parsing attributes in process `syz.3.1240'. [ 203.545331][ T5837] Bluetooth: hci3: command tx timeout [ 203.570533][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1242'. [ 203.589772][ T9705] bond0: entered promiscuous mode [ 203.606396][ T9705] bond_slave_0: entered promiscuous mode [ 203.612266][ T9705] bond_slave_1: entered promiscuous mode [ 203.619192][ T9705] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 203.631768][ T9705] bond0: left promiscuous mode [ 203.644891][ T9705] bond_slave_0: left promiscuous mode [ 203.655240][ T9705] bond_slave_1: left promiscuous mode [ 203.700601][ T9704] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 203.722142][ T9709] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1243'. [ 203.733307][ T9704] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 204.140628][ T9718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1245'. [ 204.152585][ T9718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1245'. [ 204.171473][ T9526] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 204.184520][ T9526] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 204.198229][ T9720] netlink: 'syz.3.1246': attribute type 4 has an invalid length. [ 204.211103][ T9526] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 204.222714][ T9526] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 204.223506][ T9717] netlink: 'syz.3.1246': attribute type 4 has an invalid length. [ 204.466726][ T9722] netlink: 61963 bytes leftover after parsing attributes in process `syz.2.1247'. [ 204.553672][ T9724] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 204.619996][ T9724] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 204.636855][ T9724] macvtap0: entered promiscuous mode [ 204.642635][ T9724] macvtap0: entered allmulticast mode [ 204.660781][ T9724] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 204.677709][ T9724] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 204.688503][ T9724] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 204.720846][ T9727] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 204.741025][ T9526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.780349][ T9730] macvtap1: entered promiscuous mode [ 204.791394][ T9730] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 204.799726][ T9730] macvtap1: entered allmulticast mode [ 204.806464][ T9730] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 204.817076][ T9730] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 204.823903][ T9730] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 204.894289][ T9733] netlink: 61963 bytes leftover after parsing attributes in process `syz.3.1252'. [ 204.947178][ T9526] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.971384][ T9548] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 204.992668][ T6958] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.999926][ T6958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.029681][ T9548] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 205.043899][ T9735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1253'. [ 205.070345][ T9548] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 205.090966][ T6958] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.098205][ T6958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.113573][ T9548] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 205.353959][ T9548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.430190][ T9548] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.451165][ T6955] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.458356][ T6955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.487515][ T6952] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.494761][ T6952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.647277][ T9526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.907182][ T9754] syz_tun (unregistering): left promiscuous mode [ 206.007430][ T9768] bond0: entered promiscuous mode [ 206.019470][ T9768] bond_slave_0: entered promiscuous mode [ 206.039085][ T9768] bond_slave_1: entered promiscuous mode [ 206.054338][ T9768] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 206.093678][ T9768] bond0: left promiscuous mode [ 206.100522][ T9768] bond_slave_0: left promiscuous mode [ 206.108222][ T9768] bond_slave_1: left promiscuous mode [ 206.182069][ T9548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.323859][ T9548] veth0_vlan: entered promiscuous mode [ 206.362232][ T9548] veth1_vlan: entered promiscuous mode [ 206.386383][ T9777] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 206.419977][ T9777] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 206.427827][ T9777] macvtap0: entered promiscuous mode [ 206.433402][ T9777] macvtap0: entered allmulticast mode [ 206.439883][ T9777] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 206.451255][ T9777] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 206.458924][ T9777] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 206.489620][ T9779] netlink: 61963 bytes leftover after parsing attributes in process `syz.0.1264'. [ 206.562420][ T9548] veth0_macvtap: entered promiscuous mode [ 206.577556][ T9548] veth1_macvtap: entered promiscuous mode [ 206.590693][ T9526] veth0_vlan: entered promiscuous mode [ 206.627912][ T9526] veth1_vlan: entered promiscuous mode [ 206.658438][ T9548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.694989][ T9548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.706239][ T9548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.725071][ T9548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.735918][ T9548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.748719][ T9548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.760096][ T9548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.772295][ T9548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.784125][ T9548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.805365][ T9786] lo speed is unknown, defaulting to 1000 [ 206.807541][ T9548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.849632][ T9548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.872306][ T9548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.901647][ T9548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.928632][ T9548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.949789][ T9548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.968215][ T9548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.985343][ T9548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.000584][ T9548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.029309][ T9789] bridge0: port 3(gretap0) entered disabled state [ 207.089285][ T9789] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.097599][ T9789] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.117450][ T9789] bond0: left promiscuous mode [ 207.122270][ T9789] bond_slave_0: left promiscuous mode [ 207.132088][ T9789] bond_slave_1: left promiscuous mode [ 207.201860][ T9789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.219369][ T9789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.292112][ T9789] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.300725][ T9789] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.311929][ T9789] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.321027][ T9789] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.351161][ T9789] bridge1: left promiscuous mode [ 207.357996][ T9789] bridge1: left allmulticast mode [ 207.363274][ T9789] vlan2: left promiscuous mode [ 207.368383][ T9789] macvtap0: left promiscuous mode [ 207.433650][ T9548] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.442916][ T9548] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.453029][ T9548] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.462521][ T9548] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.657697][ T9526] veth0_macvtap: entered promiscuous mode [ 207.687390][ T9526] veth1_macvtap: entered promiscuous mode [ 207.749352][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.767406][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.779678][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.791168][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.801740][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.812933][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.823181][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.834584][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.856149][ T9526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.900457][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.927449][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.949734][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.970114][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.991234][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.004584][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.015434][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.032045][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.048237][ T9526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.059210][ T9807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'. [ 208.074419][ T9526] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.087081][ T9526] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.096798][ T9526] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.108009][ T9526] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.266393][ T9811] netlink: 61963 bytes leftover after parsing attributes in process `syz.0.1276'. [ 208.327928][ T6958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.347074][ T6958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.418357][ T6938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.427724][ T6938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.465440][ T9816] lo: entered promiscuous mode [ 208.493780][ T6963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.513428][ T6963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.641803][ T6963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.665780][ T6963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.962437][ T9833] pim6reg: entered allmulticast mode [ 209.031712][ T9836] bond0: entered promiscuous mode [ 209.056589][ T9836] bond_slave_0: entered promiscuous mode [ 209.062455][ T9836] bond_slave_1: entered promiscuous mode [ 209.073940][ T9836] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 209.094200][ T9836] bond0: left promiscuous mode [ 209.101067][ T9836] bond_slave_0: left promiscuous mode [ 209.111196][ T9836] bond_slave_1: left promiscuous mode [ 209.682961][ T9849] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1289'. [ 209.785261][ T9852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1289'. [ 209.850342][ T9854] rdma_rxe: rxe_newlink: failed to add lo [ 210.097443][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.111069][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.120430][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.131105][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.145692][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 210.153506][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.221863][ T9860] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 210.313855][ T9860] macvtap1: entered promiscuous mode [ 210.362660][ T9860] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 210.406057][ T9860] macvtap1: entered allmulticast mode [ 210.411523][ T9860] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 210.419220][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.439830][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.448988][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.459333][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.467915][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 210.478566][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.486972][ T9860] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 210.511856][ T9860] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 210.651336][ T9857] lo speed is unknown, defaulting to 1000 [ 211.001443][ T9863] lo speed is unknown, defaulting to 1000 [ 211.072872][ T9877] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1299'. [ 211.087983][ T9879] netlink: 632 bytes leftover after parsing attributes in process `syz.2.1298'. [ 211.215424][ T9869] lo speed is unknown, defaulting to 1000 [ 211.326622][ T9885] netlink: 61963 bytes leftover after parsing attributes in process `syz.0.1300'. [ 211.416946][ T9886] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 211.485238][ T9886] macvtap1: entered promiscuous mode [ 211.490608][ T9886] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 211.506169][ T9886] macvtap1: entered allmulticast mode [ 211.523984][ T9886] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 211.541064][ T9886] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 211.570728][ T9886] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 211.609949][ T9857] chnl_net:caif_netlink_parms(): no params data found [ 211.822879][ T9863] chnl_net:caif_netlink_parms(): no params data found [ 211.929961][ T9905] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1306'. [ 211.964098][ T9907] netlink: 632 bytes leftover after parsing attributes in process `syz.0.1305'. [ 211.994540][ T9857] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.012631][ T9857] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.026868][ T9857] bridge_slave_0: entered allmulticast mode [ 212.044887][ T9857] bridge_slave_0: entered promiscuous mode [ 212.112862][ T9909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1306'. [ 212.134266][ T9857] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.159074][ T9911] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1307'. [ 212.162330][ T9909] rdma_rxe: rxe_newlink: failed to add lo [ 212.179043][ T9857] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.187104][ T5843] Bluetooth: hci1: command tx timeout [ 212.207219][ T9911] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 212.232775][ T9857] bridge_slave_1: entered allmulticast mode [ 212.311228][ T9857] bridge_slave_1: entered promiscuous mode [ 212.456844][ T9917] bond0: entered promiscuous mode [ 212.461956][ T9917] bond_slave_0: entered promiscuous mode [ 212.468391][ T9917] bond_slave_1: entered promiscuous mode [ 212.474937][ T9917] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 212.483496][ T9917] bond0: left promiscuous mode [ 212.489592][ T9917] bond_slave_0: left promiscuous mode [ 212.495455][ T9917] bond_slave_1: left promiscuous mode [ 212.531505][ T9857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.585582][ T5843] Bluetooth: hci3: command tx timeout [ 212.587387][ T9857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.609011][ T9863] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.620765][ T9863] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.631739][ T9863] bridge_slave_0: entered allmulticast mode [ 212.641243][ T9863] bridge_slave_0: entered promiscuous mode [ 212.760197][ T9863] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.775011][ T9863] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.792590][ T9863] bridge_slave_1: entered allmulticast mode [ 212.804570][ T9863] bridge_slave_1: entered promiscuous mode [ 212.890507][ T9857] team0: Port