last executing test programs: 18m18.700887724s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x7a, &(0x7f0000000340)={0x8, 0x8, 0x6, 0x10, 0x39c1, 0x4, 0x5}, &(0x7f0000000840)=0x20) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) r4 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x83, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00006c0000/0x1000)=nil, 0x800000}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000140)=""/189, 0xffffffc9}], 0x1, 0x4, 0x0) 18m16.862085588s ago: executing program 0 (id=6): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x0, 0x42}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) dup(0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 17m59.016465794s ago: executing program 32 (id=6): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x0, 0x42}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) dup(0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 9m46.772766533s ago: executing program 2 (id=1430): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000300)='GPL\x00'}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800000000fddbdf7700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) 9m44.017973848s ago: executing program 2 (id=1439): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) 9m41.580832284s ago: executing program 2 (id=1445): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012ef", 0x58}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=""/127, 0x7f}, 0x1a83}], 0x2, 0x100, 0x0) 9m39.866425595s ago: executing program 2 (id=1456): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x11, 0x3, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x16, 0x0) r3 = mq_open(&(0x7f0000000000)='batadv_slaveo1\x00', 0x8c2, 0x0, 0x0) mq_notify(r3, &(0x7f0000000200)={0x0, 0x25, 0x1, @thr={0x0, 0x0}}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) getdents64(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') io_uring_setup(0xab1, &(0x7f0000000080)={0x0, 0xdf4, 0x800, 0x0, 0x2, 0x0, r5}) writev(r5, &(0x7f0000000000), 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x4000014) 9m36.103740961s ago: executing program 2 (id=1464): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000300)='GPL\x00'}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800000000fddbdf7700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) 9m35.713869624s ago: executing program 2 (id=1467): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x11, 0x3, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x16, 0x0) r3 = mq_open(&(0x7f0000000000)='batadv_slaveo1\x00', 0x8c2, 0x0, 0x0) mq_notify(r3, &(0x7f0000000200)={0x0, 0x25, 0x1, @thr={0x0, 0x0}}) 9m20.380599952s ago: executing program 33 (id=1467): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x11, 0x3, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x16, 0x0) r3 = mq_open(&(0x7f0000000000)='batadv_slaveo1\x00', 0x8c2, 0x0, 0x0) mq_notify(r3, &(0x7f0000000200)={0x0, 0x25, 0x1, @thr={0x0, 0x0}}) 3m35.359650146s ago: executing program 3 (id=2446): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x11, 0x3, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x16, 0x0) r3 = mq_open(&(0x7f0000000000)='batadv_slaveo1\x00', 0x8c2, 0x0, 0x0) mq_notify(r3, &(0x7f0000000200)={0x0, 0x25, 0x1, @thr={0x0, 0x0}}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) getdents64(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') io_uring_setup(0xab1, &(0x7f0000000080)={0x0, 0xdf4, 0x800, 0x0, 0x2, 0x0, r5}) writev(r5, &(0x7f0000000000), 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x4000014) 3m33.879291371s ago: executing program 3 (id=2451): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a0000000500010006000000140007800800064000000000080013"], 0x64}}, 0x24002800) 3m33.496310368s ago: executing program 3 (id=2452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 3m13.81196117s ago: executing program 3 (id=2465): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xae, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x21, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x67, 0x0, [{0x0, 0xc, "e256b28c590300000052"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0xa, "0000000000800000"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 3m13.810978081s ago: executing program 3 (id=2466): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8f, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 3m13.805488462s ago: executing program 3 (id=2473): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x1f, &(0x7f00000024c0)=ANY=[], 0x0) 6.980948875s ago: executing program 4 (id=3038): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x20000010304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x0, {0x2, 0x4e20, @multicast1=0xe000cc02}}) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat(0xffffffffffffff9c, 0x0, 0x1618c2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0x4020940d, &(0x7f0000000440)={0x4}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f00000002c0)={0xc, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r7, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000280)={0x28, 0x1, 0x0, r7, 0x0, 0x0, 0x0, 0xea, &(0x7f0000000380)="8de14e014e6e4765474462d388c672786fc725968a12c72d9de0858a4cda8ea2b7b9f270b6c0c5f05c3c563d23e0908aee19b5424028ee1b1fa75ee9a5b38b5bc015aebc880f92bb1544ba64c6d90b81a380b12cdd72ea432f1bfe98a58a1f066faa40da3876189e7e1a437b0fc220e32458cecf9583f382069f63acd125ad215665265c56b2ea6ca8641390d03435ce6f695f6555b6d1892de67a42ea51a71a64c8e4bcd7c4be91162f1715adcab8c9b93442526adf115ef529f2ffe4a05bee116a895c191b2ac3019e633ac048d3e93ed3a57ec50b5952dd24643064894cde10fb81e67d4750b8b551"}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140e000000208000a400000000205000300020000000900020073797a3100000000050001000700000094730a5c4405dcd867ab3b2b6de197ec8588fe4d"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 5.147014454s ago: executing program 5 (id=3046): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0xef045000) ioctl$sock_ifreq(0xffffffffffffffff, 0x891f, &(0x7f00000001c0)={'bond_slave_0\x00', @ifru_names='dvmrp1\x00'}) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x366) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.539431778s ago: executing program 4 (id=3048): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001040)=0x6) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={'sha384\x00'}}) 2.065093974s ago: executing program 1 (id=3050): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 2.054259349s ago: executing program 6 (id=3051): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) 1.865859615s ago: executing program 5 (id=3052): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r0, 0x1) 1.731187281s ago: executing program 5 (id=3053): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "b1b5"}]}], {0x14}}, 0x7c}}, 0x0) 1.607977786s ago: executing program 1 (id=3054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OSF_TTL={0x5, 0x2, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 1.450461387s ago: executing program 5 (id=3055): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)="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", 0x2cd}], 0x1}}], 0x2, 0x4040894) 1.34862814s ago: executing program 1 (id=3056): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.020746177s ago: executing program 5 (id=3057): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="d111", 0x2}], 0x1, &(0x7f0000000640)=[{0x10, 0x102, 0x5}], 0x10}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[{0x10, 0x1, 0x400}], 0x10}}], 0x2, 0x4044044) 904.108278ms ago: executing program 1 (id=3058): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 853.54886ms ago: executing program 6 (id=3059): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r0, r0, 0x2f, 0x202c, 0x4}, 0x20) 771.993774ms ago: executing program 6 (id=3060): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xba, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x76, 0x0, [{0x0, 0xc, "e256b28c590300000052"}, {0x0, 0x8, "020007651442"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "0000000000800000"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 770.827419ms ago: executing program 5 (id=3061): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42042, 0x85) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x10001011, r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) read$FUSE(r1, &(0x7f0000005080)={0x2020}, 0x2020) 744.293871ms ago: executing program 6 (id=3062): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, 0x0, 0x0) shutdown(r0, 0x1) 674.797872ms ago: executing program 4 (id=3063): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 537.106114ms ago: executing program 1 (id=3064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "b1b5"}]}], {0x14}}, 0x7c}}, 0x0) 406.414913ms ago: executing program 4 (id=3065): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OSF_TTL={0x5, 0x2, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 406.227604ms ago: executing program 6 (id=3066): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="514e06f6679ce5e8d4c4482e3989", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 250.393147ms ago: executing program 6 (id=3067): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 248.857207ms ago: executing program 1 (id=3068): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x801) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00', 0x1}}}, &(0x7f0000000000)=0x84) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x30, 0x1, 0x8, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)="e43006ea3eb060409f11616b0ff107c8b5c84a2513725dd800704d068c0a1d6565ec46", &(0x7f0000000b00)="4155eeb476bb994a7adbf9ced4cff73ffcc565c90d1d14d488c98904e0d534423e707c5479b3594e0fdb8e8fe861ad8b0baf8b88a81271f0124bb6b06ccb0ab9b2584e405f", 0x3}, 0x38) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d"]) socket$inet6_sctp(0xa, 0x1, 0x84) 215.665546ms ago: executing program 4 (id=3069): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r0, r0, 0x2f, 0x202c, 0x4}, 0x20) 0s ago: executing program 4 (id=3070): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x3) accept4$bt_l2cap(r2, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900"], 0x16) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts. [ 82.136775][ T5586] cgroup: Unknown subsys name 'net' [ 82.387534][ T5586] cgroup: Unknown subsys name 'cpuset' [ 82.441398][ T5586] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.437205][ T5586] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.886730][ T5601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.890428][ T5601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.906807][ T5601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.912829][ T5601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.919314][ T5601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.996971][ T4916] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.006159][ T4916] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.006914][ T4916] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.008097][ T4916] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.008859][ T4916] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.082453][ T4916] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.102742][ T4916] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.109067][ T4916] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.128688][ T36] cfg80211: failed to load regulatory.db [ 87.129387][ T4916] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.130357][ T4916] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.256091][ T4916] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.275919][ T4916] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.279739][ T4916] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.297233][ T4916] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.305222][ T4916] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.412378][ T5601] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.430359][ T5601] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.438600][ T5601] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.456862][ T5601] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.457726][ T5601] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.942380][ T4916] Bluetooth: hci0: command tx timeout [ 89.030804][ T4916] Bluetooth: hci1: command tx timeout [ 89.180808][ T4916] Bluetooth: hci2: command tx timeout [ 89.340804][ T4916] Bluetooth: hci3: command tx timeout [ 89.500773][ T4916] Bluetooth: hci4: command tx timeout [ 89.924152][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.924233][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.924347][ T5598] bridge_slave_0: entered allmulticast mode [ 89.926891][ T5598] bridge_slave_0: entered promiscuous mode [ 89.989169][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.989290][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.989479][ T5598] bridge_slave_1: entered allmulticast mode [ 89.991789][ T5598] bridge_slave_1: entered promiscuous mode [ 90.138649][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.138844][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.138955][ T5606] bridge_slave_0: entered allmulticast mode [ 90.140536][ T5606] bridge_slave_0: entered promiscuous mode [ 90.168614][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.168739][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.168933][ T5602] bridge_slave_0: entered allmulticast mode [ 90.173604][ T5602] bridge_slave_0: entered promiscuous mode [ 90.186895][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.216178][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.216289][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.216626][ T5606] bridge_slave_1: entered allmulticast mode [ 90.218135][ T5606] bridge_slave_1: entered promiscuous mode [ 90.219153][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.219262][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.219358][ T5602] bridge_slave_1: entered allmulticast mode [ 90.228779][ T5602] bridge_slave_1: entered promiscuous mode [ 90.234307][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.234620][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.234763][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.234914][ T5610] bridge_slave_0: entered allmulticast mode [ 90.238191][ T5610] bridge_slave_0: entered promiscuous mode [ 90.322330][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.322447][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.322551][ T5610] bridge_slave_1: entered allmulticast mode [ 90.324834][ T5610] bridge_slave_1: entered promiscuous mode [ 90.478971][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.479122][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.479428][ T5611] bridge_slave_0: entered allmulticast mode [ 90.481923][ T5611] bridge_slave_0: entered promiscuous mode [ 90.495715][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.507058][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.511673][ T5598] team0: Port device team_slave_0 added [ 90.536211][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.536362][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.536554][ T5611] bridge_slave_1: entered allmulticast mode [ 90.538864][ T5611] bridge_slave_1: entered promiscuous mode [ 90.546215][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.559662][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.565247][ T5598] team0: Port device team_slave_1 added [ 90.569354][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.639737][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.734249][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.737686][ T5606] team0: Port device team_slave_0 added [ 90.740171][ T5602] team0: Port device team_slave_0 added [ 90.752048][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.752064][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.752087][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.784303][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.787816][ T5606] team0: Port device team_slave_1 added [ 90.790575][ T5602] team0: Port device team_slave_1 added [ 90.792639][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.792652][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.792675][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.795883][ T5610] team0: Port device team_slave_0 added [ 90.882332][ T5610] team0: Port device team_slave_1 added [ 90.938217][ T5611] team0: Port device team_slave_0 added [ 90.939185][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.939201][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.939227][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.962071][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.962118][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.962145][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.991253][ T5611] team0: Port device team_slave_1 added [ 90.992177][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.992189][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.992213][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.017098][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.017114][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.017137][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.018702][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.018713][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.018734][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.032940][ T4916] Bluetooth: hci0: command tx timeout [ 91.100448][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.100465][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.100487][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.101808][ T4916] Bluetooth: hci1: command tx timeout [ 91.145602][ T5598] hsr_slave_0: entered promiscuous mode [ 91.147234][ T5598] hsr_slave_1: entered promiscuous mode [ 91.166639][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.166656][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.166680][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.181563][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.181579][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.181602][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.260953][ T4916] Bluetooth: hci2: command tx timeout [ 91.347909][ T5602] hsr_slave_0: entered promiscuous mode [ 91.349065][ T5602] hsr_slave_1: entered promiscuous mode [ 91.349756][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 91.349830][ T5602] Cannot create hsr debugfs directory [ 91.363341][ T5606] hsr_slave_0: entered promiscuous mode [ 91.364646][ T5606] hsr_slave_1: entered promiscuous mode [ 91.365552][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 91.365575][ T5606] Cannot create hsr debugfs directory [ 91.409905][ T5610] hsr_slave_0: entered promiscuous mode [ 91.411272][ T5610] hsr_slave_1: entered promiscuous mode [ 91.412186][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 91.412209][ T5610] Cannot create hsr debugfs directory [ 91.421037][ T4916] Bluetooth: hci3: command tx timeout [ 91.580799][ T4916] Bluetooth: hci4: command tx timeout [ 92.055848][ T5611] hsr_slave_0: entered promiscuous mode [ 92.056734][ T5611] hsr_slave_1: entered promiscuous mode [ 92.057276][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 92.057294][ T5611] Cannot create hsr debugfs directory [ 92.786941][ T5598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.851252][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.858142][ T5598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.887911][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.900308][ T5598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.927591][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.946910][ T5598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.983972][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.100823][ T4916] Bluetooth: hci0: command tx timeout [ 93.115233][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.184785][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.189875][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.190911][ T4916] Bluetooth: hci1: command tx timeout [ 93.225718][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.229067][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.264289][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.288584][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.326968][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.340760][ T4916] Bluetooth: hci2: command tx timeout [ 93.449607][ T5602] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.486339][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.503047][ T5602] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.511058][ T4916] Bluetooth: hci3: command tx timeout [ 93.555099][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.567290][ T5602] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.594151][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.617213][ T5602] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.654954][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.661296][ T4916] Bluetooth: hci4: command tx timeout [ 93.844190][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.875378][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.880319][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.918775][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.933032][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.977895][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.006700][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.035376][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.134615][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.183528][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.215103][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.227282][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.264379][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.268313][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.314765][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.328185][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.356359][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.394571][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.444680][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.462171][ T1383] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.462423][ T1383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.513979][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.514478][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.617416][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.635220][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.709607][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.709876][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.767642][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.767750][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.852979][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.905626][ T1383] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.905740][ T1383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.987380][ T1383] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.987487][ T1383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.024842][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.192225][ T4916] Bluetooth: hci0: command tx timeout [ 95.198121][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.208326][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.267678][ T3340] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.267901][ T3340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.270936][ T4916] Bluetooth: hci1: command tx timeout [ 95.389342][ T1383] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.389576][ T1383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.422228][ T4916] Bluetooth: hci2: command tx timeout [ 95.442789][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.525284][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.525462][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.593768][ T4916] Bluetooth: hci3: command tx timeout [ 95.596793][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.600387][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.740871][ T4916] Bluetooth: hci4: command tx timeout [ 96.628825][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.950255][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.187776][ T5598] veth0_vlan: entered promiscuous mode [ 97.214875][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.309501][ T5598] veth1_vlan: entered promiscuous mode [ 97.544957][ T5606] veth0_vlan: entered promiscuous mode [ 97.631428][ T5606] veth1_vlan: entered promiscuous mode [ 97.688922][ T5598] veth0_macvtap: entered promiscuous mode [ 97.771789][ T5598] veth1_macvtap: entered promiscuous mode [ 97.828469][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.895930][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.927822][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.947328][ T5606] veth0_macvtap: entered promiscuous mode [ 97.969284][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.980463][ T5606] veth1_macvtap: entered promiscuous mode [ 98.025478][ T3340] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.046200][ T3340] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.068277][ T3340] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.085843][ T3340] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.200952][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.283485][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.363870][ T5610] veth0_vlan: entered promiscuous mode [ 98.456740][ T150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.515300][ T150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.552419][ T150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.572605][ T5602] veth0_vlan: entered promiscuous mode [ 98.574385][ T150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.585375][ T5610] veth1_vlan: entered promiscuous mode [ 98.587619][ T5611] veth0_vlan: entered promiscuous mode [ 98.677558][ T5602] veth1_vlan: entered promiscuous mode [ 98.725425][ T5611] veth1_vlan: entered promiscuous mode [ 98.732161][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.732183][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.029850][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.029872][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.042558][ T5610] veth0_macvtap: entered promiscuous mode [ 99.138516][ T5610] veth1_macvtap: entered promiscuous mode [ 99.153550][ T5611] veth0_macvtap: entered promiscuous mode [ 99.157155][ T5602] veth0_macvtap: entered promiscuous mode [ 99.174448][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.174472][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.205144][ T5602] veth1_macvtap: entered promiscuous mode [ 99.233037][ T5611] veth1_macvtap: entered promiscuous mode [ 99.354313][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.377254][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.377270][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.407672][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.425378][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.428590][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.499259][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.524520][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.547984][ T150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.580467][ T150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.598061][ T150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.621045][ T150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.625528][ T150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.658406][ T150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.712640][ T1181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.716801][ T1181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.833654][ T1181] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.899952][ T1181] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.926074][ T1181] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.974095][ T1181] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.968040][ T3297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.968065][ T3297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.317151][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.317175][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.456741][ T4916] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 102.456771][ T4916] CPU: 0 UID: 0 PID: 4916 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 102.456796][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 102.456808][ T4916] Workqueue: hci2 hci_rx_work [ 102.456839][ T4916] Call Trace: [ 102.456847][ T4916] [ 102.456857][ T4916] dump_stack_lvl+0xe8/0x150 [ 102.456888][ T4916] sysfs_create_dir_ns+0x271/0x2a0 [ 102.456920][ T4916] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 102.456954][ T4916] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 102.456989][ T4916] ? rt_spin_unlock+0x160/0x200 [ 102.457018][ T4916] kobject_add_internal+0x631/0xd10 [ 102.457053][ T4916] kobject_add+0x163/0x240 [ 102.457083][ T4916] ? __pfx_kobject_add+0x10/0x10 [ 102.457115][ T4916] ? get_device_parent+0x370/0x3a0 [ 102.457141][ T4916] device_add+0x408/0xbb0 [ 102.457167][ T4916] hci_conn_add_sysfs+0xd5/0x210 [ 102.457192][ T4916] le_conn_complete_evt+0x10e6/0x16b0 [ 102.457227][ T4916] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 102.457255][ T4916] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 102.457280][ T4916] ? lockdep_hardirqs_on+0x7a/0x110 [ 102.457306][ T4916] ? skb_pull_data+0xfb/0x200 [ 102.457341][ T4916] hci_le_conn_complete_evt+0x187/0x470 [ 102.457374][ T4916] hci_event_packet+0x659/0xef0 [ 102.457404][ T4916] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 102.457431][ T4916] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 102.457455][ T4916] ? __pfx_hci_event_packet+0x10/0x10 [ 102.457477][ T4916] ? rt_spin_unlock+0x14f/0x200 [ 102.457515][ T4916] ? hci_send_to_monitor+0xe2/0x590 [ 102.457556][ T4916] hci_rx_work+0x3ee/0x1040 [ 102.457587][ T4916] ? process_scheduled_works+0xa70/0x1860 [ 102.457613][ T4916] process_scheduled_works+0xb5d/0x1860 [ 102.457668][ T4916] ? __pfx_process_scheduled_works+0x10/0x10 [ 102.457696][ T4916] ? assign_work+0x3d5/0x5e0 [ 102.457724][ T4916] worker_thread+0xa53/0xfc0 [ 102.457779][ T4916] kthread+0x388/0x470 [ 102.457806][ T4916] ? __pfx_worker_thread+0x10/0x10 [ 102.457827][ T4916] ? __pfx_kthread+0x10/0x10 [ 102.457857][ T4916] ret_from_fork+0x514/0xb70 [ 102.457885][ T4916] ? __pfx_ret_from_fork+0x10/0x10 [ 102.457908][ T4916] ? __switch_to+0xc79/0x1410 [ 102.457942][ T4916] ? __pfx_kthread+0x10/0x10 [ 102.457971][ T4916] ret_from_fork_asm+0x1a/0x30 [ 102.458014][ T4916] [ 102.458047][ T4916] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 102.458089][ T4916] Bluetooth: hci2: failed to register connection device [ 102.580793][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.582332][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.969063][ T5800] hub 8-0:1.0: USB hub found [ 102.973145][ T5800] hub 8-0:1.0: 1 port detected [ 103.316626][ T1181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.316651][ T1181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.604622][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.604644][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.988194][ T1181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.988216][ T1181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.270684][ T5825] hub 8-0:1.0: USB hub found [ 114.274881][ T5825] hub 8-0:1.0: 1 port detected [ 114.374732][ T5815] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 114.374760][ T5815] CPU: 1 UID: 0 PID: 5815 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 114.374786][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 114.374800][ T5815] Workqueue: hci1 hci_rx_work [ 114.374831][ T5815] Call Trace: [ 114.374840][ T5815] [ 114.374849][ T5815] dump_stack_lvl+0xe8/0x150 [ 114.374879][ T5815] sysfs_create_dir_ns+0x271/0x2a0 [ 114.374912][ T5815] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 114.374946][ T5815] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 114.374984][ T5815] ? rt_spin_unlock+0x160/0x200 [ 114.375019][ T5815] kobject_add_internal+0x631/0xd10 [ 114.375059][ T5815] kobject_add+0x163/0x240 [ 114.375093][ T5815] ? __pfx_kobject_add+0x10/0x10 [ 114.375130][ T5815] ? get_device_parent+0x370/0x3a0 [ 114.375160][ T5815] device_add+0x408/0xbb0 [ 114.375189][ T5815] hci_conn_add_sysfs+0xd5/0x210 [ 114.375217][ T5815] le_conn_complete_evt+0x10e6/0x16b0 [ 114.375274][ T5815] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 114.375305][ T5815] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 114.375330][ T5815] ? lockdep_hardirqs_on+0x7a/0x110 [ 114.375357][ T5815] ? skb_pull_data+0xfb/0x200 [ 114.375401][ T5815] hci_le_conn_complete_evt+0x187/0x470 [ 114.375439][ T5815] hci_event_packet+0x659/0xef0 [ 114.375473][ T5815] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 114.375503][ T5815] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 114.375530][ T5815] ? __pfx_hci_event_packet+0x10/0x10 [ 114.375554][ T5815] ? rt_spin_unlock+0x14f/0x200 [ 114.375596][ T5815] ? hci_send_to_monitor+0xe2/0x590 [ 114.375642][ T5815] hci_rx_work+0x3ee/0x1040 [ 114.375677][ T5815] ? process_scheduled_works+0xa70/0x1860 [ 114.375704][ T5815] process_scheduled_works+0xb5d/0x1860 [ 114.375765][ T5815] ? __pfx_process_scheduled_works+0x10/0x10 [ 114.375795][ T5815] ? assign_work+0x3d5/0x5e0 [ 114.375822][ T5815] worker_thread+0xa53/0xfc0 [ 114.375877][ T5815] kthread+0x388/0x470 [ 114.375907][ T5815] ? __pfx_worker_thread+0x10/0x10 [ 114.375929][ T5815] ? __pfx_kthread+0x10/0x10 [ 114.375960][ T5815] ret_from_fork+0x514/0xb70 [ 114.375988][ T5815] ? __pfx_ret_from_fork+0x10/0x10 [ 114.376012][ T5815] ? __switch_to+0xc79/0x1410 [ 114.376048][ T5815] ? __pfx_kthread+0x10/0x10 [ 114.376079][ T5815] ret_from_fork_asm+0x1a/0x30 [ 114.376125][ T5815] [ 114.377079][ T5815] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 114.381213][ T5815] Bluetooth: hci1: failed to register connection device [ 115.643326][ T4916] Bluetooth: hci2: command 0x0406 tx timeout [ 123.569071][ T5815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.655082][ T5815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.657374][ T5815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.684880][ T5815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.687500][ T5815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 127.604113][ T4916] Bluetooth: hci5: command tx timeout [ 129.445032][ T5905] hub 8-0:1.0: USB hub found [ 129.447671][ T5905] hub 8-0:1.0: 1 port detected [ 129.661204][ T4916] Bluetooth: hci5: command tx timeout [ 130.785065][ T5914] hub 8-0:1.0: USB hub found [ 130.787947][ T5914] hub 8-0:1.0: 1 port detected [ 131.741422][ T4916] Bluetooth: hci5: command tx timeout [ 132.596472][ T5924] process 'syz.3.34' launched './file1' with NULL argv: empty string added [ 132.601041][ T5924] ======================================================= [ 132.601041][ T5924] WARNING: The mand mount option has been deprecated and [ 132.601041][ T5924] and is ignored by this kernel. Remove the mand [ 132.601041][ T5924] option from the mount to silence this warning. [ 132.601041][ T5924] ======================================================= [ 133.193994][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.194779][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.844239][ T4916] Bluetooth: hci5: command tx timeout [ 134.478624][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.210401][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.904219][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.731203][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.099469][ T4916] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 139.099497][ T4916] CPU: 1 UID: 0 PID: 4916 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 139.099524][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 139.099538][ T4916] Workqueue: hci3 hci_rx_work [ 139.099569][ T4916] Call Trace: [ 139.099578][ T4916] [ 139.099587][ T4916] dump_stack_lvl+0xe8/0x150 [ 139.099617][ T4916] sysfs_create_dir_ns+0x271/0x2a0 [ 139.099645][ T4916] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 139.099675][ T4916] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 139.099709][ T4916] ? rt_spin_unlock+0x160/0x200 [ 139.099740][ T4916] kobject_add_internal+0x631/0xd10 [ 139.099777][ T4916] kobject_add+0x163/0x240 [ 139.099807][ T4916] ? __pfx_kobject_add+0x10/0x10 [ 139.099840][ T4916] ? get_device_parent+0x370/0x3a0 [ 139.099867][ T4916] device_add+0x408/0xbb0 [ 139.099893][ T4916] hci_conn_add_sysfs+0xd5/0x210 [ 139.099921][ T4916] le_conn_complete_evt+0x10e6/0x16b0 [ 139.099963][ T4916] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 139.099988][ T4916] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 139.100010][ T4916] ? lockdep_hardirqs_on+0x7a/0x110 [ 139.100033][ T4916] ? skb_pull_data+0xfb/0x200 [ 139.100080][ T4916] hci_le_conn_complete_evt+0x187/0x470 [ 139.100118][ T4916] hci_event_packet+0x659/0xef0 [ 139.100152][ T4916] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 139.100182][ T4916] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 139.100206][ T4916] ? __pfx_hci_event_packet+0x10/0x10 [ 139.100230][ T4916] ? rt_spin_unlock+0x14f/0x200 [ 139.100271][ T4916] ? hci_send_to_monitor+0xe2/0x590 [ 139.100304][ T4916] hci_rx_work+0x3ee/0x1040 [ 139.100335][ T4916] ? process_scheduled_works+0xa70/0x1860 [ 139.100360][ T4916] process_scheduled_works+0xb5d/0x1860 [ 139.100420][ T4916] ? __pfx_process_scheduled_works+0x10/0x10 [ 139.100449][ T4916] ? assign_work+0x3d5/0x5e0 [ 139.100477][ T4916] worker_thread+0xa53/0xfc0 [ 139.100529][ T4916] kthread+0x388/0x470 [ 139.100557][ T4916] ? __pfx_worker_thread+0x10/0x10 [ 139.100583][ T4916] ? __pfx_kthread+0x10/0x10 [ 139.100609][ T4916] ret_from_fork+0x514/0xb70 [ 139.100636][ T4916] ? __pfx_ret_from_fork+0x10/0x10 [ 139.100658][ T4916] ? __switch_to+0xc79/0x1410 [ 139.100691][ T4916] ? __pfx_kthread+0x10/0x10 [ 139.100721][ T4916] ret_from_fork_asm+0x1a/0x30 [ 139.100765][ T4916] [ 139.102453][ T4916] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 139.102500][ T4916] Bluetooth: hci3: failed to register connection device [ 141.963504][ T4916] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 147.931496][ T42] bridge_slave_1: left allmulticast mode [ 147.931694][ T42] bridge_slave_1: left promiscuous mode [ 147.980368][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.207184][ T6035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.65'. [ 148.214065][ T42] bridge_slave_0: left allmulticast mode [ 148.214102][ T42] bridge_slave_0: left promiscuous mode [ 148.214373][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.366046][ T6081] syz.3.77 uses obsolete (PF_INET,SOCK_PACKET) [ 156.238328][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.621635][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.620074][ T42] bond0 (unregistering): Released all slaves [ 164.746312][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.750000][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.750266][ T5864] bridge_slave_0: entered allmulticast mode [ 164.781499][ T5864] bridge_slave_0: entered promiscuous mode [ 164.933728][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.933879][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.934189][ T5864] bridge_slave_1: entered allmulticast mode [ 164.964192][ T5864] bridge_slave_1: entered promiscuous mode [ 166.815469][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.834213][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.036815][ T5864] team0: Port device team_slave_0 added [ 167.276858][ T5864] team0: Port device team_slave_1 added [ 175.782181][ C0] wlan1: beacon TX faster than countdown (channel/color switch) completion [ 176.146106][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.146125][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.146153][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.443892][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.443911][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.443940][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.767226][ T42] hsr_slave_0: left promiscuous mode [ 179.801277][ T42] hsr_slave_1: left promiscuous mode [ 181.800967][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.804361][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.288849][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.349703][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.687299][ T4916] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.716008][ T4916] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.718877][ T4916] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.720523][ T4916] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.971109][ T4916] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.543358][ T42] veth1_macvtap: left promiscuous mode [ 187.544370][ T42] veth0_macvtap: left promiscuous mode [ 187.545421][ T42] veth1_vlan: left promiscuous mode [ 187.545814][ T42] veth0_vlan: left promiscuous mode [ 188.060965][ T5815] Bluetooth: hci0: command tx timeout [ 190.141165][ T4916] Bluetooth: hci0: command tx timeout [ 192.221814][ T5815] Bluetooth: hci0: command tx timeout [ 192.313505][ T42] team0 (unregistering): Port device team_slave_1 removed [ 192.388567][ T42] team0 (unregistering): Port device team_slave_0 removed [ 192.877488][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1 [ 194.688247][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.688329][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.930805][ T5815] Bluetooth: hci0: command tx timeout [ 203.807696][ T6426] fuse: Bad value for 'fd' [ 206.433516][ T42] bridge_slave_1: left allmulticast mode [ 206.433556][ T42] bridge_slave_1: left promiscuous mode [ 206.433839][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.512532][ T42] bridge_slave_0: left allmulticast mode [ 206.512571][ T42] bridge_slave_0: left promiscuous mode [ 206.512863][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.851622][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.212786][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.283918][ T42] bond0 (unregistering): Released all slaves [ 207.489301][ T5262] 8021q: adding VLAN 0 to HW filter on device eth2 [ 210.184643][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.271559][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.094413][ T42] team0 (unregistering): Port device team_slave_1 removed [ 212.221387][ T6488] Bluetooth: hci1: command 0x0406 tx timeout [ 212.221530][ T6488] Bluetooth: hci2: command 0x0406 tx timeout [ 212.221557][ T6488] Bluetooth: hci3: command 0x0406 tx timeout [ 212.221581][ T6488] Bluetooth: hci4: command 0x0406 tx timeout [ 212.458248][ T42] team0 (unregistering): Port device team_slave_0 removed [ 215.246460][ T6533] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.181421][ T5262] 8021q: adding VLAN 0 to HW filter on device eth3 [ 217.677212][ T6272] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.678957][ T6272] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.679193][ T6272] bridge_slave_0: entered allmulticast mode [ 217.718139][ T6272] bridge_slave_0: entered promiscuous mode [ 217.746283][ T6272] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.746520][ T6272] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.746757][ T6272] bridge_slave_1: entered allmulticast mode [ 217.776161][ T6272] bridge_slave_1: entered promiscuous mode [ 217.992566][ T6272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.080456][ T6559] Zero length message leads to an empty skb [ 218.746582][ T6272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.147105][ T6272] team0: Port device team_slave_0 added [ 219.173916][ T6272] team0: Port device team_slave_1 added [ 219.430075][ T6272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.430095][ T6272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.430120][ T6272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.438728][ T6272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.438740][ T6272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.438756][ T6272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.656952][ T6272] hsr_slave_0: entered promiscuous mode [ 221.660115][ T6272] hsr_slave_1: entered promiscuous mode [ 227.275935][ T5262] 8021q: adding VLAN 0 to HW filter on device eth4 [ 227.958966][ T6272] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 228.057695][ T6272] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 228.068527][ T6272] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 228.140304][ T6272] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 228.152628][ T6272] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 228.320392][ T6272] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 228.329563][ T6272] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 228.429174][ T6272] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 229.247320][ T6272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.358183][ T6272] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.418028][ T3410] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.418182][ T3410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.589319][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.589922][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.748669][ T6727] syz.3.248 (6727) used greatest stack depth: 18304 bytes left [ 238.768305][ T6272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.650181][ T6272] veth0_vlan: entered promiscuous mode [ 239.973277][ T6272] veth1_vlan: entered promiscuous mode [ 241.603970][ T6272] veth0_macvtap: entered promiscuous mode [ 241.818359][ T6272] veth1_macvtap: entered promiscuous mode [ 241.971769][ T6272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.112950][ T6272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.898812][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 244.917357][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 244.929063][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 244.937069][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 244.961017][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 247.586329][ T5601] Bluetooth: hci5: command tx timeout [ 249.661377][ T5601] Bluetooth: hci5: command tx timeout [ 252.327815][ T5601] Bluetooth: hci5: command tx timeout [ 254.590818][ T5601] Bluetooth: hci5: command tx timeout [ 255.429273][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.297'. [ 256.120867][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.120951][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.857907][ T6801] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.858067][ T6801] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.858277][ T6801] bridge_slave_0: entered allmulticast mode [ 259.892083][ T6801] bridge_slave_0: entered promiscuous mode [ 260.070371][ T6801] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.081161][ T6801] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.081409][ T6801] bridge_slave_1: entered allmulticast mode [ 260.088887][ T6801] bridge_slave_1: entered promiscuous mode [ 261.048638][ T6801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.081135][ T6801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.118871][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.315'. [ 261.220833][ T150] bridge_slave_1: left allmulticast mode [ 261.220873][ T150] bridge_slave_1: left promiscuous mode [ 261.221181][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.328703][ T150] bridge_slave_0: left allmulticast mode [ 261.328743][ T150] bridge_slave_0: left promiscuous mode [ 261.329023][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.761541][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.356551][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.415271][ T150] bond0 (unregistering): Released all slaves [ 266.132311][ T6801] team0: Port device team_slave_0 added [ 266.149256][ T6801] team0: Port device team_slave_1 added [ 266.901435][ T150] hsr_slave_0: left promiscuous mode [ 267.715039][ T150] hsr_slave_1: left promiscuous mode [ 267.728956][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.728987][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.816157][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.816194][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.261352][ T7087] overlayfs: failed to clone lowerpath [ 270.102270][ T150] veth1_macvtap: left promiscuous mode [ 270.102396][ T150] veth0_macvtap: left promiscuous mode [ 270.102681][ T150] veth1_vlan: left promiscuous mode [ 270.102872][ T150] veth0_vlan: left promiscuous mode [ 271.325916][ T7112] netlink: 60 bytes leftover after parsing attributes in process `syz.1.349'. [ 274.474920][ T150] team0 (unregistering): Port device team_slave_1 removed [ 274.551942][ T150] team0 (unregistering): Port device team_slave_0 removed [ 275.762847][ T6801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.762865][ T6801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.762893][ T6801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.848999][ T6801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.849116][ T6801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.849146][ T6801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.059818][ T6801] hsr_slave_0: entered promiscuous mode [ 277.073715][ T6801] hsr_slave_1: entered promiscuous mode [ 277.933042][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'. [ 278.164655][ T7171] netlink: 60 bytes leftover after parsing attributes in process `syz.2.368'. [ 280.966294][ T7209] netlink: 60 bytes leftover after parsing attributes in process `syz.4.378'. [ 282.487481][ T7209] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 282.756057][ T5262] 8021q: adding VLAN 0 to HW filter on device eth5 [ 285.977466][ T7263] netlink: 60 bytes leftover after parsing attributes in process `syz.1.391'. [ 285.977593][ T7263] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 287.852817][ T6801] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 287.959556][ T6801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 287.981492][ T6801] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 288.203567][ T6801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 288.231545][ T6801] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 288.305832][ T6801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 288.308596][ T6801] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 288.398923][ T6801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 289.314978][ T6801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.385487][ T7312] netlink: 60 bytes leftover after parsing attributes in process `syz.1.403'. [ 289.435408][ T6801] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.683035][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.683198][ T3328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.804740][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.804893][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.935744][ T7343] netlink: 60 bytes leftover after parsing attributes in process `syz.3.414'. [ 291.986485][ T7343] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 294.056199][ T7371] overlayfs: failed to clone lowerpath [ 297.356601][ T6801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.774728][ T7398] netlink: 60 bytes leftover after parsing attributes in process `syz.3.425'. [ 299.388326][ T6801] veth0_vlan: entered promiscuous mode [ 299.432320][ T6801] veth1_vlan: entered promiscuous mode [ 300.015467][ T6801] veth0_macvtap: entered promiscuous mode [ 300.063301][ T6801] veth1_macvtap: entered promiscuous mode [ 300.106297][ T6801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.134271][ T6801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.168636][ T194] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.191026][ T194] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.219244][ T194] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.231477][ T194] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.390667][ T7430] netlink: 60 bytes leftover after parsing attributes in process `syz.1.436'. [ 302.700355][ T3328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.700377][ T3328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.165057][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.165081][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.165021][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 306.217849][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 306.229135][ T7451] netlink: 'syz.3.442': attribute type 1 has an invalid length. [ 306.230128][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 306.266677][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 306.267647][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 306.670218][ T7451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 306.773212][ T7454] bond1: (slave ip6gretap1): making interface the new active one [ 306.778293][ T7454] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 307.897004][ T7472] netlink: 52 bytes leftover after parsing attributes in process `syz.4.448'. [ 308.221930][ T7478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.451'. [ 308.380788][ T5601] Bluetooth: hci0: command tx timeout [ 310.461034][ T5601] Bluetooth: hci0: command tx timeout [ 310.566159][ T7501] netlink: 'syz.2.459': attribute type 1 has an invalid length. [ 311.412764][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.461'. [ 311.430143][ T3328] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.494473][ T7501] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 312.750433][ T5601] Bluetooth: hci0: command tx timeout [ 314.315960][ T7546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.473'. [ 314.814740][ T59] Bluetooth: hci0: command tx timeout [ 315.786836][ T3328] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.181972][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'. [ 317.542964][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.543046][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.937369][ T3328] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.331720][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'. [ 319.765567][ T3328] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.706659][ T7664] openvswitch: netlink: IP tunnel dst address not specified [ 329.951014][ T3328] bridge_slave_1: left allmulticast mode [ 329.951052][ T3328] bridge_slave_1: left promiscuous mode [ 329.951444][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.056692][ T3328] bridge_slave_0: left allmulticast mode [ 330.056731][ T3328] bridge_slave_0: left promiscuous mode [ 330.057015][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.127678][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'. [ 338.551422][ T3328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.611691][ T3328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.633768][ T3328] bond0 (unregistering): Released all slaves [ 342.842270][ T7447] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.842416][ T7447] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.842656][ T7447] bridge_slave_0: entered allmulticast mode [ 342.848158][ T7447] bridge_slave_0: entered promiscuous mode [ 345.686737][ T7447] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.686883][ T7447] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.687133][ T7447] bridge_slave_1: entered allmulticast mode [ 345.701676][ T7447] bridge_slave_1: entered promiscuous mode [ 346.435595][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 346.682540][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.585'. [ 346.848516][ T7875] netlink: 'syz.4.587': attribute type 1 has an invalid length. [ 346.870616][ T7447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.022066][ T7875] bond1: Unable to set up delay as MII monitoring is disabled [ 347.066727][ T7875] bond1 (unregistering): Released all slaves [ 347.162446][ T7447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.203607][ T5262] 8021q: adding VLAN 0 to HW filter on device eth5 [ 348.565529][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.595'. [ 349.079611][ T7447] team0: Port device team_slave_0 added [ 349.188779][ T7447] team0: Port device team_slave_1 added [ 349.612260][ T3328] hsr_slave_0: left promiscuous mode [ 349.642246][ T3328] hsr_slave_1: left promiscuous mode [ 349.644364][ T3328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.644391][ T3328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.705136][ T3328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.705166][ T3328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.894440][ T3328] veth1_macvtap: left promiscuous mode [ 349.895176][ T3328] veth0_macvtap: left promiscuous mode [ 349.913078][ T3328] veth1_vlan: left promiscuous mode [ 349.913270][ T3328] veth0_vlan: left promiscuous mode [ 350.665395][ T7927] overlayfs: failed to clone lowerpath [ 352.466585][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'. [ 354.857672][ T3328] team0 (unregistering): Port device team_slave_1 removed [ 354.901591][ T3328] team0 (unregistering): Port device team_slave_0 removed [ 355.288487][ T7447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.288506][ T7447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.288534][ T7447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.852152][ T7447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.852170][ T7447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.852197][ T7447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.985039][ T7971] overlayfs: failed to clone lowerpath [ 360.303779][ T7447] hsr_slave_0: entered promiscuous mode [ 360.317791][ T7447] hsr_slave_1: entered promiscuous mode [ 360.546034][ T7986] netlink: 68 bytes leftover after parsing attributes in process `syz.2.618'. [ 363.047026][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.623'. [ 364.498584][ T5262] 8021q: adding VLAN 0 to HW filter on device eth6 [ 364.551727][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.624'. [ 366.835430][ T5601] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 366.873888][ T8035] netlink: 60 bytes leftover after parsing attributes in process `syz.2.633'. [ 366.884777][ T5601] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 366.895120][ T5601] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 366.908027][ T5601] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 366.930994][ T5601] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 369.180736][ T59] Bluetooth: hci5: command tx timeout [ 369.188600][ T5262] 8021q: adding VLAN 0 to HW filter on device eth7 [ 370.044592][ T3328] bridge_slave_1: left allmulticast mode [ 370.045045][ T3328] bridge_slave_1: left promiscuous mode [ 370.045446][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.161041][ T3328] bridge_slave_0: left allmulticast mode [ 370.161080][ T3328] bridge_slave_0: left promiscuous mode [ 370.161384][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.020340][ T8087] overlayfs: failed to clone lowerpath [ 371.277956][ T59] Bluetooth: hci5: command tx timeout [ 372.945219][ T3328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.983904][ T8101] netlink: 60 bytes leftover after parsing attributes in process `syz.3.645'. [ 373.340643][ T59] Bluetooth: hci5: command tx timeout [ 373.772836][ T3328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.866731][ T3328] bond0 (unregistering): Released all slaves [ 373.904243][ T5262] 8021q: adding VLAN 0 to HW filter on device eth8 [ 376.141945][ T8130] overlayfs: failed to clone lowerpath [ 376.997450][ T59] Bluetooth: hci5: command tx timeout [ 379.342239][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.342317][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.154032][ T3328] hsr_slave_0: left promiscuous mode [ 381.273363][ T3328] hsr_slave_1: left promiscuous mode [ 381.274480][ T3328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.320472][ T3328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.548233][ T8166] capability: warning: `syz.4.665' uses 32-bit capabilities (legacy support in use) [ 382.553024][ T3328] team0 (unregistering): Port device team_slave_1 removed [ 382.602631][ T3328] team0 (unregistering): Port device team_slave_0 removed [ 383.054472][ T8156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.661'. [ 384.296745][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.673'. [ 387.712777][ T8218] netlink: 24 bytes leftover after parsing attributes in process `syz.4.680'. [ 388.332995][ T8232] netlink: 'syz.2.687': attribute type 6 has an invalid length. [ 388.333021][ T8232] netlink: 32 bytes leftover after parsing attributes in process `syz.2.687'. [ 393.542465][ T8252] netlink: 24 bytes leftover after parsing attributes in process `syz.3.694'. [ 394.070675][ T8029] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.070836][ T8029] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.071083][ T8029] bridge_slave_0: entered allmulticast mode [ 394.081984][ T8029] bridge_slave_0: entered promiscuous mode [ 394.092890][ T8029] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.093129][ T8029] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.093646][ T8029] bridge_slave_1: entered allmulticast mode [ 394.106787][ T8029] bridge_slave_1: entered promiscuous mode [ 394.431533][ T8029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.456602][ T8029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.679615][ T8029] team0: Port device team_slave_0 added [ 394.696614][ T8029] team0: Port device team_slave_1 added [ 394.767882][ T8029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.767903][ T8029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.767947][ T8029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.792512][ T8029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.792534][ T8029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.792563][ T8029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.682668][ T8029] hsr_slave_0: entered promiscuous mode [ 396.686132][ T8029] hsr_slave_1: entered promiscuous mode [ 396.897177][ T8308] overlayfs: failed to clone lowerpath [ 399.004877][ T8312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.708'. [ 399.545083][ T8324] netlink: 16 bytes leftover after parsing attributes in process `syz.1.712'. [ 408.825481][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'. [ 413.564069][ T8535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.771'. [ 416.656181][ T8584] overlayfs: failed to clone lowerpath [ 420.199206][ T8029] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 423.049607][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 423.409767][ T8029] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 423.422845][ T8029] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 423.605182][ T8029] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 423.645137][ T8029] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 423.788338][ T8029] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 423.799529][ T8029] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 423.909080][ T8029] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 423.919392][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.796'. [ 424.443845][ T8639] overlayfs: failed to clone lowerpath [ 428.950709][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'. [ 429.478907][ T5601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 429.515181][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.810'. [ 429.525828][ T5601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 429.549498][ T5601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 429.552519][ T5601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 429.557405][ T5601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 431.676702][ T59] Bluetooth: hci0: command tx timeout [ 432.461131][ T8719] bond2: Unable to set up delay as MII monitoring is disabled [ 432.517494][ T8719] bond2 (unregistering): Released all slaves [ 432.731747][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.823'. [ 433.892034][ T59] Bluetooth: hci0: command tx timeout [ 436.462075][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.838'. [ 436.568574][ T59] Bluetooth: hci0: command tx timeout [ 438.638618][ T59] Bluetooth: hci0: command tx timeout [ 441.320593][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.320675][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.057832][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.854'. [ 445.084011][ T8897] overlayfs: failed to clone lowerpath [ 447.713960][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.870'. [ 447.718790][ T8671] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.718935][ T8671] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.719177][ T8671] bridge_slave_0: entered allmulticast mode [ 447.764775][ T8671] bridge_slave_0: entered promiscuous mode [ 447.790210][ T8671] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.826402][ T8671] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.826714][ T8671] bridge_slave_1: entered allmulticast mode [ 447.829836][ T8671] bridge_slave_1: entered promiscuous mode [ 449.813970][ T8671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.864128][ T8671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.223277][ T8671] team0: Port device team_slave_0 added [ 450.227339][ T8671] team0: Port device team_slave_1 added [ 451.690312][ T8960] overlayfs: failed to clone lowerpath [ 453.982791][ T8971] overlayfs: failed to clone lowerpath [ 456.948991][ T8671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.949010][ T8671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.949037][ T8671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.958606][ T8671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.958623][ T8671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.958646][ T8671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.198059][ T8671] hsr_slave_0: entered promiscuous mode [ 458.212726][ T8671] hsr_slave_1: entered promiscuous mode [ 458.247226][ T8671] debugfs: 'hsr0' already exists in 'hsr' [ 458.247260][ T8671] Cannot create hsr debugfs directory [ 461.671076][ T9021] syz_tun: entered allmulticast mode [ 462.155515][ T9018] syz_tun: left allmulticast mode [ 465.212820][ T1141] bridge_slave_1: left allmulticast mode [ 465.212859][ T1141] bridge_slave_1: left promiscuous mode [ 465.213154][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.453909][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'. [ 465.498891][ T1141] bridge_slave_0: left