device team_slave_0 added [ 212.898984][ T9923] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 212.918312][ T9857] team0: Port device team_slave_1 added [ 212.998522][ T9863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.029139][ T9857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.038779][ T9857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.081159][ T9857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.113266][ T9863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.156364][ T9857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.163370][ T9857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.203779][ T9857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.291249][ T9863] team0: Port device team_slave_0 added [ 213.401201][ T9927] xt_CT: You must specify a L4 protocol and not use inversions on it [ 213.490075][ T9936] bond1: entered promiscuous mode [ 213.503205][ T9936] bond1: entered allmulticast mode [ 213.509808][ T9936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.547826][ T9943] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1317'. [ 213.666043][ T9936] bond1 (unregistering): Released all slaves [ 213.688106][ T9863] team0: Port device team_slave_1 added [ 213.694065][ T9931] lo speed is unknown, defaulting to 1000 [ 213.761576][ T9857] hsr_slave_0: entered promiscuous mode [ 213.778339][ T9857] hsr_slave_1: entered promiscuous mode [ 213.805435][ T9857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.819565][ T9857] Cannot create hsr debugfs directory [ 213.935918][ T9863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.950892][ T9863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.990804][ T9863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.009309][ T9945] netlink: 61963 bytes leftover after parsing attributes in process `syz.2.1318'. [ 214.143451][ T9863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.154676][ T9863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.191601][ T9863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.265723][ T5843] Bluetooth: hci1: command tx timeout [ 214.418591][ T9863] hsr_slave_0: entered promiscuous mode [ 214.438582][ T9863] hsr_slave_1: entered promiscuous mode [ 214.449228][ T9863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.461134][ T9863] Cannot create hsr debugfs directory [ 214.521116][ T9966] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 214.592649][ T9966] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 214.609500][ T9966] macvtap0: entered promiscuous mode [ 214.622514][ T9966] macvtap0: entered allmulticast mode [ 214.628179][ T9966] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 214.642681][ T9966] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 214.649979][ T9966] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 214.668935][ T5843] Bluetooth: hci3: command tx timeout [ 214.837905][ T9970] netlink: 632 bytes leftover after parsing attributes in process `syz.2.1326'. [ 214.884147][ T9857] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.057558][ T9857] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.106783][ T9977] batman_adv: batadv0: Adding interface: dummy0 [ 215.113419][ T9977] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.139306][ T9977] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 215.240342][ T9857] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.408650][ T9857] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.561627][ T9989] lo speed is unknown, defaulting to 1000 [ 215.688370][ T9863] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.750166][ T9997] batadv_slave_1: entered promiscuous mode [ 215.767847][ T9993] batadv_slave_1: left promiscuous mode [ 215.856985][ T9863] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.992591][ T9863] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.012708][T10004] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 216.030541][T10006] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 216.048749][T10006] macvtap0: entered promiscuous mode [ 216.054443][T10006] macvtap0: entered allmulticast mode [ 216.061214][T10006] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 216.076163][T10006] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 216.083205][T10006] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 216.136996][ T9863] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.160052][T10008] __nla_validate_parse: 2 callbacks suppressed [ 216.160068][T10008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1337'. [ 216.184876][T10008] rdma_rxe: rxe_newlink: failed to add lo [ 216.313106][ T9857] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 216.336209][ T9857] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 216.345280][ T5843] Bluetooth: hci1: command tx timeout [ 216.373085][ T9857] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 216.447766][ T9857] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 216.540443][T10012] bond0: entered promiscuous mode [ 216.545898][T10012] bond_slave_0: entered promiscuous mode [ 216.552142][T10012] bond_slave_1: entered promiscuous mode [ 216.560136][T10012] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 216.574555][T10012] bond0: left promiscuous mode [ 216.584060][T10012] bond_slave_0: left promiscuous mode [ 216.593480][T10012] bond_slave_1: left promiscuous mode [ 216.647743][ T9863] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 216.711846][ T9863] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 216.755348][ T5843] Bluetooth: hci3: command tx timeout [ 216.761286][ T9863] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 216.795269][ T9863] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 217.033604][ T9857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.087474][ T9857] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.159611][ T6938] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.166815][ T6938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.210136][ T9863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.237253][ T6938] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.244380][ T6938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.307276][ T9863] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.343410][ T6955] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.350592][ T6955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.396088][ T6961] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.403318][ T6961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.710034][T10048] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1350'. [ 217.811946][T10053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1350'. [ 217.849032][T10052] bond0: entered promiscuous mode [ 217.868926][T10052] bond_slave_0: entered promiscuous mode [ 217.877542][T10054] rdma_rxe: rxe_newlink: failed to add lo [ 217.882970][T10052] bond_slave_1: entered promiscuous mode [ 217.893903][T10052] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 217.916355][T10052] bond0: left promiscuous mode [ 217.921614][T10052] bond_slave_0: left promiscuous mode [ 217.930379][T10052] bond_slave_1: left promiscuous mode [ 218.050447][ T9857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.217747][T10064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1354'. [ 218.295828][ T9863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.425194][ T5843] Bluetooth: hci1: command tx timeout [ 218.501989][ T9863] veth0_vlan: entered promiscuous mode [ 218.561382][ T9863] veth1_vlan: entered promiscuous mode [ 218.720260][ T9863] veth0_macvtap: entered promiscuous mode [ 218.741323][ T9863] veth1_macvtap: entered promiscuous mode [ 218.826597][ T5843] Bluetooth: hci3: command tx timeout [ 218.846977][T10086] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 218.873291][T10086] macvtap1: entered promiscuous mode [ 218.931796][T10086] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 218.945922][T10086] macvtap1: entered allmulticast mode [ 218.951362][T10086] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 218.976465][T10086] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 218.992818][T10086] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 219.065964][ T9863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.078144][T10095] netlink: 632 bytes leftover after parsing attributes in process `syz.3.1364'. [ 219.088734][ T9863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.099256][ T9863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.110688][ T9863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.123952][ T9863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.149202][ T9863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.167139][ T9863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.182840][ T9863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.194486][ T9863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.205576][ T9863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.240863][ T9863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.272737][ T9863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.316991][ T9863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.344948][ T9863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.373145][ T9863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.403713][ T9863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.424867][ T9863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.472221][ T9863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.499357][ T9863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.515363][ T9863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.529240][ T9863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.541434][ T9863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.566453][T10103] netlink: 61963 bytes leftover after parsing attributes in process `syz.3.1367'. [ 219.581751][ T9863] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.590838][ T9863] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.611065][ T9863] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.623720][ T9863] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.756308][ T9857] veth0_vlan: entered promiscuous mode [ 219.766469][T10113] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1371'. [ 219.829551][ T9857] veth1_vlan: entered promiscuous mode [ 219.845948][T10119] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1371'. [ 219.952679][T10124] netlink: 'syz.0.1373': attribute type 7 has an invalid length. [ 219.965474][T10116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1372'. [ 219.981276][ T6952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.020540][ T6952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.098545][ T9857] veth0_macvtap: entered promiscuous mode [ 220.129569][ T6961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.155048][ T6961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.176495][ T9857] veth1_macvtap: entered promiscuous mode [ 220.223360][ T9857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.254853][ T9857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.281666][T10130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1376'. [ 220.293339][ T9857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.306850][ T9857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.318376][ T9857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.329589][ T9857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.339569][ T9857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.350982][ T9857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.376049][ T9857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.397638][ T9857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.422757][ T9857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.434153][ T9857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.457620][ T9857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.497592][ T9857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.517447][ T9857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.528136][ T9857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.539372][ T9857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.550165][ T9857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.560864][ T9857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.574799][ T9857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.586126][ T9857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.597162][ T9857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.630465][ T9857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.640705][ T9857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.651642][ T9857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.683542][ T9857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.730644][ T9857] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.749781][ T9857] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.781983][ T9857] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.836440][ T9857] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.923846][T10151] bridge_slave_1 (unregistering): left allmulticast mode [ 220.932247][T10151] bridge_slave_1 (unregistering): left promiscuous mode [ 220.941123][T10151] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.027505][T10147] tipc: New replicast peer: 0.0.0.0 [ 221.041965][T10147] tipc: Enabled bearer , priority 10 [ 221.083041][T10150] lo speed is unknown, defaulting to 1000 [ 221.452063][ T6952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.482871][ T6952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.542360][ T6950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.566399][ T6950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.112584][T10168] __nla_validate_parse: 2 callbacks suppressed [ 222.112609][T10168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1388'. [ 222.144878][ T5842] tipc: Node number set to 4271477761 [ 222.195153][T10170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1389'. [ 222.281892][T10172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1389'. [ 222.344240][T10173] rdma_rxe: rxe_newlink: failed to add lo [ 222.447170][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 222.461135][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 222.470894][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.505565][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.527334][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 222.536541][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.646625][T10174] lo speed is unknown, defaulting to 1000 [ 222.695587][T10181] netlink: 'syz.2.1391': attribute type 1 has an invalid length. [ 222.710702][T10181] netlink: 'syz.2.1391': attribute type 1 has an invalid length. [ 223.224860][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 223.237011][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 223.253131][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 223.261986][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 223.272955][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 223.282108][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.290698][T10192] netlink: 61963 bytes leftover after parsing attributes in process `syz.3.1395'. [ 223.365717][T10197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1396'. [ 