allmulticast mode [ 465.498929][ T1141] bridge_slave_0: left promiscuous mode [ 465.499227][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.008469][ T9076] netlink: 60 bytes leftover after parsing attributes in process `syz.4.925'. [ 468.153365][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.522353][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.613374][ T1141] bond0 (unregistering): Released all slaves [ 468.665899][ T5262] 8021q: adding VLAN 0 to HW filter on device eth5 [ 471.302645][ T1141] hsr_slave_0: left promiscuous mode [ 471.341032][ T1141] hsr_slave_1: left promiscuous mode [ 471.342451][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.370092][ T9116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.940'. [ 471.373510][ T9118] netlink: 60 bytes leftover after parsing attributes in process `syz.3.941'. [ 471.413574][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.131680][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 472.182144][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 472.735598][ T9140] netlink: 60 bytes leftover after parsing attributes in process `syz.2.950'. [ 472.755382][ T9141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.951'. [ 474.570862][ T9169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.964'. [ 476.890210][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.978'. [ 478.999897][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.990'. [ 480.953530][ T8671] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 481.429514][ T8671] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 481.440342][ T8671] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 481.540848][ T8671] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 481.543939][ T8671] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 482.261503][ T9275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1001'. [ 482.355543][ T8671] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 482.531186][ T8671] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 483.219454][ T8671] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 483.685778][ T8671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.810190][ T8671] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.966684][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.967010][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.348712][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.348868][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.561720][ T9337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1018'. [ 487.561785][ T9337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1018'. [ 487.972933][ T8671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.034580][ T9364] netlink: 'syz.1.1025': attribute type 1 has an invalid length. [ 490.158833][ T5601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 490.219205][ T5601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 490.231124][ T5601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 490.258118][ T5601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 490.266638][ T5601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 490.445680][ T9364] 8021q: adding VLAN 0 to HW filter on device bond1 [ 490.463586][ T9366] bond1: Unable to set up delay as MII monitoring is disabled [ 490.561564][ T9369] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 490.650849][ T9379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1030'. [ 490.650913][ T9379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1030'. [ 490.847190][ T9383] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1032'. [ 492.460641][ T59] Bluetooth: hci0: command tx timeout [ 493.637315][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1042'. [ 493.637381][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1042'. [ 494.796047][ T59] Bluetooth: hci0: command tx timeout [ 496.630084][ T9443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1054'. [ 496.630162][ T9443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1054'. [ 496.827091][ T9443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1054'. [ 496.827187][ T9443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1054'. [ 496.860787][ T5601] Bluetooth: hci0: command tx timeout [ 496.960773][ T9431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1051'. [ 499.099375][ T5601] Bluetooth: hci0: command tx timeout [ 499.407711][ T9486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1069'. [ 499.407791][ T9486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1069'. [ 499.485445][ T9477] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1065'. [ 499.529513][ T9486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1069'. [ 499.529599][ T9486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1069'. [ 499.746638][ T9486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1069'. [ 499.746718][ T9486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1069'. [ 500.340652][ T9509] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1079'. [ 500.945884][ T9523] netlink: 620 bytes leftover after parsing attributes in process `syz.4.1084'. [ 500.970317][ T9525] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1085'. [ 501.986622][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.017602][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.253685][ T44] bridge_slave_1: left allmulticast mode [ 509.253724][ T44] bridge_slave_1: left promiscuous mode [ 509.305185][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.512430][ T44] bridge_slave_0: left allmulticast mode [ 510.512469][ T44] bridge_slave_0: left promiscuous mode [ 510.512755][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.791797][ T9631] __nla_validate_parse: 5 callbacks suppressed [ 511.791819][ T9631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1120'. [ 512.391766][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.431661][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.465169][ T44] bond0 (unregistering): Released all slaves [ 513.426591][ T44] hsr_slave_0: left promiscuous mode [ 513.462655][ T44] hsr_slave_1: left promiscuous mode [ 513.463840][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.513320][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.571952][ T9667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1131'. [ 513.968104][ T9675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1133'. [ 514.131433][ T44] team0 (unregistering): Port device team_slave_1 removed [ 514.211507][ T44] team0 (unregistering): Port device team_slave_0 removed [ 514.744856][ T9678] bond1: Unable to set up delay as MII monitoring is disabled [ 514.796794][ T9678] bond1 (unregistering): Released all slaves [ 514.965432][ T9690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1136'. [ 514.965471][ T9690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1136'. [ 515.189242][ T9690] gretap0: entered promiscuous mode [ 515.203919][ T9690] batadv_slave_1: entered promiscuous mode [ 515.204179][ T9690] batadv_slave_1: left promiscuous mode [ 515.242020][ T9690] gretap0: left promiscuous mode [ 515.612174][ T5262] 8021q: adding VLAN 0 to HW filter on device eth5 [ 515.742926][ T9367] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.743111][ T9367] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.743358][ T9367] bridge_slave_0: entered allmulticast mode [ 515.774308][ T9367] bridge_slave_0: entered promiscuous mode [ 515.790041][ T9367] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.790258][ T9367] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.805763][ T9367] bridge_slave_1: entered allmulticast mode [ 515.817878][ T9367] bridge_slave_1: entered promiscuous mode [ 516.097817][ T9367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.237863][ T9367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.077071][ T9707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1142'. [ 517.465033][ T9367] team0: Port device team_slave_0 added [ 517.501287][ T9367] team0: Port device team_slave_1 added [ 518.811550][ T9367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.811574][ T9367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.811603][ T9367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.817804][ T9367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.817822][ T9367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.817848][ T9367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.301543][ T9367] hsr_slave_0: entered promiscuous mode [ 519.312526][ T9367] hsr_slave_1: entered promiscuous mode [ 519.761054][ T9750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1156'. [ 520.047966][ T5262] 8021q: adding VLAN 0 to HW filter on device eth6 [ 520.309248][ T9762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1161'. [ 522.177972][ T9785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1169'. [ 522.250088][ T9786] netlink: 620 bytes leftover after parsing attributes in process `syz.2.1166'. [ 523.700249][ T9804] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1173'. [ 526.113162][ T9828] overlayfs: failed to clone lowerpath [ 526.673916][ T9835] netlink: 620 bytes leftover after parsing attributes in process `syz.3.1180'. [ 528.515931][ T9846] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1185'. [ 531.655385][ T9367] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 531.984879][ T9367] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 531.990157][ T9367] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 532.396122][ T9367] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 532.397550][ T9898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1198'. [ 532.414796][ T9367] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 532.479405][ T9367] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 532.484469][ T9367] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 532.589756][ T9367] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 533.246589][ T9367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.356890][ T9367] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.383705][ T1564] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.387160][ T1564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.449155][ T3431] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.449318][ T3431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.770377][ T9960] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1209'. [ 536.027762][ T9367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.080707][ T9972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1211'. [ 536.080746][ T9972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1211'. [ 536.179206][ T9972] gretap0: entered promiscuous mode [ 536.191483][ T9972] batadv_slave_1: entered promiscuous mode [ 536.191744][ T9972] batadv_slave_1: left promiscuous mode [ 536.240715][ T9972] gretap0: left promiscuous mode [ 537.421814][ T9367] veth0_vlan: entered promiscuous mode [ 537.475017][ T9367] veth1_vlan: entered promiscuous mode [ 537.827891][ T9367] veth0_macvtap: entered promiscuous mode [ 537.902335][ T9367] veth1_macvtap: entered promiscuous mode [ 537.961233][ T9367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.967073][ T9367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.112187][ T66] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.112980][ T66] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.113286][ T66] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.113537][ T66] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.418661][ T1564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.418684][ T1564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.839025][ T1564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.839050][ T1564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.737504][T10070] overlayfs: failed to clone lowerpath [ 553.761283][T10138] overlayfs: failed to clone lowerpath [ 558.887629][T10169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1272'. [ 563.800132][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.800210][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.828868][T10255] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1303'. [ 566.828977][T10255] C: renamed from veth1_to_team (while UP) [ 576.060249][T10325] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1326'. [ 576.060287][T10325] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1326'. [ 576.129617][T10325] gretap0: entered promiscuous mode [ 576.141626][T10325] batadv_slave_1: entered promiscuous mode [ 576.143898][T10325] batadv_slave_1: left promiscuous mode [ 576.245888][T10325] gretap0: left promiscuous mode [ 581.621631][T10377] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1344'. [ 581.904929][T10377] bond1: Unable to set up delay as MII monitoring is disabled [ 582.228485][T10377] bond1 (unregistering): Released all slaves [ 594.005796][T10477] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1375'. [ 599.351591][T10527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1393'. [ 599.351628][T10527] netlink: 'syz.3.1393': attribute type 7 has an invalid length. [ 599.351641][T10527] netlink: 'syz.3.1393': attribute type 8 has an invalid length. [ 599.351653][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1393'. [ 601.176962][T10537] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 603.349905][T10568] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 603.432101][T10572] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 604.923501][T10559] Bluetooth: hci1: command 0x0406 tx timeout [ 605.879875][T10582] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 607.851969][T10620] overlayfs: failed to clone lowerpath [ 608.090823][ T5601] Bluetooth: hci1: command 0x0406 tx timeout [ 614.773238][T10643] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 617.273579][ T5601] Bluetooth: hci0: command 0x0406 tx timeout [ 619.680764][T10723] overlayfs: failed to clone lowerpath [ 622.914441][ T5601] Bluetooth: hci0: command 0x0406 tx timeout [ 623.479016][T10736] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1465'. [ 625.946256][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.946344][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.970535][T10559] Bluetooth: hci0: command 0x0406 tx timeout [ 626.332143][T10759] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1472'. [ 627.906904][T10778] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1480'. [ 628.144528][T10783] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1481'. [ 628.144567][T10783] netlink: 'syz.3.1481': attribute type 7 has an invalid length. [ 628.144582][T10783] netlink: 'syz.3.1481': attribute type 8 has an invalid length. [ 628.144594][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1481'. [ 632.551392][T10821] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1494'. [ 639.290008][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 639.337839][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 639.416591][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 639.444294][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 639.455777][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 642.866491][ T5601] Bluetooth: hci5: command tx timeout [ 645.435396][ T5601] Bluetooth: hci5: command tx timeout [ 648.332443][ T5601] Bluetooth: hci5: command tx timeout [ 651.022014][ T5601] Bluetooth: hci5: command tx timeout [ 657.046952][T10875] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.047201][T10875] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.047418][T10875] bridge_slave_0: entered allmulticast mode [ 657.050719][T10875] bridge_slave_0: entered promiscuous mode [ 657.055658][T10875] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.055844][T10875] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.056057][T10875] bridge_slave_1: entered allmulticast mode [ 657.059236][T10875] bridge_slave_1: entered promiscuous mode [ 657.407843][T10875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.427881][T10875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.641782][T11051] bond1: entered allmulticast mode [ 657.654775][T10875] team0: Port device team_slave_0 added [ 658.269100][T10939] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.250123][T10875] team0: Port device team_slave_1 added [ 661.354336][T11091] bond2: entered allmulticast mode [ 663.148102][T10939] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.213945][T10875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.213963][T10875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.213992][T10875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.515479][T11118] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 