223.376380][T10194] lo speed is unknown, defaulting to 1000 [ 223.459998][T10174] chnl_net:caif_netlink_parms(): no params data found [ 223.648229][T10174] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.665305][T10174] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.681490][T10174] bridge_slave_0: entered allmulticast mode [ 223.698936][T10174] bridge_slave_0: entered promiscuous mode [ 223.775173][T10174] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.782579][T10174] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.794343][T10174] bridge_slave_1: entered allmulticast mode [ 223.804076][T10174] bridge_slave_1: entered promiscuous mode [ 223.921693][T10174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.935973][T10174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.109742][T10174] team0: Port device team_slave_0 added [ 224.130089][T10174] team0: Port device team_slave_1 added [ 224.208197][T10174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.223459][T10174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.252293][T10174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.274114][T10234] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1404'. [ 224.316340][T10174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.323360][T10174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.368381][T10174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.458816][T10236] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1405'. [ 224.519936][T10240] netlink: 61963 bytes leftover after parsing attributes in process `syz.2.1407'. [ 224.559127][T10174] hsr_slave_0: entered promiscuous mode [ 224.575620][T10174] hsr_slave_1: entered promiscuous mode [ 224.582542][T10174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.585584][ T5843] Bluetooth: hci1: command tx timeout [ 224.595900][T10174] Cannot create hsr debugfs directory [ 224.650416][T10244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1405'. [ 224.704343][T10239] lo speed is unknown, defaulting to 1000 [ 224.913382][T10254] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 224.956119][T10254] macvtap1: entered promiscuous mode [ 224.969659][T10254] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 224.996391][T10254] macvtap1: entered allmulticast mode [ 225.015890][T10254] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 225.033223][T10254] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 225.040563][T10254] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 225.060115][T10244] rdma_rxe: rxe_newlink: failed to add lo [ 225.105678][T10194] chnl_net:caif_netlink_parms(): no params data found [ 225.384889][ T5843] Bluetooth: hci3: command tx timeout [ 225.484831][T10260] wireguard0: entered promiscuous mode [ 225.490388][T10260] wireguard0: entered allmulticast mode [ 225.515619][T10270] FAULT_INJECTION: forcing a failure. [ 225.515619][T10270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.539260][T10270] CPU: 1 UID: 0 PID: 10270 Comm: syz.0.1414 Not tainted 6.14.0-rc7-syzkaller-01889-gcc04ed502457 #0 [ 225.539290][T10270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 225.539303][T10270] Call Trace: [ 225.539310][T10270] [ 225.539319][T10270] dump_stack_lvl+0x241/0x360 [ 225.539349][T10270] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.539373][T10270] ? __pfx__printk+0x10/0x10 [ 225.539396][T10270] ? __pfx_lock_release+0x10/0x10 [ 225.539428][T10270] ? vfs_write+0x7fa/0xd10 [ 225.539454][T10270] should_fail_ex+0x40a/0x550 [ 225.539490][T10270] _copy_from_user+0x2d/0xb0 [ 225.539547][T10270] move_addr_to_kernel+0x82/0x150 [ 225.539582][T10270] __sys_connect+0xb6/0x2d0 [ 225.539604][T10270] ? __fget_files+0x2a/0x410 [ 225.539640][T10270] ? __pfx___sys_connect+0x10/0x10 [ 225.539675][T10270] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 225.539708][T10270] ? do_syscall_64+0x100/0x230 [ 225.539745][T10270] __x64_sys_connect+0x7a/0x90 [ 225.539770][T10270] do_syscall_64+0xf3/0x230 [ 225.539803][T10270] ? clear_bhb_loop+0x35/0x90 [ 225.539837][T10270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.539866][T10270] RIP: 0033:0x7f1739d8d169 [ 225.539885][T10270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.539902][T10270] RSP: 002b:00007f173abf0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 225.539924][T10270] RAX: ffffffffffffffda RBX: 00007f1739fa5fa0 RCX: 00007f1739d8d169 [ 225.539939][T10270] RDX: 0000000000000010 RSI: 0000200000772000 RDI: 0000000000000003 [ 225.539952][T10270] RBP: 00007f173abf0090 R08: 0000000000000000 R09: 0000000000000000 [ 225.539965][T10270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.539977][T10270] R13: 0000000000000000 R14: 00007f1739fa5fa0 R15: 00007ffd21b6c1f8 [ 225.540008][T10270] [ 225.835979][T10174] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.955273][T10174] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.982225][T10194] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.989884][T10194] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.003082][T10194] bridge_slave_0: entered allmulticast mode [ 226.024285][T10194] bridge_slave_0: entered promiscuous mode [ 226.034304][T10194] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.041983][T10194] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.050828][T10194] bridge_slave_1: entered allmulticast mode [ 226.058776][T10194] bridge_slave_1: entered promiscuous mode [ 226.117232][T10174] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.274491][T10174] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.314048][T10194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.328271][T10194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.378780][T10194] team0: Port device team_slave_0 added [ 226.393038][T10194] team0: Port device team_slave_1 added [ 226.498418][T10194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.506905][T10194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.535801][T10194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.591558][T10194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.614692][T10194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.659163][T10194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.670515][ T5843] Bluetooth: hci1: command tx timeout [ 226.741566][T10194] hsr_slave_0: entered promiscuous mode [ 226.751002][T10194] hsr_slave_1: entered promiscuous mode [ 226.758145][T10194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.770203][T10194] Cannot create hsr debugfs directory [ 226.808677][T10174] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 226.873081][T10174] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 226.889970][T10174] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 226.915253][T10174] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 226.986052][T10288] bond0: entered promiscuous mode [ 226.991251][T10288] bond_slave_0: entered promiscuous mode [ 227.008736][T10290] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.1422'. [ 227.015034][T10288] bond_slave_1: entered promiscuous mode [ 227.027006][T10288] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 227.036899][T10288] bond0: left promiscuous mode [ 227.042205][T10288] bond_slave_0: left promiscuous mode [ 227.048798][T10288] bond_slave_1: left promiscuous mode [ 227.383934][T10194] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.411569][T10300] netlink: 'syz.0.1425': attribute type 7 has an invalid length. [ 227.439010][T10301] netlink: 'syz.0.1425': attribute type 7 has an invalid length. [ 227.466109][ T5843] Bluetooth: hci3: command tx timeout [ 227.556542][T10194] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.605471][T10174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.729926][T10194] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.790185][T10174] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.812302][T10312] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1428'. [ 227.907790][T10194] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.983720][ T6952] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.990991][ T6952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.085074][ T6952] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.092281][ T6952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.125213][T10322] vxcan1: entered allmulticast mode [ 228.133545][T10322] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1431'. [ 228.408368][T10194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 228.450760][T10194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 228.520070][T10194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 228.536001][T10194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.687068][T10340] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 228.747072][ T5843] Bluetooth: hci1: command tx timeout [ 228.762261][T10340] macvtap1: entered promiscuous mode [ 228.777417][T10340] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 228.807038][T10340] macvtap1: entered allmulticast mode [ 228.829440][T10340] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 228.833776][T10343] FAULT_INJECTION: forcing a failure. [ 228.833776][T10343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.859438][T10345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1440'. [ 228.865067][T10343] CPU: 0 UID: 0 PID: 10343 Comm: syz.0.1439 Not tainted 6.14.0-rc7-syzkaller-01889-gcc04ed502457 #0 [ 228.865098][T10343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 228.865112][T10343] Call Trace: [ 228.865120][T10343] [ 228.865130][T10343] dump_stack_lvl+0x241/0x360 [ 228.865166][T10343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.865191][T10343] ? __pfx__printk+0x10/0x10 [ 228.865221][T10343] ? snprintf+0xda/0x120 [ 228.865251][T10343] should_fail_ex+0x40a/0x550 [ 228.865290][T10343] _copy_to_user+0x31/0xb0 [ 228.865324][T10343] simple_read_from_buffer+0xca/0x150 [ 228.865359][T10343] proc_fail_nth_read+0x1e9/0x250 [ 228.865393][T10343] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 228.865455][T10343] ? rw_verify_area+0x243/0x630 [ 228.865478][T10343] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 228.865512][T10343] vfs_read+0x1f8/0xb40 [ 228.865537][T10343] ? fdget_pos+0x254/0x320 [ 228.865571][T10343] ? __pfx___mutex_lock+0x10/0x10 [ 228.865606][T10343] ? __pfx_vfs_read+0x10/0x10 [ 228.865634][T10343] ? __fget_files+0x2a/0x410 [ 228.865670][T10343] ? __fget_files+0x395/0x410 [ 228.865701][T10343] ? __fget_files+0x2a/0x410 [ 228.865745][T10343] ksys_read+0x18f/0x2b0 [ 228.865772][T10343] ? __pfx_ksys_read+0x10/0x10 [ 228.865797][T10343] ? do_syscall_64+0x100/0x230 [ 228.865835][T10343] ? do_syscall_64+0xb6/0x230 [ 228.865873][T10343] do_syscall_64+0xf3/0x230 [ 228.865907][T10343] ? clear_bhb_loop+0x35/0x90 [ 228.865942][T10343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.865972][T10343] RIP: 0033:0x7f1739d8bb7c [ 228.865992][T10343] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 228.866012][T10343] RSP: 002b:00007f173abf0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 228.866036][T10343] RAX: ffffffffffffffda RBX: 00007f1739fa5fa0 RCX: 00007f1739d8bb7c [ 228.866052][T10343] RDX: 000000000000000f RSI: 00007f173abf00a0 RDI: 0000000000000004 [ 228.866066][T10343] RBP: 00007f173abf0090 R08: 0000000000000000 R09: 0000000000000000 [ 228.866080][T10343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.866093][T10343] R13: 0000000000000000 R14: 00007f1739fa5fa0 R15: 00007ffd21b6c1f8 [ 228.866127][T10343] [ 229.101542][T10340] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 229.133215][T10340] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 229.177554][T10174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.318981][T10351] netlink: 61687 bytes leftover after parsing attributes in process `syz.3.1442'. [ 229.387873][T10194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.458219][T10194] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.486072][T10174] veth0_vlan: entered promiscuous mode [ 229.508486][ T6961] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.515656][ T6961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.545287][ T5843] Bluetooth: hci3: command tx timeout [ 229.597628][ T6961] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.604796][ T6961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.620142][T10353] lo speed is unknown, defaulting to 1000 [ 229.649004][T10174] veth1_vlan: entered promiscuous mode [ 229.840421][T10174] veth0_macvtap: entered promiscuous mode [ 229.878763][T10174] veth1_macvtap: entered promiscuous mode [ 229.951535][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.995126][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.014946][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.044731][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.065187][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.097394][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.135138][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.163317][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.184005][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.207398][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.228050][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.254465][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.274696][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.294678][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.316437][T10174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.381686][T10194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.401451][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.419302][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.433922][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.453080][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.505669][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.532802][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.554774][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.568222][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.578290][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.589529][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.599925][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.610771][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.635681][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.646565][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.697225][T10174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.818812][T10174] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.835538][ T5843] Bluetooth: hci1: command tx timeout [ 230.845674][T10174] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.891020][T10174] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.900633][T10174] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.927902][T10391] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 231.008818][T10394] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 231.016433][T10389] lo speed is unknown, defaulting to 1000 [ 231.027115][T10394] macvtap0: entered promiscuous mode [ 231.042195][T10394] macvtap0: entered allmulticast mode [ 231.077256][T10394] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 231.113990][T10394] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 231.125353][T10394] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 231.372183][T10194] veth0_vlan: entered promiscuous mode [ 231.444133][T10194] veth1_vlan: entered promiscuous mode [ 231.545972][ T6958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.553898][ T6958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.626080][ T5843] Bluetooth: hci3: command tx timeout [ 231.639147][ T6963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.649182][T10400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1456'. [ 231.673078][ T6963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.720705][T10194] veth0_macvtap: entered promiscuous mode [ 231.769849][T10194] veth1_macvtap: entered promiscuous mode [ 231.845336][T10194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.884792][T10194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.924705][T10194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.954811][T10194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.981183][T10194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.993745][T10194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.006042][T10194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.025060][T10194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.045062][T10194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.064701][T10194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.089052][T10194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.111263][T10194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.131166][T10194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.153603][T10194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.169608][T10194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.189452][T10194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.203871][T10194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.238353][T10194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.250890][T10194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.261875][T10194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.276203][T10194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.286593][T10194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.298982][T10194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.309391][T10194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.320424][T10194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.331215][T10194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.342200][T10194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.352712][T10194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.364050][T10194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.374403][T10194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.385648][T10194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.397242][T10194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.408394][T10194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.439202][T10194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.457286][T10421] netlink: 61963 bytes leftover after parsing attributes in process `syz.0.1461'. [ 232.658577][T10194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.684656][T10194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.703668][T10194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.721371][T10194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.769904][T10429] lo: left promiscuous mode [ 232.893556][T10429] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.033433][T10429] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 233.087709][T10433] bond0: entered promiscuous mode [ 233.092898][T10433] bond_slave_0: entered promiscuous mode [ 233.100056][T10433] bond_slave_1: entered promiscuous mode [ 233.107319][T10433] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 233.143688][T10433] bond0: left promiscuous mode [ 233.153172][T10433] bond_slave_0: left promiscuous mode [ 233.159262][T10433] bond_slave_1: left promiscuous mode [ 233.179893][T10435] lo: entered allmulticast mode [ 233.190503][T10438] lo speed is unknown, defaulting to 1000 [ 233.304973][T10435] lo: left allmulticast mode [ 233.340252][ T6938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.348901][ T6938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.421425][ T6958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.433033][ T6958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.885542][T10452] syzkaller0: entered promiscuous mode [ 233.895252][T10452] syzkaller0: entered allmulticast mode [ 234.294152][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 234.312095][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 234.333379][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 234.351202][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 234.360528][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 234.374808][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.256331][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.268811][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.293590][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.316128][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.335325][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 235.343703][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.507241][ T5837] Bluetooth: hci1: command tx timeout [ 236.554779][T10469] netlink: 61963 bytes leftover after parsing attributes in process `syz.0.1474'. [ 236.646746][T10457] lo speed is unknown, defaulting to 1000 [ 236.774376][T10478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1478'. [ 236.923633][T10471] lo speed is unknown, defaulting to 1000 [ 236.937635][T10485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1478'. [ 237.139212][T10474] lo speed is unknown, defaulting to 1000 [ 237.247092][T10494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1481'. [ 237.380507][T10485] rdma_rxe: rxe_newlink: failed to add lo [ 237.398141][ T5837] Bluetooth: hci3: command tx timeout [ 237.492278][T10497] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 237.510084][T10497] macvtap1: entered promiscuous mode [ 237.518165][T10497] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 237.526366][T10497] macvtap1: entered allmulticast mode [ 237.531879][T10497] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 237.552670][T10497] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 237.561616][T10497] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 237.596249][T10457] chnl_net:caif_netlink_parms(): no params data found [ 237.720933][T10502] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1483'. [ 238.040972][T10512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1486'. [ 238.044922][T10457] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.089830][T10457] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.091785][T10517] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1486'. [ 238.104966][T10457] bridge_slave_0: entered allmulticast mode [ 238.118131][T10457] bridge_slave_0: entered promiscuous mode [ 238.136780][T10471] chnl_net:caif_netlink_parms(): no params data found [ 238.151276][T10521] netlink: 61963 bytes leftover after parsing attributes in process `syz.0.1488'. [ 238.166291][T10457] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.184772][T10457] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.192129][T10457] bridge_slave_1: entered allmulticast mode [ 238.206453][T10457] bridge_slave_1: entered promiscuous mode [ 238.273911][T10512] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 238.317779][T10512] infiniband s9z1: RDMA CMA: cma_listen_on_dev, error -98 [ 238.328355][T10457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.370136][T10457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.585296][ T5837] Bluetooth: hci1: command tx timeout [ 238.752735][T10457] team0: Port device team_slave_0 added [ 238.778918][T10471] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.786301][T10471] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.825364][T10471] bridge_slave_0: entered allmulticast mode [ 238.832640][T10471] bridge_slave_0: entered promiscuous mode [ 238.879936][T10457] team0: Port device team_slave_1 added [ 238.921339][T10471] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.946744][T10471] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.975180][T10471] bridge_slave_1: entered allmulticast mode [ 238.996874][T10471] bridge_slave_1: entered promiscuous mode [ 239.046381][T10545] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 239.075448][T10556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1497'. [ 239.084889][T10556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1497'. [ 239.099503][T10549] macvtap1: entered promiscuous mode [ 239.105765][T10549] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 239.112980][T10549] macvtap1: entered allmulticast mode [ 239.119480][T10549] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 239.133644][T10549] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 239.141618][T10549] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 239.183568][T10457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.194858][T10457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.236479][T10457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.256929][T10471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.269652][T10471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.280624][T10457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.288132][T10457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.343493][T10457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.439680][T10471] team0: Port device team_slave_0 added [ 239.465506][ T5837] Bluetooth: hci3: command tx timeout [ 239.585745][T10471] team0: Port device team_slave_1 added [ 239.603610][T10457] hsr_slave_0: entered promiscuous mode [ 239.626235][T10457] hsr_slave_1: entered promiscuous mode [ 239.655513][T10457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.665314][T10457] Cannot create hsr debugfs directory [ 239.805996][T10471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.813000][T10471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.862793][T10471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.880132][T10471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.887664][T10471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.917515][T10471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.991180][T10584] rdma_rxe: rxe_newlink: failed to add lo [ 240.104386][T10587] rdma_rxe: rxe_newlink: failed to add lo [ 240.124524][T10588] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 240.143178][T10471] hsr_slave_0: entered promiscuous mode [ 240.150639][T10471] hsr_slave_1: entered promiscuous mode [ 240.157747][T10471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.165954][T10471] Cannot create hsr debugfs directory [ 240.442245][T10457] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.552076][T10457] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.664874][ T5837] Bluetooth: hci1: command tx timeout [ 240.782671][T10457] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.839870][T10598] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 240.853619][T10599] macvtap1: entered promiscuous mode [ 240.866049][T10599] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 240.873440][T10599] macvtap1: entered allmulticast mode [ 240.880930][T10599] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 240.897104][T10599] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 240.904154][T10599] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 240.992710][T10457] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.462799][T10471] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.523331][T10457] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 241.545673][ T5837] Bluetooth: hci3: command tx timeout [ 241.564202][T10457] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 241.656969][T10471] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.683759][T10457] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 241.702779][T10457] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 241.791577][T10471] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.804238][T10620] __nla_validate_parse: 8 callbacks suppressed [ 241.804260][T10620] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1522'. [ 241.937892][T10471] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.988696][T10626] lo speed is unknown, defaulting to 1000 [ 242.001907][T10628] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 242.051126][T10628] macvtap1: entered promiscuous mode [ 242.066225][T10628] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 242.081219][T10628] macvtap1: entered allmulticast mode [ 242.097607][T10628] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 242.118979][T10628] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 242.152599][T10628] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 242.412406][T10471] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 242.457913][T10633] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 242.467261][T10457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.474257][T10471] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 242.499132][T10471] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 242.533331][T10471] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 242.578515][T10457] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.657553][ T6938] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.664736][ T6938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.707025][ T6938] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.714154][ T6938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.746536][ T5843] Bluetooth: hci1: command tx timeout [ 242.811636][T10639] gretap0: left allmulticast mode [ 242.826601][T10639] gretap0: left promiscuous mode [ 242.848154][T10639] bridge0: port 3(gretap0) entered disabled state [ 242.887335][T10639] bridge_slave_0: left allmulticast mode [ 242.893047][T10639] bridge_slave_0: left promiscuous mode [ 242.899236][T10639] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.926725][T10639] bond0: (slave bond_slave_0): Releasing backup interface [ 242.950565][T10639] bond0: (slave bond_slave_1): Releasing backup interface [ 243.000189][T10639] team0: Port device team_slave_0 removed [ 243.012288][T10639] team0: Port device team_slave_1 removed [ 243.018892][T10639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.026923][T10639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.038223][T10639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.048401][T10639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.115421][T10643] vlan0: entered promiscuous mode [ 243.141197][T10643] team0: Port device vlan0 added [ 243.360293][T10660] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 243.377543][T10471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.419381][T10471] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.457122][ T6958] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.464296][ T6958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.508123][T10667] netpci0: tun_chr_ioctl cmd 1074025672 [ 243.513912][T10667] netpci0: ignored: set checksum disabled [ 243.576060][ T6958] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.583318][ T6958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.625509][ T5843] Bluetooth: hci3: command tx timeout [ 243.767884][T10457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.774515][T10674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1538'. [ 243.886966][T10677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1538'. [ 243.951121][T10457] veth0_vlan: entered promiscuous mode [ 243.992975][T10457] veth1_vlan: entered promiscuous mode [ 244.009092][T10682] rdma_rxe: rxe_newlink: failed to add lo [ 244.035752][T10681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1540'. [ 244.159209][T10457] veth0_macvtap: entered promiscuous mode [ 244.231225][T10457] veth1_macvtap: entered promiscuous mode [ 244.269092][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.297253][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.305522][T10690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1542'. [ 244.308779][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.328683][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.338878][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.358259][T10691] netlink: 'syz.3.1543': attribute type 1 has an invalid length. [ 244.366415][T10691] netlink: 16179 bytes leftover after parsing attributes in process `syz.3.1543'. [ 244.393889][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.405195][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.415951][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.442801][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.464969][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.485479][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.496828][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.506946][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.518255][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.528533][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.539789][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.552199][T10457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.636769][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.675039][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.697194][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.723537][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.762857][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.787006][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.797820][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.809750][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.822058][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.833987][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.846110][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.857565][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.885932][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.914653][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.924536][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.936853][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.950041][T10457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.005810][T10471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.059649][T10695] lo speed is unknown, defaulting to 1000 [ 245.061505][T10457] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.091123][T10457] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.100582][T10457] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.110099][T10457] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.297956][ T6961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.313941][ T6961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.362571][T10710] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 245.404492][T10710] macvtap1: entered promiscuous mode [ 245.410347][T10710] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 245.419542][T10710] macvtap1: entered allmulticast mode [ 245.425357][T10710] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 245.437638][T10710] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 245.445409][T10710] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 245.571123][ T6961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.589623][ T6961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.707221][ T5843] Bluetooth: hci3: command 0x0405 tx timeout [ 245.752377][T10471] veth0_vlan: entered promiscuous mode [ 245.830540][T10471] veth1_vlan: entered promiscuous mode [ 245.900712][T10723] lo speed is unknown, defaulting to 1000 [ 245.931491][T10471] veth0_macvtap: entered promiscuous mode [ 245.961873][T10471] veth1_macvtap: entered promiscuous mode [ 246.019210][T10729] netlink: 632 bytes leftover after parsing attributes in process `syz.3.1553'. [ 246.092665][T10727] netlink: 61963 bytes leftover after parsing attributes in process `syz.0.1552'. [ 246.221184][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.251921][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.275129][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.304141][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.320344][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.347719][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.365527][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.395672][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.414836][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.451229][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.471600][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.482791][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.492935][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.503630][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.514755][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.528145][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.539387][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.550670][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.562664][T10471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.618802][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.640140][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.651599][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.662786][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.673124][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.683990][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.694558][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.706331][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.716824][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.731148][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.741329][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.753178][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.763481][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.774291][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.785333][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.796085][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.806589][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.817994][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.832116][T10471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.873921][T10471] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.885192][T10471] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.893941][T10471] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.903211][T10471] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.025013][ T6963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.032932][ T6963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.090910][ T6950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.099235][ T6950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.469132][T10743] lo speed is unknown, defaulting to 1000 [ 247.699250][T10753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1561'. [ 247.850951][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 247.862946][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 247.885659][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 247.902804][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 247.912034][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 247.920338][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 248.033820][T10755] lo speed is unknown, defaulting to 1000 [ 248.353052][T10755] chnl_net:caif_netlink_parms(): no params data found [ 248.453408][T10755] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.461205][T10755] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.482915][T10755] bridge_slave_0: entered allmulticast mode [ 248.493859][T10755] bridge_slave_0: entered promiscuous mode [ 248.502697][T10755] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.522771][T10755] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.535280][T10755] bridge_slave_1: entered allmulticast mode [ 248.542733][T10755] bridge_slave_1: entered promiscuous mode [ 248.587309][T10755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.615940][T10755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.655627][T10755] team0: Port device team_slave_0 added [ 248.664214][T10755] team0: Port device team_slave_1 added [ 248.707105][T10755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.714098][T10755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.741732][T10755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.804930][T10755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.811929][T10755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.844074][T10755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.860413][T10769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1564'. [ 249.119012][T10755] hsr_slave_0: entered promiscuous mode [ 249.156611][T10755] hsr_slave_1: entered promiscuous mode [ 249.166414][T10755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.194480][T10755] Cannot create hsr debugfs directory [ 249.441818][T10788] syzkaller1: tun_chr_ioctl cmd 35108 [ 249.468152][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 249.478545][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 249.487328][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 249.505974][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 249.515355][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 249.522823][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 249.791936][T10789] lo speed is unknown, defaulting to 1000 [ 249.830268][T10799] vlan2: entered promiscuous mode [ 249.846598][T10799] ip6gretap0: entered promiscuous mode [ 250.025391][ T5837] Bluetooth: hci1: command tx timeout [ 250.039788][T10755] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.138890][T10809] bond0: entered promiscuous mode [ 250.150832][T10809] bond_slave_0: entered promiscuous mode [ 250.159793][T10809] bond_slave_1: entered promiscuous mode [ 250.175482][T10809] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 250.189890][T10809] bond0: left promiscuous mode [ 250.204652][T10809] bond_slave_0: left promiscuous mode [ 250.211806][T10809] bond_slave_1: left promiscuous mode [ 250.344477][T10755] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.385293][T10816] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 250.436777][T10818] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 250.454348][T10818] macvtap0: entered promiscuous mode [ 250.461640][T10818] macvtap0: entered allmulticast mode [ 250.467756][T10818] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 250.490303][T10818] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 250.505209][T10818] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 250.549575][T10823] bridge0: port 1(gretap0) entered blocking state [ 250.569449][T10823] bridge0: port 1(gretap0) entered disabled state [ 250.590050][T10823] gretap0: entered allmulticast mode [ 250.604919][T10823] gretap0: entered promiscuous mode [ 250.648649][T10755] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.672105][T10825] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 250.701517][T10826] macvtap1: entered promiscuous mode [ 250.708420][T10826] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 250.724705][T10826] macvtap1: entered allmulticast mode [ 250.730288][T10826] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 250.742804][T10826] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 250.750161][T10826] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 250.933305][T10755] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.001285][T10829] netlink: 61963 bytes leftover after parsing attributes in process `syz.3.1584'. [ 251.309820][T10789] chnl_net:caif_netlink_parms(): no params data found [ 251.347681][T10755] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 251.359908][T10755] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 251.368710][T10845] netlink: 'syz.0.1589': attribute type 2 has an invalid length. [ 251.400223][T10755] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 251.447303][T10755] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 251.546032][ T5837] Bluetooth: hci3: command tx timeout [ 251.633529][T10789] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.651768][T10789] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.671167][T10789] bridge_slave_0: entered allmulticast mode [ 251.695705][T10789] bridge_slave_0: entered promiscuous mode [ 251.727842][T10789] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.752568][T10858] netlink: 632 bytes leftover after parsing attributes in process `syz.3.1594'. [ 251.755308][T10789] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.785242][T10789] bridge_slave_1: entered allmulticast mode [ 251.802800][T10789] bridge_slave_1: entered promiscuous mode [ 251.883203][T10789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.918135][T10862] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 251.938193][T10789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.965902][T10862] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 251.995372][T10862] macvtap0: entered promiscuous mode [ 252.000920][T10862] macvtap0: entered allmulticast mode [ 252.006641][T10862] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 252.045998][T10862] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 252.072826][T10867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1597'. [ 252.082287][T10862] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 252.118186][ T5837] Bluetooth: hci1: command tx timeout [ 252.282571][T10789] team0: Port device team_slave_0 added [ 252.317813][T10789] team0: Port device team_slave_1 added [ 252.325906][T10871] netlink: 61963 bytes leftover after parsing attributes in process `syz.2.1599'. [ 252.452465][T10789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.475395][T10789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.528872][T10789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.542890][T10789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.571460][T10789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.586914][T10882] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1604'. [ 252.629080][T10789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.649825][T10883] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 252.658822][T10877] pim6reg0: tun_chr_ioctl cmd 35305 [ 252.739022][T10886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1604'. [ 252.814486][T10889] rdma_rxe: rxe_newlink: failed to add lo [ 252.818847][T10755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.860468][T10789] hsr_slave_0: entered promiscuous mode [ 252.875753][T10789] hsr_slave_1: entered promiscuous mode [ 252.882286][T10789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.890574][T10789] Cannot create hsr debugfs directory [ 253.039834][T10755] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.102881][ T6938] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.110133][ T6938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.207438][ T6938] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.214762][ T6938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.372514][T10789] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.503168][T10908] netlink: 632 bytes leftover after parsing attributes in process `syz.2.1615'. [ 253.511120][T10907] lo speed is unknown, defaulting to 1000 [ 253.566622][T10789] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.625712][ T5837] Bluetooth: hci3: command tx timeout [ 253.710499][T10789] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.745563][T10915] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 253.797158][T10915] macvtap1: entered promiscuous mode [ 253.804992][T10915] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 253.812138][T10915] macvtap1: entered allmulticast mode [ 253.831652][T10915] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 253.843861][T10915] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 253.865754][T10915] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 253.935922][T10789] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.032848][ T31] INFO: task udevd:5833 blocked for more than 143 seconds. [ 254.052787][ T31] Not tainted 6.14.0-rc7-syzkaller-01889-gcc04ed502457 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 254.084670][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 254.095354][ T31] task:udevd state:D stack:21856 pid:5833 tgid:5833 ppid:1 task_flags:0x400140 flags:0x00004002 [ 254.124830][ T31] Call Trace: [ 254.128347][ T31] [ 254.131405][ T31] __schedule+0x190e/0x4c90 [ 254.137751][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 254.143898][ T31] ? __pfx___schedule+0x10/0x10 [ 254.185640][ T5837] Bluetooth: hci1: command tx timeout [ 254.191313][ T31] ? __blk_flush_plug+0x449/0x500 [ 254.205986][ T31] ? __pfx_lock_release+0x10/0x10 [ 254.224795][ T31] ? __pfx___mod_timer+0x10/0x10 [ 254.229827][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 254.246977][ T31] ? schedule+0x90/0x320 [ 254.251305][ T31] schedule+0x14b/0x320 [ 254.255680][ T31] schedule_timeout+0x15a/0x290 [ 254.260578][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 254.267031][ T31] ? __pfx_process_timeout+0x10/0x10 [ 254.272386][ T31] ? prepare_to_wait_event+0x3bd/0x400 [ 254.282735][ T31] nbd_queue_rq+0x6dd/0xef0 [ 254.288275][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 254.293360][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 254.300047][ T31] blk_mq_dispatch_rq_list+0xad3/0x19d0 [ 254.311910][ T31] ? sbitmap_get+0x289/0x3f0 [ 254.317131][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 254.323164][ T31] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 254.329489][ T31] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 254.336193][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 254.342996][ T31] ? __pfx_lock_acquire+0x10/0x10 [ 254.348734][ T31] ? __pfx___might_resched+0x10/0x10 [ 254.354081][ T31] ? sbitmap_any_bit_set+0x155/0x190 [ 254.359895][ T31] ? blk_mq_hw_queue_need_run+0x14d/0x6d0 [ 254.366274][ T31] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 254.372311][ T31] ? blk_mq_run_hw_queue+0x32b/0x500 [ 254.377980][ T31] blk_mq_run_hw_queue+0x354/0x500 [ 254.383149][ T31] blk_mq_flush_plug_list+0x118e/0x1870 [ 254.388859][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 254.396495][ T31] ? blk_mq_submit_bio+0xfb9/0x25d0 [ 254.401773][ T31] ? blk_mq_submit_bio+0x494/0x25d0 [ 254.410257][ T31] __blk_flush_plug+0x420/0x500 [ 254.415703][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 254.421748][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 254.428104][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 254.434512][ T31] __submit_bio+0x54a/0x6a0 [ 254.439900][ T31] ? __pfx___submit_bio+0x10/0x10 [ 254.445423][ T31] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 254.451114][ T31] ? bio_associate_blkg_from_css+0x182/0xc70 [ 254.457649][ T31] ? __pfx___might_resched+0x10/0x10 [ 254.462995][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 254.470087][ T31] block_read_full_folio+0x9b3/0xae0 [ 254.475909][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 254.481331][ T31] ? __pfx_block_read_full_folio+0x10/0x10 [ 254.487757][ T31] filemap_read_folio+0x148/0x3b0 [ 254.492861][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 254.499329][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 254.505849][ T31] ? __filemap_get_folio+0x9d2/0xb40 [ 254.512472][ T31] ? __asan_memcpy+0x40/0x70 [ 254.518249][ T31] do_read_cache_folio+0x373/0x5b0 [ 254.523410][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 254.529822][ T31] read_part_sector+0xb3/0x260 [ 254.535116][ T31] adfspart_check_ICS+0xcb/0xa20 [ 254.540113][ T31] ? snprintf+0xda/0x120 [ 254.544392][ T31] ? vsnprintf+0x1148/0x1220 [ 254.549740][ T31] ? vsnprintf+0x18e/0x1220 [ 254.554287][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 254.560902][ T31] ? set_page_refcounted+0xa1/0x1e0 [ 254.566657][ T31] bdev_disk_changed+0x77f/0x14d0 [ 254.571750][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 254.577749][ T31] ? wait_on_inode+0xc1/0x230 [ 254.582481][ T31] ? __pfx_wait_on_inode+0x10/0x10 [ 254.588830][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 254.594091][ T31] blkdev_get_whole+0x2d2/0x450 [ 254.599430][ T31] bdev_open+0x2d4/0xc50 [ 254.603737][ T31] blkdev_open+0x38e/0x4e0 [ 254.608751][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 254.617919][ T31] do_dentry_open+0xdec/0x1960 [ 254.622762][ T31] ? vfs_open+0x31/0x370 [ 254.627534][ T31] vfs_open+0x3b/0x370 [ 254.631674][ T31] path_openat+0x2c81/0x3590 [ 254.636456][ T31] ? __pfx_path_openat+0x10/0x10 [ 254.641457][ T31] do_filp_open+0x27f/0x4e0 [ 254.646306][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 254.651457][ T31] ? do_raw_spin_lock+0x14f/0x370 [ 254.657018][ T31] do_sys_openat2+0x13e/0x1d0 [ 254.661752][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 254.676524][ T31] __x64_sys_openat+0x247/0x2a0 [ 254.681455][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 254.687390][ T31] ? do_syscall_64+0x100/0x230 [ 254.692211][ T31] ? do_syscall_64+0xb6/0x230 [ 254.697106][ T31] do_syscall_64+0xf3/0x230 [ 254.701657][ T31] ? clear_bhb_loop+0x35/0x90 [ 254.706534][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.712474][ T31] RIP: 0033:0x7f06a01169a4 [ 254.719561][ T31] RSP: 002b:00007fffe7172020 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 254.729014][ T31] RAX: ffffffffffffffda RBX: 0000558269f50960 RCX: 00007f06a01169a4 [ 254.737130][ T31] RDX: 00000000000a0800 RSI: 0000558269f3ba10 RDI: 00000000ffffff9c [ 254.745736][ T31] RBP: 0000558269f3ba10 R08: 0000000000000001 R09: 7fffffffffffffff [ 254.754013][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 254.762255][ T31] R13: 0000558269f66ed0 R14: 0000000000000001 R15: 0000558269f32910 [ 254.770521][ T31] [ 254.773653][ T31] INFO: task udevd:5844 blocked for more than 144 seconds. [ 254.782493][ T31] Not tainted 6.14.0-rc7-syzkaller-01889-gcc04ed502457 #0 [ 254.797452][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 254.806665][ T31] task:udevd state:D stack:20280 pid:5844 tgid:5844 ppid:1 task_flags:0x400140 flags:0x00004002 [ 254.820758][ T31] Call Trace: [ 254.824285][ T31] [ 254.828189][ T31] __schedule+0x190e/0x4c90 [ 254.832750][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 254.839182][ T31] ? __pfx___schedule+0x10/0x10 [ 254.844091][ T31] ? __blk_flush_plug+0x449/0x500 [ 254.849478][ T31] ? __pfx_lock_release+0x10/0x10 [ 254.854822][ T31] ? __pfx___mod_timer+0x10/0x10 [ 254.859822][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 254.866707][ T31] ? schedule+0x90/0x320 [ 254.871012][ T31] schedule+0x14b/0x320 [ 254.875327][ T31] schedule_timeout+0x15a/0x290 [ 254.880306][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 254.885913][ T31] ? __pfx_process_timeout+0x10/0x10 [ 254.891251][ T31] ? prepare_to_wait_event+0x3bd/0x400 [ 254.897107][ T31] nbd_queue_rq+0x6dd/0xef0 [ 254.901676][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 254.906968][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 254.913110][ T31] blk_mq_dispatch_rq_list+0xad3/0x19d0 [ 254.918811][ T31] ? sbitmap_get+0x289/0x3f0 [ 254.925505][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 254.931652][ T31] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 254.937611][ T31] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 254.944013][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 254.951003][ T31] ? __pfx_lock_acquire+0x10/0x10 [ 254.956548][ T31] ? __pfx___might_resched+0x10/0x10 [ 254.961893][ T31] ? sbitmap_any_bit_set+0x155/0x190 [ 254.973314][ T31] ? blk_mq_hw_queue_need_run+0x14d/0x6d0 [ 254.979298][ T31] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 254.986434][ T31] ? blk_mq_run_hw_queue+0x32b/0x500 [ 254.991789][ T31] blk_mq_run_hw_queue+0x354/0x500 [ 254.997060][ T31] blk_mq_flush_plug_list+0x118e/0x1870 [ 255.002742][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 255.008932][ T31] ? blk_mq_submit_bio+0xfb9/0x25d0 [ 255.014210][ T31] ? blk_mq_submit_bio+0x494/0x25d0 [ 255.019878][ T31] __blk_flush_plug+0x420/0x500 [ 255.033761][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 255.039936][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 255.046044][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 255.052544][ T31] __submit_bio+0x54a/0x6a0 [ 255.057221][ T31] ? __pfx___submit_bio+0x10/0x10 [ 255.062321][ T31] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 255.068875][ T31] ? bio_associate_blkg_from_css+0x182/0xc70 [ 255.075335][ T31] ? __pfx___might_resched+0x10/0x10 [ 255.080708][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 255.087249][ T31] block_read_full_folio+0x9b3/0xae0 [ 255.092613][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 255.098216][ T31] ? __pfx_block_read_full_folio+0x10/0x10 [ 255.104100][ T31] filemap_read_folio+0x148/0x3b0 [ 255.109635][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 255.115212][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 255.120799][ T31] ? __filemap_get_folio+0x9d2/0xb40 [ 255.127881][ T31] ? __asan_memcpy+0x40/0x70 [ 255.132530][ T31] do_read_cache_folio+0x373/0x5b0 [ 255.138049][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 255.143556][ T31] read_part_sector+0xb3/0x260 [ 255.148790][ T31] adfspart_check_ICS+0xcb/0xa20 [ 255.153782][ T31] ? snprintf+0xda/0x120 [ 255.158227][ T31] ? vsnprintf+0x1148/0x1220 [ 255.162861][ T31] ? vsnprintf+0x18e/0x1220 [ 255.167909][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 255.173509][ T31] ? set_page_refcounted+0xa1/0x1e0 [ 255.178908][ T31] bdev_disk_changed+0x77f/0x14d0 [ 255.184008][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 255.189718][ T31] ? wait_on_inode+0xc1/0x230 [ 255.194450][ T31] ? __pfx_wait_on_inode+0x10/0x10 [ 255.200116][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 255.205592][ T31] blkdev_get_whole+0x2d2/0x450 [ 255.210512][ T31] bdev_open+0x2d4/0xc50 [ 255.214976][ T31] blkdev_open+0x38e/0x4e0 [ 255.219443][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 255.224437][ T31] do_dentry_open+0xdec/0x1960 [ 255.231086][ T31] ? vfs_open+0x31/0x370 [ 255.235496][ T31] vfs_open+0x3b/0x370 [ 255.239622][ T31] path_openat+0x2c81/0x3590 [ 255.244283][ T31] ? __pfx_path_openat+0x10/0x10 [ 255.249503][ T31] do_filp_open+0x27f/0x4e0 [ 255.254069][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 255.259629][ T31] ? do_raw_spin_lock+0x14f/0x370 [ 255.264896][ T31] do_sys_openat2+0x13e/0x1d0 [ 255.269629][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 255.275428][ T31] __x64_sys_openat+0x247/0x2a0 [ 255.280343][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 255.286695][ T31] ? do_syscall_64+0x100/0x230 [ 255.291519][ T31] ? do_syscall_64+0xb6/0x230 [ 255.296870][ T31] do_syscall_64+0xf3/0x230 [ 255.301439][ T31] ? clear_bhb_loop+0x35/0x90 [ 255.307849][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.313802][ T31] RIP: 0033:0x7f06a01169a4 [ 255.319070][ T31] RSP: 002b:00007fffe7172020 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 255.328025][ T31] RAX: ffffffffffffffda RBX: 0000558269f50960 RCX: 00007f06a01169a4 [ 255.337919][ T31] RDX: 00000000000a0800 RSI: 0000558269f44b60 RDI: 00000000ffffff9c [ 255.346845][ T31] RBP: 0000558269f44b60 R08: 0000000000000001 R09: 7fffffffffffffff [ 255.355291][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 255.363329][ T31] R13: 0000558269f49890 R14: 0000000000000001 R15: 0000558269f32910 [ 255.372215][ T31] [ 255.376508][ T31] INFO: task udevd:5855 blocked for more than 144 seconds. [ 255.383831][ T31] Not tainted 6.14.0-rc7-syzkaller-01889-gcc04ed502457 #0 [ 255.392154][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 255.401344][ T31] task:udevd state:D stack:20976 pid:5855 tgid:5855 ppid:1 task_flags:0x400140 flags:0x00004002 [ 255.414026][ T31] Call Trace: [ 255.417787][ T31] [ 255.420759][ T31] __schedule+0x190e/0x4c90 [ 255.425794][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 255.434191][ T31] ? __pfx___schedule+0x10/0x10 [ 255.439934][ T31] ? __blk_flush_plug+0x449/0x500 [ 255.445410][ T31] ? __pfx_lock_release+0x10/0x10 [ 255.450495][ T31] ? __pfx___mod_timer+0x10/0x10 [ 255.455931][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 255.462308][ T31] ? schedule+0x90/0x320 [ 255.467678][ T31] schedule+0x14b/0x320 [ 255.471889][ T31] schedule_timeout+0x15a/0x290 [ 255.477267][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 255.482702][ T31] ? __pfx_process_timeout+0x10/0x10 [ 255.494119][ T31] ? prepare_to_wait_event+0x3bd/0x400 [ 255.501757][ T31] nbd_queue_rq+0x6dd/0xef0 [ 255.506762][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 255.511833][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 255.518494][ T31] blk_mq_dispatch_rq_list+0xad3/0x19d0 [ 255.524193][ T31] ? sbitmap_get+0x289/0x3f0 [ 255.529859][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 255.544262][ T31] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 255.550472][ T31] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 255.557639][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 255.564551][ T31] ? __pfx_lock_acquire+0x10/0x10 [ 255.569965][ T31] ? __pfx___might_resched+0x10/0x10 [ 255.575699][ T31] ? sbitmap_any_bit_set+0x155/0x190 [ 255.581033][ T31] ? blk_mq_hw_queue_need_run+0x14d/0x6d0 [ 255.587408][ T31] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 255.593447][ T31] ? blk_mq_run_hw_queue+0x32b/0x500 [ 255.599331][ T31] blk_mq_run_hw_queue+0x354/0x500 [ 255.604502][ T31] blk_mq_flush_plug_list+0x118e/0x1870 [ 255.610502][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 255.617221][ T31] ? blk_mq_submit_bio+0xfb9/0x25d0 [ 255.622483][ T31] ? blk_mq_submit_bio+0x494/0x25d0 [ 255.628224][ T31] __blk_flush_plug+0x420/0x500 [ 255.633134][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 