663.597591][T10875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.597610][T10875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.597639][T10875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.961989][T10939] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.511572][T10939] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.620769][T11161] bond2: entered allmulticast mode [ 666.002247][T10875] hsr_slave_0: entered promiscuous mode [ 666.005524][T10875] hsr_slave_1: entered promiscuous mode [ 666.008076][T10875] debugfs: 'hsr0' already exists in 'hsr' [ 666.008104][T10875] Cannot create hsr debugfs directory [ 673.010923][T11246] netlink: 'syz.1.1630': attribute type 25 has an invalid length. [ 673.010950][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1630'. [ 673.162413][T10939] bridge_slave_1: left allmulticast mode [ 673.162454][T10939] bridge_slave_1: left promiscuous mode [ 673.162747][T10939] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.248422][T10939] bridge_slave_0: left allmulticast mode [ 673.248463][T10939] bridge_slave_0: left promiscuous mode [ 673.248766][T10939] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.491595][T10939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.551292][T10939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.573233][T10939] bond0 (unregistering): Released all slaves [ 674.632118][T11236] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 676.131982][ T5262] 8021q: adding VLAN 0 to HW filter on device eth5 [ 677.704026][T11305] netlink: 'syz.3.1646': attribute type 1 has an invalid length. [ 679.196467][T11305] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 679.511574][T11309] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 679.701840][T10875] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 679.858460][T10875] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 679.874083][T10875] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 679.914830][T10875] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 683.025187][T10875] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 683.277313][T11367] netlink: 'syz.5.1657': attribute type 1 has an invalid length. [ 683.300034][T10875] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 683.322681][ T5262] 8021q: adding VLAN 0 to HW filter on device eth6 [ 684.035191][T11373] netlink: 'syz.3.1660': attribute type 25 has an invalid length. [ 684.035216][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1660'. [ 684.048830][T11367] 8021q: adding VLAN 0 to HW filter on device bond1 [ 684.360999][T10875] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 684.459166][T10875] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 684.462667][T11369] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 684.521018][T11369] bond1: entered allmulticast mode [ 685.771799][T11404] netlink: 'syz.1.1672': attribute type 1 has an invalid length. [ 686.259910][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.259983][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.327509][T11405] bond2: (slave geneve2): making interface the new active one [ 686.431525][T11405] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 687.745899][ T3328] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 688.775152][ T1562] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 688.882209][T11426] can0: slcan on ttyS3. [ 689.099208][ T3328] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 689.108304][ T3328] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 689.110134][ T3328] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 689.501440][T10939] hsr_slave_0: left promiscuous mode [ 689.523017][T11429] can0 (unregistered): slcan off ttyS3. [ 689.890805][T10939] hsr_slave_1: left promiscuous mode [ 689.892094][T10939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.892337][T10939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.960525][T10939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.960853][T10939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.787670][T10939] veth1_macvtap: left promiscuous mode [ 690.787780][T10939] veth0_macvtap: left promiscuous mode [ 690.788070][T10939] veth1_vlan: left promiscuous mode [ 690.788245][T10939] veth0_vlan: left promiscuous mode [ 691.900532][T11483] Can't find ip_set type has [ 693.705738][T11500] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 693.709868][T10939] team0 (unregistering): Port device team_slave_1 removed [ 693.785315][T10939] team0 (unregistering): Port device team_slave_0 removed [ 695.372676][T10875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.491956][T10875] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.529148][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.529399][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.576391][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.578152][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.958387][ T5262] 8021q: adding VLAN 0 to HW filter on device eth7 [ 701.015754][T11589] 9p: Bad value for 'wfdno' [ 701.037535][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 701.057752][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 701.059185][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 701.077076][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 701.110891][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 703.726469][ T59] Bluetooth: hci4: command tx timeout [ 705.936672][ T5601] Bluetooth: hci4: command tx timeout [ 706.036481][ T5262] 8021q: adding VLAN 0 to HW filter on device eth8 [ 707.995186][ T5601] Bluetooth: hci4: command tx timeout [ 708.364360][T11692] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1753'. [ 710.061771][ T5601] Bluetooth: hci4: command tx timeout [ 711.313599][T11727] overlayfs: failed to clone lowerpath [ 712.263030][T11733] Can't find ip_set type hash:net,ne [ 713.604576][T11750] overlayfs: failed to clone lowerpath [ 714.325906][T11762] overlayfs: failed to clone lowerpath [ 717.864494][T11585] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.864572][T11585] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.864740][T11585] bridge_slave_0: entered allmulticast mode [ 717.894206][T11585] bridge_slave_0: entered promiscuous mode [ 717.915054][T11585] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.915278][T11585] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.915507][T11585] bridge_slave_1: entered allmulticast mode [ 717.936144][T11585] bridge_slave_1: entered promiscuous mode [ 719.924556][T11585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.953449][T11585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.156195][T11585] team0: Port device team_slave_0 added [ 721.189264][T11585] team0: Port device team_slave_1 added [ 723.540220][T11822] fuse: fd is not a fuse device [ 723.598532][ T13] bridge_slave_1: left allmulticast mode [ 723.598560][ T13] bridge_slave_1: left promiscuous mode [ 723.598754][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.693951][ T13] bridge_slave_0: left allmulticast mode [ 723.693990][ T13] bridge_slave_0: left promiscuous mode [ 723.694288][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.380705][T11830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1791'. [ 724.380760][T11830] netlink: 'syz.3.1791': attribute type 25 has an invalid length. [ 724.380776][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1791'. [ 726.961966][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.985373][T11851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1798'. [ 727.021943][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.069976][ T13] bond0 (unregistering): Released all slaves [ 727.228771][T11830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1791'. [ 727.228810][T11830] netlink: 'syz.3.1791': attribute type 25 has an invalid length. [ 727.228825][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1791'. [ 727.263233][T11585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.263249][T11585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.263272][T11585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.265824][T10952] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 727.363863][T10952] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 727.365485][T11585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.365503][T11585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.365537][T11585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.368245][T10952] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 727.373080][T10952] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.950000][ T13] hsr_slave_0: left promiscuous mode [ 730.408000][T11889] overlayfs: failed to clone lowerpath [ 731.022279][ T13] hsr_slave_1: left promiscuous mode [ 731.023523][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.306127][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.992006][T11905] overlayfs: failed to clone lowerpath [ 733.778147][T11909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1812'. [ 735.196228][T11917] overlayfs: missing 'lowerdir' [ 736.634093][T11929] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1819'. [ 736.634131][T11929] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1819'. [ 738.201655][ T13] team0 (unregistering): Port device team_slave_1 removed [ 739.213603][ T13] team0 (unregistering): Port device team_slave_0 removed [ 739.749810][ T5262] 8021q: adding VLAN 0 to HW filter on device eth9 [ 739.776693][T11929] gretap0: entered promiscuous mode [ 739.778376][T11929] batadv_slave_1: entered promiscuous mode [ 739.778602][T11929] batadv_slave_1: left promiscuous mode [ 739.865465][T11929] gretap0: left promiscuous mode [ 739.918179][T11966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1831'. [ 739.949199][T11585] hsr_slave_0: entered promiscuous mode [ 739.950240][T11585] hsr_slave_1: entered promiscuous mode [ 739.955245][T11585] debugfs: 'hsr0' already exists in 'hsr' [ 739.955272][T11585] Cannot create hsr debugfs directory [ 740.561895][T11981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1837'. [ 740.853591][T11987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1840'. [ 742.682395][T12003] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1845'. [ 742.682433][T12003] netlink: 'syz.4.1845': attribute type 7 has an invalid length. [ 742.682447][T12003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1845'. [ 742.858865][T12003] gretap0: entered promiscuous mode [ 742.885484][T12003] batadv_slave_1: entered promiscuous mode [ 742.885740][T12003] batadv_slave_1: left promiscuous mode [ 742.928941][T12003] gretap0: left promiscuous mode [ 743.442543][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1852'. [ 743.966658][T12039] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1854'. [ 743.966697][T12039] netlink: 'syz.5.1854': attribute type 25 has an invalid length. [ 743.966712][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1854'. [ 745.117941][T12044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1850'. [ 745.552276][T12039] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1854'. [ 745.552312][T12039] netlink: 'syz.5.1854': attribute type 25 has an invalid length. [ 745.552328][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1854'. [ 745.856005][ T5262] 8021q: adding VLAN 0 to HW filter on device eth10 [ 745.857710][ T3340] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.972374][T12056] overlayfs: failed to clone lowerpath [ 746.815809][ T3340] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.832609][ T3340] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.586122][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.586211][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.621861][T12070] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1861'. [ 747.621899][T12070] netlink: 'syz.5.1861': attribute type 7 has an invalid length. [ 747.621913][T12070] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1861'. [ 748.663823][ T3340] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.721339][T12070] gretap0: entered promiscuous mode [ 748.725276][T12070] batadv_slave_1: entered promiscuous mode [ 748.736998][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1862'. [ 748.737107][T12070] batadv_slave_1: left promiscuous mode [ 749.194267][T12080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1863'. [ 749.774042][T12070] gretap0: left promiscuous mode [ 750.079133][T12084] fuse: fd is not a fuse device [ 751.074985][T12091] Can't find ip_set type hash:net,po [ 751.568707][T12100] netlink: 'syz.4.1868': attribute type 1 has an invalid length. [ 752.184173][T12100] 8021q: adding VLAN 0 to HW filter on device bond3 [ 753.993440][T12108] bond4: entered allmulticast mode [ 754.440738][T12129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1877'. [ 754.576069][T12137] netlink: 'syz.1.1876': attribute type 1 has an invalid length. [ 755.054549][T12137] 8021q: adding VLAN 0 to HW filter on device bond3 [ 755.058767][T12141] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 755.143798][T12141] bond3: entered allmulticast mode [ 755.609995][T12166] netlink: 'syz.4.1884': attribute type 1 has an invalid length. [ 755.707695][T12173] netlink: 'syz.3.1888': attribute type 1 has an invalid length. [ 755.775129][T12166] 8021q: adding VLAN 0 to HW filter on device bond5 [ 755.777712][T12170] bond5: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 756.613835][T12170] bond5: entered allmulticast mode [ 756.785069][T12174] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 760.576849][T12220] netlink: 'syz.4.1900': attribute type 1 has an invalid length. [ 760.729466][T12220] bond6: entered allmulticast mode [ 762.383965][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 762.448515][T12231] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 762.456704][T12231] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 762.458057][T12231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 762.471759][T12231] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 763.482885][T12251] netlink: 'syz.1.1907': attribute type 1 has an invalid length. [ 764.599390][T12266] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1907'. [ 764.620464][T12231] Bluetooth: hci5: command tx timeout [ 764.828489][T12251] 8021q: adding VLAN 0 to HW filter on device bond4 [ 764.862622][T12261] bond4: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 765.570384][T12279] Can't find ip_set type hash:net,n [ 766.089540][T12261] bond4: entered allmulticast mode [ 766.714949][T12231] Bluetooth: hci5: command tx timeout [ 768.780520][T12231] Bluetooth: hci5: command tx timeout [ 771.033399][T12231] Bluetooth: hci5: command tx timeout [ 772.163222][T12363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1930'. [ 773.897905][T12381] netlink: 'syz.5.1935': attribute type 1 has an invalid length. [ 776.761678][T12381] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 777.298565][T12410] fuse: fd is not a fuse device [ 779.804888][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1949'. [ 779.999173][T12434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1952'. [ 780.258267][T12434] 8021q: adding VLAN 0 to HW filter on device bond5 [ 781.819036][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1955'. [ 782.837093][T12466] fuse: fd is not a fuse device [ 786.962235][T12501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1967'. [ 786.985548][T12499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1966'. [ 787.451025][T12520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1969'. [ 787.759371][T12499] 8021q: adding VLAN 0 to HW filter on device bond3 [ 787.828558][T12224] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.834230][T12224] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.834472][T12224] bridge_slave_0: entered allmulticast mode [ 787.866040][T12224] bridge_slave_0: entered promiscuous mode [ 789.630533][T12547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1970'. [ 790.696910][ T42] bridge_slave_1: left allmulticast mode [ 790.696961][ T42] bridge_slave_1: left promiscuous mode [ 790.697230][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.811392][ T42] bridge_slave_0: left allmulticast mode [ 790.811432][ T42] bridge_slave_0: left promiscuous mode [ 790.811732][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.171408][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 791.471162][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 792.490565][ T42] bond0 (unregistering): Released all slaves [ 792.671763][T12224] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.671910][T12224] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.672822][T12224] bridge_slave_1: entered allmulticast mode [ 792.688302][T12224] bridge_slave_1: entered promiscuous mode [ 793.016235][T12224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 