255.642221][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 255.648682][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 255.655534][ T31] __submit_bio+0x54a/0x6a0 [ 255.660084][ T31] ? __pfx___submit_bio+0x10/0x10 [ 255.665618][ T31] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 255.671291][ T31] ? bio_associate_blkg_from_css+0x182/0xc70 [ 255.678042][ T31] ? __pfx___might_resched+0x10/0x10 [ 255.683381][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 255.690173][ T31] block_read_full_folio+0x9b3/0xae0 [ 255.695941][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 255.701458][ T31] ? __pfx_block_read_full_folio+0x10/0x10 [ 255.705045][ T5837] Bluetooth: hci3: command tx timeout [ 255.716597][ T31] filemap_read_folio+0x148/0x3b0 [ 255.721691][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 255.728098][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 255.733690][ T31] ? __filemap_get_folio+0x9d2/0xb40 [ 255.752910][ T31] ? __asan_memcpy+0x40/0x70 [ 255.758078][ T31] do_read_cache_folio+0x373/0x5b0 [ 255.763235][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 255.769549][ T31] read_part_sector+0xb3/0x260 [ 255.774370][ T31] adfspart_check_ICS+0xcb/0xa20 [ 255.779727][ T31] ? snprintf+0xda/0x120 [ 255.784022][ T31] ? vsnprintf+0x1148/0x1220 [ 255.793750][ T31] ? vsnprintf+0x18e/0x1220 [ 255.798734][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 255.804320][ T31] ? set_page_refcounted+0xa1/0x1e0 [ 255.814786][ T31] bdev_disk_changed+0x77f/0x14d0 [ 255.819895][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 255.825856][ T31] ? wait_on_inode+0xc1/0x230 [ 255.830621][ T31] ? __pfx_wait_on_inode+0x10/0x10 [ 255.835939][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 255.844052][ T31] blkdev_get_whole+0x2d2/0x450 [ 255.849171][ T31] bdev_open+0x2d4/0xc50 [ 255.853473][ T31] blkdev_open+0x38e/0x4e0 [ 255.858007][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 255.862980][ T31] do_dentry_open+0xdec/0x1960 [ 255.868117][ T31] ? vfs_open+0x31/0x370 [ 255.872424][ T31] vfs_open+0x3b/0x370 [ 255.876669][ T31] path_openat+0x2c81/0x3590 [ 255.881353][ T31] ? __pfx_path_openat+0x10/0x10 [ 255.886490][ T31] do_filp_open+0x27f/0x4e0 [ 255.891047][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 255.896202][ T31] ? do_raw_spin_lock+0x14f/0x370 [ 255.901310][ T31] do_sys_openat2+0x13e/0x1d0 [ 255.906185][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 255.911446][ T31] __x64_sys_openat+0x247/0x2a0 [ 255.916569][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 255.921984][ T31] ? do_syscall_64+0x100/0x230 [ 255.926936][ T31] ? do_syscall_64+0xb6/0x230 [ 255.931660][ T31] do_syscall_64+0xf3/0x230 [ 255.936290][ T31] ? clear_bhb_loop+0x35/0x90 [ 255.941015][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.950716][ T31] RIP: 0033:0x7f06a01169a4 [ 255.955347][ T31] RSP: 002b:00007fffe7172020 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 255.964221][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.970791][ T31] RAX: ffffffffffffffda RBX: 0000558269f45eb0 RCX: 00007f06a01169a4 [ 255.979112][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.987238][ T31] RDX: 00000000000a0800 RSI: 0000558269f68e00 RDI: 00000000ffffff9c [ 255.995424][ T31] RBP: 0000558269f68e00 R08: 0000000000000001 R09: 7fffffffffffffff [ 256.003438][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 256.011584][ T31] R13: 0000558269f3dce0 R14: 0000000000000001 R15: 0000558269f32910 [ 256.019809][ T31] [ 256.026470][ T31] INFO: task udevd:5959 blocked for more than 145 seconds. [ 256.034191][ T31] Not tainted 6.14.0-rc7-syzkaller-01889-gcc04ed502457 #0 [ 256.051427][T10926] bond0: entered promiscuous mode [ 256.056656][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 256.065644][T10926] bond_slave_0: entered promiscuous mode [ 256.071645][T10926] bond_slave_1: entered promiscuous mode [ 256.077460][ T31] task:udevd state:D stack:22296 pid:5959 tgid:5959 ppid:1 task_flags:0x400140 flags:0x00004002 [ 256.091551][T10926] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 256.098551][ T31] Call Trace: [ 256.101860][ T31] [ 256.106173][ T31] __schedule+0x190e/0x4c90 [ 256.110763][ T31] ? __pfx___schedule+0x10/0x10 [ 256.115809][ T31] ? __blk_flush_plug+0x449/0x500 [ 256.120894][ T31] ? __pfx_lock_release+0x10/0x10 [ 256.126136][ T31] ? __pfx___mod_timer+0x10/0x10 [ 256.131115][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 256.137752][ T31] ? schedule+0x90/0x320 [ 256.142110][ T31] schedule+0x14b/0x320 [ 256.146441][ T31] schedule_timeout+0x15a/0x290 [ 256.153361][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 256.159015][ T31] ? __pfx_process_timeout+0x10/0x10 [ 256.164354][ T31] ? prepare_to_wait_event+0x3bd/0x400 [ 256.170269][ T31] nbd_queue_rq+0x6dd/0xef0 [ 256.174986][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 256.180065][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 256.186871][ T31] blk_mq_dispatch_rq_list+0xad3/0x19d0 [ 256.192573][ T31] ? sbitmap_get+0x289/0x3f0 [ 256.197385][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 256.203507][ T31] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 256.209643][ T31] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 256.216208][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 256.223017][ T31] ? __pfx_lock_acquire+0x10/0x10 [ 256.228228][ T31] ? __pfx___might_resched+0x10/0x10 [ 256.233565][ T31] ? sbitmap_any_bit_set+0x155/0x190 [ 256.239127][ T31] ? blk_mq_hw_queue_need_run+0x14d/0x6d0 [ 256.245046][ T31] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 256.253104][ T31] ? blk_mq_run_hw_queue+0x32b/0x500 [ 256.258628][ T31] blk_mq_run_hw_queue+0x354/0x500 [ 256.263804][ T31] blk_mq_flush_plug_list+0x118e/0x1870 [ 256.269769][ T5837] Bluetooth: hci1: command tx timeout [ 256.275856][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 256.281809][ T31] ? blk_mq_submit_bio+0xfb9/0x25d0 [ 256.287146][ T31] ? blk_mq_submit_bio+0x494/0x25d0 [ 256.292398][ T31] __blk_flush_plug+0x420/0x500 [ 256.297800][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 256.303841][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 256.309299][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 256.316001][ T31] __submit_bio+0x54a/0x6a0 [ 256.320546][ T31] ? __pfx___submit_bio+0x10/0x10 [ 256.325707][ T31] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 256.331388][ T31] ? bio_associate_blkg_from_css+0x182/0xc70 [ 256.337663][ T31] ? __pfx___might_resched+0x10/0x10 [ 256.343017][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 256.349949][ T31] block_read_full_folio+0x9b3/0xae0 [ 256.357936][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 256.363400][ T31] ? __pfx_block_read_full_folio+0x10/0x10 [ 256.369376][ T31] filemap_read_folio+0x148/0x3b0 [ 256.374458][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 256.380188][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 256.385853][ T31] ? __filemap_get_folio+0x9d2/0xb40 [ 256.391191][ T31] ? __asan_memcpy+0x40/0x70 [ 256.396048][ T31] do_read_cache_folio+0x373/0x5b0 [ 256.401196][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 256.406784][ T31] read_part_sector+0xb3/0x260 [ 256.411591][ T31] adfspart_check_ICS+0xcb/0xa20 [ 256.416770][ T31] ? snprintf+0xda/0x120 [ 256.421050][ T31] ? vsnprintf+0x1148/0x1220 [ 256.426181][ T31] ? vsnprintf+0x18e/0x1220 [ 256.430734][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 256.436577][ T31] ? set_page_refcounted+0xa1/0x1e0 [ 256.441843][ T31] bdev_disk_changed+0x77f/0x14d0 [ 256.447027][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 256.452519][ T31] ? wait_on_inode+0xc1/0x230 [ 256.459363][ T31] ? __pfx_wait_on_inode+0x10/0x10 [ 256.464541][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 256.469946][ T31] blkdev_get_whole+0x2d2/0x450 [ 256.475174][ T31] bdev_open+0x2d4/0xc50 [ 256.479489][ T31] blkdev_open+0x38e/0x4e0 [ 256.483929][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 256.488992][ T31] do_dentry_open+0xdec/0x1960 [ 256.493794][ T31] ? vfs_open+0x31/0x370 [ 256.498261][ T31] vfs_open+0x3b/0x370 [ 256.502390][ T31] path_openat+0x2c81/0x3590 [ 256.507773][ T31] ? __pfx_path_openat+0x10/0x10 [ 256.512801][ T31] do_filp_open+0x27f/0x4e0 [ 256.517972][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 256.523042][ T31] ? do_raw_spin_lock+0x14f/0x370 [ 256.528648][ T31] do_sys_openat2+0x13e/0x1d0 [ 256.533361][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 256.539180][ T31] __x64_sys_openat+0x247/0x2a0 [ 256.544074][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 256.549970][ T31] ? do_syscall_64+0x100/0x230 [ 256.555261][ T31] ? do_syscall_64+0xb6/0x230 [ 256.562054][ T31] do_syscall_64+0xf3/0x230 [ 256.567261][ T31] ? clear_bhb_loop+0x35/0x90 [ 256.571992][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.578755][ T31] RIP: 0033:0x7f06a01169a4 [ 256.583208][ T31] RSP: 002b:00007fffe7172020 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 256.598288][ T31] RAX: ffffffffffffffda RBX: 0000558269f584c0 RCX: 00007f06a01169a4 [ 256.606708][ T31] RDX: 00000000000a0800 RSI: 0000558269f56780 RDI: 00000000ffffff9c [ 256.614892][ T31] RBP: 0000558269f56780 R08: 0000000000000001 R09: 7fffffffffffffff [ 256.622995][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 256.631065][ T31] R13: 0000558269f53320 R14: 0000000000000001 R15: 0000558269f32910 [ 256.639396][ T31] [ 256.642576][ T31] INFO: task udevd:5962 blocked for more than 145 seconds. [ 256.651592][ T31] Not tainted 6.14.0-rc7-syzkaller-01889-gcc04ed502457 #0 [ 256.659608][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 256.684767][ T31] task:udevd state:D stack:22544 pid:5962 tgid:5962 ppid:1 task_flags:0x400140 flags:0x00004002 [ 256.712906][ T31] Call Trace: [ 256.716503][ T31] [ 256.719480][ T31] __schedule+0x190e/0x4c90 [ 256.724022][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 256.730125][ T31] ? __pfx___schedule+0x10/0x10 [ 256.735213][ T31] ? __blk_flush_plug+0x449/0x500 [ 256.740290][ T31] ? __pfx_lock_release+0x10/0x10 [ 256.746013][ T31] ? __pfx___mod_timer+0x10/0x10 [ 256.751021][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 256.757646][ T31] ? schedule+0x90/0x320 [ 256.761927][ T31] schedule+0x14b/0x320 [ 256.768319][ T31] schedule_timeout+0x15a/0x290 [ 256.773230][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 256.779459][ T31] ? __pfx_process_timeout+0x10/0x10 [ 256.785125][ T31] ? prepare_to_wait_event+0x3bd/0x400 [ 256.790647][ T31] nbd_queue_rq+0x6dd/0xef0 [ 256.795900][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 256.800965][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 256.807576][ T31] blk_mq_dispatch_rq_list+0xad3/0x19d0 [ 256.813178][ T31] ? sbitmap_get+0x289/0x3f0 [ 256.818404][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 256.824438][ T31] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 256.830971][ T31] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 256.837888][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 256.845027][ T31] ? __pfx_lock_acquire+0x10/0x10 [ 256.850112][ T31] ? __pfx___might_resched+0x10/0x10 [ 256.856047][ T31] ? sbitmap_any_bit_set+0x155/0x190 [ 256.861370][ T31] ? blk_mq_hw_queue_need_run+0x14d/0x6d0 [ 256.869605][ T31] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 256.876149][ T31] ? blk_mq_run_hw_queue+0x32b/0x500 [ 256.881488][ T31] blk_mq_run_hw_queue+0x354/0x500 [ 256.887135][ T31] blk_mq_flush_plug_list+0x118e/0x1870 [ 256.892737][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 256.899343][ T31] ? blk_mq_submit_bio+0xfb9/0x25d0 [ 256.905086][ T31] ? blk_mq_submit_bio+0x494/0x25d0 [ 256.910391][ T31] __blk_flush_plug+0x420/0x500 [ 256.915929][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 256.921968][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 256.927985][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 256.934369][ T31] __submit_bio+0x54a/0x6a0 [ 256.939542][ T31] ? __pfx___submit_bio+0x10/0x10 [ 256.944707][ T31] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 256.950556][ T31] ? bio_associate_blkg_from_css+0x182/0xc70 [ 256.956937][ T31] ? __pfx___might_resched+0x10/0x10 [ 256.962264][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 256.970756][ T31] block_read_full_folio+0x9b3/0xae0 [ 256.976500][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 256.981923][ T31] ? __pfx_block_read_full_folio+0x10/0x10 [ 256.988132][ T31] filemap_read_folio+0x148/0x3b0 [ 256.993467][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 256.999618][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 257.005438][ T31] ? __filemap_get_folio+0x9d2/0xb40 [ 257.010785][ T31] ? __asan_memcpy+0x40/0x70 [ 257.015687][ T31] do_read_cache_folio+0x373/0x5b0 [ 257.020858][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 257.026440][ T31] read_part_sector+0xb3/0x260 [ 257.031236][ T31] adfspart_check_ICS+0xcb/0xa20 [ 257.036485][ T31] ? snprintf+0xda/0x120 [ 257.040797][ T31] ? vsnprintf+0x1148/0x1220 [ 257.045875][ T31] ? vsnprintf+0x18e/0x1220 [ 257.050516][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 257.056582][ T31] ? set_page_refcounted+0xa1/0x1e0 [ 257.061841][ T31] bdev_disk_changed+0x77f/0x14d0 [ 257.067248][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 257.074413][ T31] ? wait_on_inode+0xc1/0x230 [ 257.079454][ T31] ? __pfx_wait_on_inode+0x10/0x10 [ 257.084675][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 257.089922][ T31] blkdev_get_whole+0x2d2/0x450 [ 257.095021][ T31] bdev_open+0x2d4/0xc50 [ 257.099334][ T31] blkdev_open+0x38e/0x4e0 [ 257.103792][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 257.108827][ T31] do_dentry_open+0xdec/0x1960 [ 257.113694][ T31] ? vfs_open+0x31/0x370 [ 257.118176][ T31] vfs_open+0x3b/0x370 [ 257.122302][ T31] path_openat+0x2c81/0x3590 [ 257.127149][ T31] ? __pfx_path_openat+0x10/0x10 [ 257.132153][ T31] do_filp_open+0x27f/0x4e0 [ 257.136899][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 257.142315][ T31] ? do_raw_spin_lock+0x14f/0x370 [ 257.148119][ T31] do_sys_openat2+0x13e/0x1d0 [ 257.152853][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 257.158474][ T31] __x64_sys_openat+0x247/0x2a0 [ 257.163528][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 257.169055][ T31] ? do_syscall_64+0x100/0x230 [ 257.176011][ T31] ? do_syscall_64+0xb6/0x230 [ 257.180756][ T31] do_syscall_64+0xf3/0x230 [ 257.185406][ T31] ? clear_bhb_loop+0x35/0x90 [ 257.190132][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.196425][ T31] RIP: 0033:0x7f06a01169a4 [ 257.200897][ T31] RSP: 002b:00007fffe7172020 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 257.209726][ T31] RAX: ffffffffffffffda RBX: 0000558269f32ff0 RCX: 00007f06a01169a4 [ 257.217955][ T31] RDX: 00000000000a0800 RSI: 0000558269f33300 RDI: 00000000ffffff9c [ 257.229060][ T31] RBP: 0000558269f33300 R08: 0000000000000001 R09: 7fffffffffffffff [ 257.237479][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 257.245755][ T31] R13: 0000558269f49890 R14: 0000000000000001 R15: 0000558269f32910 [ 257.253800][ T31] [ 257.257352][ T31] [ 257.257352][ T31] Showing all locks held in the system: [ 257.265230][ T31] 3 locks held by kworker/0:1/10: [ 257.270322][ T31] #0: ffff88801b081d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 257.285873][T10926] bond0: left promiscuous mode [ 257.290692][T10926] bond_slave_0: left promiscuous mode [ 257.324878][T10926] bond_slave_1: left promiscuous mode [ 257.334972][ T31] #1: ffffc900000f7c60 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 257.374748][ T31] #2: ffffffff8fed75c8 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x15/0x50 [ 257.404792][ T31] 1 lock held by khungtaskd/31: [ 257.409724][ T31] #0: ffffffff8eb393e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 257.435366][ T31] 4 locks held by kworker/u8:4/63: [ 257.440558][ T31] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 257.466916][ T31] #1: ffffc90001547c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 257.495003][ T31] #2: ffffffff8feca990 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 [ 257.504537][ T31] #3: ffffffff8fed75c8 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x75a/0xf30 [ 257.532417][ T31] 2 locks held by getty/5594: [ 257.538013][ T31] #0: ffff888035c6a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 257.548801][ T31] #1: ffffc9000330e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 257.559484][ T31] 3 locks held by udevd/5833: [ 257.564198][ T31] #0: ffff888025df44c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 257.574133][ T31] #1: ffff888025ca3c10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 257.586652][ T31] #2: ffff888026427178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 257.596077][ T31] 3 locks held by udevd/5844: [ 257.600795][ T31] #0: ffff888025e474c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 257.611033][ T31] #1: ffff888025579110 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 257.620962][ T31] #2: ffff888025f77178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 257.630537][ T31] 3 locks held by udevd/5847: [ 257.635886][ T31] #0: ffff88802655f4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 257.645611][ T31] #1: ffff888025ff9490 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 257.655532][ T31] #2: ffff888026737178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 257.664502][ T31] 3 locks held by udevd/5855: [ 257.669989][ T31] #0: ffff888025e434c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 257.679743][ T31] #1: ffff888146a9cc10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 257.701402][ T31] #2: ffff888025f551f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 257.720151][ T31] 3 locks held by kworker/1:5/5903: [ 257.725950][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 257.737426][ T31] #1: ffffc9000444fc60 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 257.747880][ T31] #2: ffffffff8eb3e8b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x820 [ 257.758965][ T31] 3 locks held by udevd/5959: [ 257.763679][ T31] #0: ffff888025df04c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 257.773420][ T31] #1: ffff888025ca3310 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 257.783110][ T31] #2: ffff888025ef51f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 257.785011][ T5837] Bluetooth: hci3: command tx timeout [ 257.801982][ T31] 3 locks held by udevd/5962: [ 257.807293][ T31] #0: ffff888025fa34c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 257.817110][ T31] #1: ffff888025579990 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 257.827109][ T31] #2: ffff8880264651f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 257.836743][ T31] 3 locks held by udevd/6839: [ 257.841448][ T31] #0: ffff8880264ab4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 257.851642][ T31] #1: ffff888025cbbb10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 257.861587][ T31] #2: ffff888026510178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 257.875977][ T31] 3 locks held by kworker/u8:11/6938: [ 257.882059][ T31] #0: ffff88814d43a948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 257.896418][ T31] #1: ffffc900045efc60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 257.910163][ T31] #2: ffffffff8fed75c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x10e/0x16a0 [ 257.920259][ T31] 3 locks held by kworker/u8:14/6946: [ 257.931843][ T31] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 257.944465][ T31] #1: ffffc90003f7fc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 257.959786][ T31] #2: ffffffff8fed75c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 257.969629][ T31] 2 locks held by kworker/u8:18/6955: [ 257.975376][ T31] 4 locks held by kworker/u8:20/6961: [ 257.980770][ T31] #0: ffff8880212b1148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 257.994088][ T31] #1: ffffc900045bfc60 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 258.008003][ T31] #2: ffff8880355ae0e0 (&type->s_umount_key#32){++++}-{4:4}, at: super_trylock_shared+0x22/0xf0 [ 258.019071][ T31] #3: ffff888035f08b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1bf/0x3c0 [ 258.030381][ T31] 3 locks held by udevd/7000: [ 258.036073][ T31] #0: ffff888025fa74c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 258.046846][ T31] #1: ffff888146abf010 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 258.057180][ T31] #2: ffff8880264ee178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 258.066897][ T31] 3 locks held by udevd/7016: [ 258.071604][ T31] #0: ffff8880264bb4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 258.081411][ T31] #1: ffff888143f41610 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 258.091612][ T31] #2: ffff8880265b7178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 258.103055][ T31] 3 locks held by udevd/7309: [ 258.108868][ T31] #0: ffff8880264af4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 258.118557][ T31] #1: ffff888143f41010 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 258.128911][ T31] #2: ffff88802658e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 258.138274][ T31] 3 locks held by udevd/7599: [ 258.142982][ T31] #0: ffff88802655b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 258.154648][ T31] #1: ffff888146abfc10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 258.164245][ T31] #2: ffff8880265e0178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 258.174181][ T31] 3 locks held by udevd/7831: [ 258.180366][ T31] #0: ffff8880264bf4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 258.191848][ T31] #1: ffff888143f41d10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 258.213902][ T31] #2: ffff8880266c0178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 258.223328][ T31] 4 locks held by syz-executor/10755: [ 258.229396][ T31] #0: ffff88803546cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 258.239570][ T31] #1: ffff88803546c078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60d/0x1260 [ 258.249797][ T31] #2: ffffffff9003d7a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa6/0x240 [ 258.260617][ T31] #3: ffff88806b302b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x71/0x690 [ 258.270481][ T31] 7 locks held by syz-executor/10789: [ 258.276151][ T31] #0: ffff888030e1e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x225/0xd10 [ 258.285684][ T31] #1: ffff88804d80dc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 258.295865][ T31] #2: ffff888028376968 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 258.307514][ T31] #3: ffffffff8f77d488 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfc/0x480 [ 258.318407][ T31] #4: ffff88807dd800e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xce/0x7c0 [ 258.329328][ T31] #5: ffff88807dd82250 (&devlink->lock_key#15){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 258.339663][ T31] #6: ffffffff8fed75c8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_nexthop_notifier+0x17/0x40 [ 258.351075][ T31] 2 locks held by syz.0.1614/10907: [ 258.356409][ T31] #0: ffffffff8feca990 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 258.366242][ T31] #1: ffffffff8fed75c8 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 258.376208][ T31] 3 locks held by syz.3.1617/10913: [ 258.381455][ T31] #0: ffff888062e84d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 258.391603][ T31] #1: ffff888062e84078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60d/0x1260 [ 258.402904][ T31] #2: ffffffff9003d7a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa6/0x240 [ 258.413661][ T31] 3 locks held by syz.2.1618/10926: [ 258.418959][ T31] #0: ffffffff8f653620 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 258.429086][ T31] #1: ffffffff8fed75c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 258.438713][ T31] #2: ffffffff8eb3e8b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x820 [ 258.463315][ T31] [ 258.466142][ T31] ============================================= [ 258.466142][ T31] [ 258.480391][ T31] NMI backtrace for cpu 1 [ 258.480412][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-01889-gcc04ed502457 #0 [ 258.480433][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 258.480442][ T31] Call Trace: [ 258.480449][ T31] [ 258.480457][ T31] dump_stack_lvl+0x241/0x360 [ 258.480484][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.480503][ T31] ? __pfx__printk+0x10/0x10 [ 258.480530][ T31] nmi_cpu_backtrace+0x49c/0x4d0 [ 258.480557][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 258.480577][ T31] ? _printk+0xd5/0x120 [ 258.480593][ T31] ? __pfx__printk+0x10/0x10 [ 258.480609][ T31] ? __wake_up_klogd+0xcc/0x110 [ 258.480632][ T31] ? __pfx__printk+0x10/0x10 [ 258.480650][ T31] ? __rcu_read_unlock+0xa1/0x110 [ 258.480678][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 258.480705][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 258.480733][ T31] watchdog+0x1058/0x10a0 [ 258.480764][ T31] ? watchdog+0x1ea/0x10a0 [ 258.480796][ T31] ? __pfx_watchdog+0x10/0x10 [ 258.480823][ T31] kthread+0x7a9/0x920 [ 258.480838][ T31] ? __pfx_kthread+0x10/0x10 [ 258.480856][ T31] ? __pfx_watchdog+0x10/0x10 [ 258.480884][ T31] ? __pfx_kthread+0x10/0x10 [ 258.480898][ T31] ? __pfx_kthread+0x10/0x10 [ 258.480919][ T31] ? __pfx_kthread+0x10/0x10 [ 258.480935][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 258.480957][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 258.480981][ T31] ? __pfx_kthread+0x10/0x10 [ 258.480998][ T31] ret_from_fork+0x4b/0x80 [ 258.481021][ T31] ? __pfx_kthread+0x10/0x10 [ 258.481039][ T31] ret_from_fork_asm+0x1a/0x30 [ 258.481073][ T31] [ 258.481081][ T31] Sending NMI from CPU 1 to CPUs 0: [ 258.657801][ C0] NMI backtrace for cpu 0 [ 258.657815][ C0] CPU: 0 UID: 0 PID: 6961 Comm: kworker/u8:20 Not tainted 6.14.0-rc7-syzkaller-01889-gcc04ed502457 #0 [ 258.657836][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 258.657848][ C0] Workqueue: bat_events batadv_nc_worker [ 258.657873][ C0] RIP: 0010:batadv_nc_worker+0x210/0x610 [ 258.657894][ C0] Code: f5 eb 05 e8 e2 e6 ea f5 e8 dd 4a 34 00 89 c3 31 ff 89 c6 e8 12 eb ea f5 85 db 74 15 e8 59 45 d0 f5 84 c0 74 18 e8 c0 e6 ea f5 <48> 8b 5c 24 10 eb 65 e8 b4 e6 ea f5 48 8b 5c 24 10 eb 59 e8 a8 4a [ 258.657908][ C0] RSP: 0018:ffffc900045bfab8 EFLAGS: 00000293 [ 258.657923][ C0] RAX: ffffffff8bd70a30 RBX: 0000000000000001 RCX: ffff88805cb50000 [ 258.657935][ C0] RDX: 0000000000000000 RSI: ffffffff8c80ffc0 RDI: ffffffff8c80ff80 [ 258.657947][ C0] RBP: 0000000000000000 R08: ffffffff8bd70a1e R09: 1ffffffff28ab108 [ 258.657959][ C0] R10: dffffc0000000000 R11: fffffbfff28ab109 R12: ffff888028b00d80 [ 258.657972][ C0] R13: 00000000000000a8 R14: ffff88805a2c85c0 R15: dffffc0000000000 [ 258.657985][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 258.657999][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.658011][ C0] CR2: 000000110c301938 CR3: 000000000e938000 CR4: 00000000003526f0 [ 258.658026][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 258.658036][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 258.658047][ C0] Call Trace: [ 258.658053][ C0] [ 258.658060][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 258.658083][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 258.658111][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 258.658132][ C0] ? nmi_handle+0x2a/0x5a0 [ 258.658167][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 258.658190][ C0] ? nmi_handle+0x14f/0x5a0 [ 258.658216][ C0] ? nmi_handle+0x2a/0x5a0 [ 258.658243][ C0] ? batadv_nc_worker+0x210/0x610 [ 258.658261][ C0] ? default_do_nmi+0x63/0x160 [ 258.658282][ C0] ? exc_nmi+0x123/0x1f0 [ 258.658301][ C0] ? end_repeat_nmi+0xf/0x53 [ 258.658329][ C0] ? batadv_nc_worker+0x1fe/0x610 [ 258.658346][ C0] ? batadv_nc_worker+0x210/0x610 [ 258.658366][ C0] ? batadv_nc_worker+0x210/0x610 [ 258.658385][ C0] ? batadv_nc_worker+0x210/0x610 [ 258.658405][ C0] ? batadv_nc_worker+0x210/0x610 [ 258.658425][ C0] [ 258.658430][ C0] [ 258.658445][ C0] ? batadv_nc_worker+0xcb/0x610 [ 258.658465][ C0] ? process_scheduled_works+0x9c6/0x18e0 [ 258.658488][ C0] process_scheduled_works+0xabe/0x18e0 [ 258.658525][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 258.658552][ C0] ? assign_work+0x364/0x3d0 [ 258.658576][ C0] worker_thread+0x870/0xd30 [ 258.658606][ C0] ? __kthread_parkme+0x169/0x1d0 [ 258.658632][ C0] ? __pfx_worker_thread+0x10/0x10 [ 258.658655][ C0] kthread+0x7a9/0x920 [ 258.658669][ C0] ? __pfx_kthread+0x10/0x10 [ 258.658685][ C0] ? __pfx_worker_thread+0x10/0x10 [ 258.658708][ C0] ? __pfx_kthread+0x10/0x10 [ 258.658722][ C0] ? __pfx_kthread+0x10/0x10 [ 258.658739][ C0] ? __pfx_kthread+0x10/0x10 [ 258.658753][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 258.658775][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 258.658798][ C0] ? __pfx_kthread+0x10/0x10 [ 258.658814][ C0] ret_from_fork+0x4b/0x80 [ 258.658837][ C0] ? __pfx_kthread+0x10/0x10 [ 258.658852][ C0] ret_from_fork_asm+0x1a/0x30 [ 258.658881][ C0] [ 258.660828][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 259.003448][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-01889-gcc04ed502457 #0 [ 259.014051][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 259.024144][ T31] Call Trace: [ 259.027444][ T31] [ 259.030389][ T31] dump_stack_lvl+0x241/0x360 [ 259.035099][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.040311][ T31] ? __pfx__printk+0x10/0x10 [ 259.044907][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 259.050912][ T31] ? vscnprintf+0x5d/0x90 [ 259.057601][ T31] panic+0x349/0x880 [ 259.061504][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 259.067672][ T31] ? __pfx_panic+0x10/0x10 [ 259.072097][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 259.077484][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 259.083649][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 259.089818][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 259.095990][ T31] watchdog+0x1097/0x10a0 [ 259.100342][ T31] ? watchdog+0x1ea/0x10a0 [ 259.104782][ T31] ? __pfx_watchdog+0x10/0x10 [ 259.109494][ T31] kthread+0x7a9/0x920 [ 259.113594][ T31] ? __pfx_kthread+0x10/0x10 [ 259.118215][ T31] ? __pfx_watchdog+0x10/0x10 [ 259.122936][ T31] ? __pfx_kthread+0x10/0x10 [ 259.127547][ T31] ? __pfx_kthread+0x10/0x10 [ 259.132181][ T31] ? __pfx_kthread+0x10/0x10 [ 259.136839][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 259.142067][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 259.147307][ T31] ? __pfx_kthread+0x10/0x10 [ 259.151963][ T31] ret_from_fork+0x4b/0x80 [ 259.156405][ T31] ? __pfx_kthread+0x10/0x10 [ 259.161019][ T31] ret_from_fork_asm+0x1a/0x30 [ 259.165981][ T31] [ 259.169367][ T31] Kernel Offset: disabled [ 259.173718][ T31] Rebooting in 86400 seconds..