793.045020][T12224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.255206][T12224] team0: Port device team_slave_0 added [ 793.276993][T12224] team0: Port device team_slave_1 added [ 793.435320][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1982'. [ 794.132900][ T42] hsr_slave_0: left promiscuous mode [ 794.173105][ T42] hsr_slave_1: left promiscuous mode [ 794.174259][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.211486][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.030205][T12617] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1991'. [ 797.111693][ T42] team0 (unregistering): Port device team_slave_1 removed [ 797.141698][ T42] team0 (unregistering): Port device team_slave_0 removed [ 797.462359][T12224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.462378][T12224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.462407][T12224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.452232][T12604] netlink: 'syz.1.1988': attribute type 21 has an invalid length. [ 798.452258][T12604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1988'. [ 798.453400][T12617] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 798.531569][T12224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.531591][T12224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.531620][T12224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.615152][T12604] netlink: 'syz.1.1988': attribute type 21 has an invalid length. [ 798.615178][T12604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1988'. [ 798.644331][ T3431] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.645810][ T3431] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.647399][ T3431] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.648054][ T3431] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.809717][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1996'. [ 798.882332][T12224] hsr_slave_0: entered promiscuous mode [ 798.885871][T12224] hsr_slave_1: entered promiscuous mode [ 798.887114][T12224] debugfs: 'hsr0' already exists in 'hsr' [ 798.887142][T12224] Cannot create hsr debugfs directory [ 804.162851][T12668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2005'. [ 805.898894][T12676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2004'. [ 809.056763][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.056843][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.629476][ T5262] 8021q: adding VLAN 0 to HW filter on device eth9 [ 814.921681][T12738] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2017'. [ 815.034365][T12747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2020'. [ 815.730062][T12759] netlink: 'syz.4.2022': attribute type 21 has an invalid length. [ 815.730089][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2022'. [ 816.141520][T12759] netlink: 'syz.4.2022': attribute type 21 has an invalid length. [ 816.141547][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2022'. [ 816.199021][ T3328] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.324428][ T3328] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.324734][ T3328] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.324776][ T3328] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 817.374234][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2031'. [ 817.722363][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2033'. [ 819.089409][T12224] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 819.167934][T12224] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 820.160878][T12224] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 820.408226][T12224] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 822.174032][ T5601] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 822.314986][ T5601] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 822.339582][ T5601] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 822.347097][ T5601] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 822.353611][ T5601] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 822.934405][T12838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2043'. [ 824.570566][T12231] Bluetooth: hci4: command tx timeout [ 825.736395][T12886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2053'. [ 826.620871][T12231] Bluetooth: hci4: command tx timeout [ 828.611314][ T4982] IPVS: starting estimator thread 0... [ 828.700519][T12231] Bluetooth: hci4: command tx timeout [ 828.931346][T12914] IPVS: using max 6 ests per chain, 14400 per kthread [ 830.810672][T12231] Bluetooth: hci4: command tx timeout [ 836.086286][T12824] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.086530][T12824] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.086887][T12824] bridge_slave_0: entered allmulticast mode [ 836.089724][T12824] bridge_slave_0: entered promiscuous mode [ 836.124780][T12824] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.125004][T12824] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.125255][T12824] bridge_slave_1: entered allmulticast mode [ 836.128634][T12824] bridge_slave_1: entered promiscuous mode [ 836.454466][T12824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.515338][T12824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 837.656391][T12824] team0: Port device team_slave_0 added [ 837.927573][T12824] team0: Port device team_slave_1 added [ 838.307532][T12824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 838.307555][T12824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.307584][T12824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 838.373174][T12824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.373195][T12824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.373224][T12824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.943987][ T42] bridge_slave_1: left allmulticast mode [ 838.944027][ T42] bridge_slave_1: left promiscuous mode [ 838.944593][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.384116][ T42] bridge_slave_0: left allmulticast mode [ 840.384156][ T42] bridge_slave_0: left promiscuous mode [ 840.385442][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.871035][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 842.951085][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.103589][ T42] bond0 (unregistering): Released all slaves [ 843.474339][T13028] bond0: entered promiscuous mode [ 843.474365][T13028] bond_slave_0: entered promiscuous mode [ 843.474627][T13028] bond_slave_1: entered promiscuous mode [ 843.514023][T13028] batadv0: entered promiscuous mode [ 843.532902][T12824] hsr_slave_0: entered promiscuous mode [ 843.534305][T12824] hsr_slave_1: entered promiscuous mode [ 843.535258][T12824] debugfs: 'hsr0' already exists in 'hsr' [ 843.535283][T12824] Cannot create hsr debugfs directory [ 845.527005][ T42] hsr_slave_0: left promiscuous mode [ 845.560533][ T42] hsr_slave_1: left promiscuous mode [ 845.561880][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.780075][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.257531][T13083] block nbd5: shutting down sockets [ 847.430117][ T42] team0 (unregistering): Port device team_slave_1 removed [ 847.449666][T13095] netlink: 'syz.4.2121': attribute type 1 has an invalid length. [ 848.435981][ T42] team0 (unregistering): Port device team_slave_0 removed [ 848.829390][T13085] netlink: 'syz.1.2117': attribute type 6 has an invalid length. [ 848.979384][T13096] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 848.996382][T13104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2124'. [ 849.058348][ T3340] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 849.187999][T13106] bond4: entered allmulticast mode [ 849.188539][ T3340] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 850.450614][ T3340] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 850.450666][ T3340] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 850.874569][T13121] binder: BINDER_SET_CONTEXT_MGR already set [ 850.874586][T13121] binder: 13112:13121 ioctl 4018620d 2000000002c0 returned -16 [ 852.327340][T13140] overlayfs: failed to clone lowerpath [ 854.512312][T13161] Can't find ip_set type has [ 855.291237][ T5262] 8021q: adding VLAN 0 to HW filter on device eth9 [ 855.916284][T13198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2152'. [ 855.916324][T13198] netlink: 'syz.3.2152': attribute type 7 has an invalid length. [ 855.916337][T13198] netlink: 'syz.3.2152': attribute type 8 has an invalid length. [ 855.916350][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2152'. [ 860.766134][T13256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2166'. [ 860.766171][T13256] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2166'. [ 863.344138][T12824] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 863.750039][T12824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 863.765363][T12824] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 863.787760][T12824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 863.806965][T12824] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 863.862376][T12824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 863.889312][T12824] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 863.927477][T12824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 864.038384][T13306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2179'. [ 864.038421][T13306] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2179'. [ 864.287907][T12824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 864.415749][T12824] 8021q: adding VLAN 0 to HW filter on device team0 [ 864.541121][ T1562] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.567709][ T1562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.720476][ T1562] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.720661][ T1562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.475466][T13331] overlayfs: failed to clone lowerpath [ 870.880801][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.880970][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.583900][T12824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 873.576095][T12824] veth0_vlan: entered promiscuous mode [ 873.612825][T12824] veth1_vlan: entered promiscuous mode [ 873.710026][T12824] veth0_macvtap: entered promiscuous mode [ 873.726518][T12824] veth1_macvtap: entered promiscuous mode [ 873.769876][T12824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 873.812898][T12824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 873.843234][ T1562] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.843550][ T1562] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.843600][ T1562] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.843638][ T1562] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.102580][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.102603][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.802111][T13419] Can't find ip_set type has [ 877.005143][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.005167][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.468415][ T5601] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 881.555910][ T5601] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 881.560591][ T5601] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 881.567108][ T5601] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 881.581275][ T5601] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 884.765216][T12231] Bluetooth: hci5: command tx timeout [ 885.386739][T13481] can0: slcan on ttyS3. [ 885.765788][T13481] can0 (unregistered): slcan off ttyS3. [ 886.111676][T13504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2228'. [ 886.176157][T13505] fuse: Unknown parameter 'group_i00000000000000000000' [ 887.614394][ T5601] Bluetooth: hci5: command tx timeout [ 889.745327][ T5601] Bluetooth: hci5: command tx timeout [ 892.407828][ T5601] Bluetooth: hci5: command tx timeout [ 894.784844][ T3431] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 894.784885][ T3431] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.784911][ T3431] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 898.603002][ T5601] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 898.603029][ T5601] CPU: 0 UID: 0 PID: 5601 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 898.603056][ T5601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 898.603070][ T5601] Workqueue: hci3 hci_rx_work [ 898.603102][ T5601] Call Trace: [ 898.603110][ T5601] [ 898.603120][ T5601] dump_stack_lvl+0xe8/0x150 [ 898.603151][ T5601] sysfs_create_dir_ns+0x271/0x2a0 [ 898.603185][ T5601] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 898.603229][ T5601] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 898.603269][ T5601] ? rt_spin_unlock+0x160/0x200 [ 898.603305][ T5601] kobject_add_internal+0x631/0xd10 [ 898.603344][ T5601] kobject_add+0x163/0x240 [ 898.603378][ T5601] ? __pfx_kobject_add+0x10/0x10 [ 898.603415][ T5601] ? get_device_parent+0x370/0x3a0 [ 898.603446][ T5601] device_add+0x408/0xbb0 [ 898.603476][ T5601] hci_conn_add_sysfs+0xd5/0x210 [ 898.603504][ T5601] le_conn_complete_evt+0x10e6/0x16b0 [ 898.603547][ T5601] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 898.603579][ T5601] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 898.603604][ T5601] ? lockdep_hardirqs_on+0x7a/0x110 [ 898.603632][ T5601] ? skb_pull_data+0xfb/0x200 [ 898.603670][ T5601] hci_le_conn_complete_evt+0x187/0x470 [ 898.603709][ T5601] hci_event_packet+0x659/0xef0 [ 898.603743][ T5601] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 898.603772][ T5601] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 898.603799][ T5601] ? __pfx_hci_event_packet+0x10/0x10 [ 898.603823][ T5601] ? rt_spin_unlock+0x14f/0x200 [ 898.603865][ T5601] ? hci_send_to_monitor+0xe2/0x590 [ 898.603902][ T5601] hci_rx_work+0x3ee/0x1040 [ 898.603936][ T5601] ? process_scheduled_works+0xa70/0x1860 [ 898.603963][ T5601] process_scheduled_works+0xb5d/0x1860 [ 898.604025][ T5601] ? __pfx_process_scheduled_works+0x10/0x10 [ 898.604057][ T5601] ? assign_work+0x3d5/0x5e0 [ 898.604089][ T5601] worker_thread+0xa53/0xfc0 [ 898.604148][ T5601] kthread+0x388/0x470 [ 898.604177][ T5601] ? __pfx_worker_thread+0x10/0x10 [ 898.604199][ T5601] ? __pfx_kthread+0x10/0x10 [ 898.604240][ T5601] ret_from_fork+0x514/0xb70 [ 898.604269][ T5601] ? __pfx_ret_from_fork+0x10/0x10 [ 898.604294][ T5601] ? __switch_to+0xc79/0x1410 [ 898.604338][ T5601] ? __pfx_kthread+0x10/0x10 [ 898.604370][ T5601] ret_from_fork_asm+0x1a/0x30 [ 898.604419][ T5601] [ 898.604476][ T5601] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 898.604520][ T5601] Bluetooth: hci3: failed to register connection device [ 900.886042][ T3431] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 900.886083][ T3431] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.886110][ T3431] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 901.339434][T13604] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2260'. [ 901.536254][T13611] netlink: 'syz.3.2261': attribute type 1 has an invalid length. [ 901.756895][T13611] 8021q: adding VLAN 0 to HW filter on device bond5 [ 901.929450][T13614] overlayfs: overlapping lowerdir path [ 901.951896][T13612] bond5: entered allmulticast mode [ 901.974133][T13607] can0: slcan on ttyS3. [ 902.100529][T13619] can0 (unregistered): slcan off ttyS3. [ 902.227669][T13625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2264'. [ 903.776832][ T3431] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 903.776870][ T3431] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.777008][ T3431] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 903.840236][T13607] can0: slcan on ttyS3. [ 903.846529][T13460] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.846672][T13460] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.846941][T13460] bridge_slave_0: entered allmulticast mode [ 903.883837][T13460] bridge_slave_0: entered promiscuous mode [ 903.889792][T13460] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.905136][T13460] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.905395][T13460] bridge_slave_1: entered allmulticast mode [ 904.002216][T13460] bridge_slave_1: entered promiscuous mode [ 904.040162][T13645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2270'. [ 904.165176][T13620] can0 (unregistered): slcan off ttyS3. [ 904.404798][T13650] binder: 13649:13650 ioctl c0306201 200000000540 returned -22 [ 904.407208][T13650] binder: 13649:13650 ioctl c0306201 200000000640 returned -22 [ 904.697588][T13654] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2274'. [ 904.909836][ T3431] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 904.909877][ T3431] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.909903][ T3431] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 904.973674][T13652] can0: slcan on ttyS3. [ 905.741826][T13648] gretap1: entered allmulticast mode [ 905.851684][T13656] can0 (unregistered): slcan off ttyS3. [ 906.153252][T13460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.517119][T13460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.675588][T13671] overlayfs: overlapping lowerdir path [ 907.490160][T12231] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 907.490189][T12231] CPU: 1 UID: 0 PID: 12231 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 907.490214][T12231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 907.490228][T12231] Workqueue: hci1 hci_rx_work [ 907.490265][T12231] Call Trace: [ 907.490274][T12231] [ 907.490283][T12231] dump_stack_lvl+0xe8/0x150 [ 907.490313][T12231] sysfs_create_dir_ns+0x271/0x2a0 [ 907.490348][T12231] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 907.490384][T12231] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 907.490421][T12231] ? rt_spin_unlock+0x160/0x200 [ 907.490456][T12231] kobject_add_internal+0x631/0xd10 [ 907.490496][T12231] kobject_add+0x163/0x240 [ 907.490531][T12231] ? __pfx_kobject_add+0x10/0x10 [ 907.490568][T12231] ? get_device_parent+0x370/0x3a0 [ 907.490599][T12231] device_add+0x408/0xbb0 [ 907.490629][T12231] hci_conn_add_sysfs+0xd5/0x210 [ 907.490658][T12231] le_conn_complete_evt+0x10e6/0x16b0 [ 907.490702][T12231] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 907.490734][T12231] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 907.490760][T12231] ? lockdep_hardirqs_on+0x7a/0x110 [ 907.490789][T12231] ? skb_pull_data+0xfb/0x200 [ 907.490827][T12231] hci_le_conn_complete_evt+0x187/0x470 [ 907.490876][T12231] hci_event_packet+0x659/0xef0 [ 907.490910][T12231] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 907.490941][T12231] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 907.490968][T12231] ? __pfx_hci_event_packet+0x10/0x10 [ 907.490992][T12231] ? rt_spin_unlock+0x14f/0x200 [ 907.491035][T12231] ? hci_send_to_monitor+0xe2/0x590 [ 907.491071][T12231] hci_rx_work+0x3ee/0x1040 [ 907.491104][T12231] ? process_scheduled_works+0xa70/0x1860 [ 907.491132][T12231] process_scheduled_works+0xb5d/0x1860 [ 907.491195][T12231] ? __pfx_process_scheduled_works+0x10/0x10 [ 907.491228][T12231] ? assign_work+0x3d5/0x5e0 [ 907.491259][T12231] worker_thread+0xa53/0xfc0 [ 907.491319][T12231] kthread+0x388/0x470 [ 907.491349][T12231] ? __pfx_worker_thread+0x10/0x10 [ 907.491371][T12231] ? __pfx_kthread+0x10/0x10 [ 907.491403][T12231] ret_from_fork+0x514/0xb70 [ 907.491432][T12231] ? __pfx_ret_from_fork+0x10/0x10 [ 907.491458][T12231] ? __switch_to+0xc79/0x1410 [ 907.491495][T12231] ? __pfx_kthread+0x10/0x10 [ 907.491526][T12231] ret_from_fork_asm+0x1a/0x30 [ 907.491575][T12231] [ 907.492563][T12231] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 907.492610][T12231] Bluetooth: hci1: failed to register connection device [ 907.711433][T13460] team0: Port device team_slave_0 added [ 907.730228][T13460] team0: Port device team_slave_1 added [ 909.381863][ T5601] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 909.409540][T13460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.409578][T13460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.409606][T13460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.449564][T13460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.449580][T13460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.449623][T13460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.005191][T13696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2284'. [ 911.553818][T13460] hsr_slave_0: entered promiscuous mode [ 911.557208][T13460] hsr_slave_1: entered promiscuous mode [ 911.560044][T13460] debugfs: 'hsr0' already exists in 'hsr' [ 911.560073][T13460] Cannot create hsr debugfs directory [ 913.628969][T13719] overlayfs: failed to clone lowerpath [ 914.525634][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2294'. [ 916.517428][T13736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2299'. [ 916.883456][ T3431] bridge_slave_1: left allmulticast mode [ 916.883497][ T3431] bridge_slave_1: left promiscuous mode [ 916.883787][ T3431] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.964766][ T3431] bridge_slave_0: left allmulticast mode [ 916.964808][ T3431] bridge_slave_0: left promiscuous mode [ 916.965113][ T3431] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.442365][T13738] slcan: can't register candev [ 918.191734][ T3431] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 918.612683][ T3431] bond2 (unregistering): (slave geneve2): Releasing active interface [ 919.095420][T13761] netlink: 'syz.6.2306': attribute type 1 has an invalid length. [ 920.603053][T13775] overlayfs: overlapping lowerdir path [ 922.176249][ T3431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.981766][ T3431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.654645][ T3431] bond0 (unregistering): Released all slaves [ 924.675422][ T3431] bond1 (unregistering): Released all slaves [ 924.709547][ T3431] bond2 (unregistering): Released all slaves [ 924.740480][ T3431] bond3 (unregistering): Released all slaves [ 924.777303][ T3431] bond4 (unregistering): Released all slaves [ 924.846115][ T3431] bond5 (unregistering): Released all slaves [ 926.396942][T13804] can0: slcan on ttyS3. [ 927.768473][T13804] can0 (unregistered): slcan off ttyS3. [ 927.884060][T13828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2328'. [ 929.354237][T13833] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 931.911376][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.911455][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.238443][T13879] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2342'. [ 935.423178][T13879] bond2: entered allmulticast mode [ 937.210179][T13890] fuse: Unknown parameter '0x0000000000000003' [ 941.057079][ T5601] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 941.102892][ T5601] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 941.106162][ T5601] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 941.152311][ T5601] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 941.153337][ T5601] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 941.554078][T13924] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2351'. [ 941.778089][T13928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 941.778166][T13928] IPv6: NLM_F_CREATE should be set when creating new route [ 943.277173][T12231] Bluetooth: hci2: command tx timeout [ 945.823933][T12231] Bluetooth: hci2: command tx timeout [ 947.907931][T10559] Bluetooth: hci2: command tx timeout [ 948.377052][T13962] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2363'. [ 948.640140][ T5262] 8021q: adding VLAN 0 to HW filter on device eth9 [ 949.847191][T10559] Bluetooth: hci4: command 0x0406 tx timeout [ 950.510634][T10559] Bluetooth: hci2: command tx timeout [ 952.233086][ T3431] hsr_slave_0: left promiscuous mode [ 952.251156][ T3431] hsr_slave_1: left promiscuous mode [ 952.252340][ T3431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 952.252369][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.282962][ T3431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 952.282990][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 952.336725][ T3431] veth1_macvtap: left promiscuous mode [ 952.336844][ T3431] veth0_macvtap: left promiscuous mode [ 952.337149][ T3431] veth1_vlan: left promiscuous mode [ 952.337341][ T3431] veth0_vlan: left promiscuous mode [ 953.247746][T14013] 9p: Bad value for 'wfdno' [ 955.441722][ T3431] team0 (unregistering): Port device team_slave_1 removed [ 955.491270][ T3431] team0 (unregistering): Port device team_slave_0 removed [ 957.506512][T14050] 9p: Bad value for 'wfdno' [ 957.896179][T14055] gretap1: entered allmulticast mode [ 958.139954][T14046] block nbd6: shutting down sockets [ 962.396967][ T3431] bridge_slave_1: left allmulticast mode [ 962.397008][ T3431] bridge_slave_1: left promiscuous mode [ 962.397316][ T3431] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.787330][ T3431] bridge_slave_0: left allmulticast mode [ 962.787386][ T3431] bridge_slave_0: left promiscuous mode [ 962.787712][ T3431] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.851270][T14108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 962.851342][T14108] IPv6: NLM_F_CREATE should be set when creating new route [ 965.033018][ T3431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 965.415900][ T3431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 966.443161][ T3431] bond0 (unregistering): Released all slaves [ 967.301699][T14141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2410'. [ 968.277744][T13914] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.277932][T13914] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.278204][T13914] bridge_slave_0: entered allmulticast mode [ 968.286955][T13914] bridge_slave_0: entered promiscuous mode [ 971.830086][ T3431] hsr_slave_0: left promiscuous mode [ 972.430430][ T3431] hsr_slave_1: left promiscuous mode [ 972.432858][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.035386][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 979.301273][ T3431] team0 (unregistering): Port device team_slave_1 removed [ 979.401443][ T3431] team0 (unregistering): Port device team_slave_0 removed [ 979.587607][T14206] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 979.634655][T13914] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.634827][T13914] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.635052][T13914] bridge_slave_1: entered allmulticast mode [ 979.651301][T13914] bridge_slave_1: entered promiscuous mode [ 980.017974][T13914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 980.047689][T13914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 980.250196][T13914] team0: Port device team_slave_0 added [ 980.266324][T13914] team0: Port device team_slave_1 added [ 980.359860][T13914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 980.359880][T13914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 980.359909][T13914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 980.412067][T13914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 980.412086][T13914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 980.412116][T13914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 980.691402][T13914] hsr_slave_0: entered promiscuous mode [ 980.692955][T13914] hsr_slave_1: entered promiscuous mode [ 980.694070][T13914] debugfs: 'hsr0' already exists in 'hsr' [ 980.694098][T13914] Cannot create hsr debugfs directory [ 985.276427][T13914] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 985.842938][T13914] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 985.850104][T13914] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 986.207750][T13914] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 986.244199][T13914] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 986.326774][T13914] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 986.355182][T13914] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 986.413565][T13914] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 986.937188][T13914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 987.009716][T13914] 8021q: adding VLAN 0 to HW filter on device team0 [ 987.084365][ T3431] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.084539][ T3431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 987.161305][ T1562] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.161456][ T1562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 989.270689][T14325] fuse: Unknown parameter '0x0000000000000003' [ 990.448862][T13914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 991.976139][T13914] veth0_vlan: entered promiscuous mode [ 992.049023][T13914] veth1_vlan: entered promiscuous mode [ 992.168159][T13914] veth0_macvtap: entered promiscuous mode [ 992.183057][T13914] veth1_macvtap: entered promiscuous mode [ 992.228255][T13914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 992.266404][T13914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 992.309604][T10952] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.309913][T10952] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.309957][T10952] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.309996][T10952] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.577689][ T5601] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 992.577716][ T5601] CPU: 1 UID: 0 PID: 5601 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 992.577741][ T5601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 992.577755][ T5601] Workqueue: hci0 hci_rx_work [ 992.577791][ T5601] Call Trace: [ 992.577800][ T5601] [ 992.577811][ T5601] dump_stack_lvl+0xe8/0x150 [ 992.577839][ T5601] sysfs_create_dir_ns+0x271/0x2a0 [ 992.577870][ T5601] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 992.577900][ T5601] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 992.577935][ T5601] ? rt_spin_unlock+0x160/0x200 [ 992.577965][ T5601] kobject_add_internal+0x631/0xd10 [ 992.578002][ T5601] kobject_add+0x163/0x240 [ 992.578033][ T5601] ? __pfx_kobject_add+0x10/0x10 [ 992.578066][ T5601] ? get_device_parent+0x370/0x3a0 [ 992.578096][ T5601] device_add+0x408/0xbb0 [ 992.578122][ T5601] hci_conn_add_sysfs+0xd5/0x210 [ 992.578148][ T5601] le_conn_complete_evt+0x10e6/0x16b0 [ 992.578189][ T5601] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 992.578217][ T5601] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 992.578239][ T5601] ? lockdep_hardirqs_on+0x7a/0x110 [ 992.578264][ T5601] ? skb_pull_data+0xfb/0x200 [ 992.578299][ T5601] hci_le_conn_complete_evt+0x187/0x470 [ 992.578337][ T5601] hci_event_packet+0x659/0xef0 [ 992.578368][ T5601] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 992.578396][ T5601] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 992.578420][ T5601] ? __pfx_hci_event_packet+0x10/0x10 [ 992.578440][ T5601] ? rt_spin_unlock+0x14f/0x200 [ 992.578477][ T5601] ? hci_send_to_monitor+0xe2/0x590 [ 992.578511][ T5601] hci_rx_work+0x3ee/0x1040 [ 992.578548][ T5601] ? process_scheduled_works+0xa70/0x1860 [ 992.578576][ T5601] process_scheduled_works+0xb5d/0x1860 [ 992.578651][ T5601] ? __pfx_process_scheduled_works+0x10/0x10 [ 992.578683][ T5601] ? assign_work+0x3d5/0x5e0 [ 992.578715][ T5601] worker_thread+0xa53/0xfc0 [ 992.578776][ T5601] kthread+0x388/0x470 [ 992.578807][ T5601] ? __pfx_worker_thread+0x10/0x10 [ 992.578830][ T5601] ? __pfx_kthread+0x10/0x10 [ 992.578860][ T5601] ret_from_fork+0x514/0xb70 [ 992.578890][ T5601] ? __pfx_ret_from_fork+0x10/0x10 [ 992.578915][ T5601] ? __switch_to+0xc79/0x1410 [ 992.578953][ T5601] ? __pfx_kthread+0x10/0x10 [ 992.578985][ T5601] ret_from_fork_asm+0x1a/0x30 [ 992.579034][ T5601] [ 992.579969][ T5601] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 992.580019][ T5601] Bluetooth: hci0: failed to register connection device [ 993.147369][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.147393][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.311746][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.311772][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.369107][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.369188][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.861251][ T5601] Bluetooth: hci0: command 0x0406 tx timeout [ 1005.535767][T14390] loop2: detected capacity change from 0 to 7 [ 1006.898083][T14398] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2479'. [ 1006.898376][T14398] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2479'. [ 1007.045466][T14390] Dev loop2: unable to read RDB block 7 [ 1007.045509][T14390] loop2: AHDI p1 p2 p3 [ 1007.045544][T14390] loop2: partition table partially beyond EOD, truncated [ 1007.108273][T14390] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1007.108308][T14390] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1007.515614][ T5601] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1007.567262][ T5601] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1007.579650][ T5601] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1007.614534][ T5601] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1007.617793][ T5601] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1008.745835][T14429] Can't find ip_set type has [ 1009.112982][T14438] overlayfs: missing 'lowerdir' [ 1010.568188][T10559] Bluetooth: hci5: command tx timeout [ 1012.001395][T14451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2493'. [ 1012.078886][T11359] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1012.078913][T11359] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.157527][T14446] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2491'. [ 1012.157807][T14446] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2491'. [ 1012.624231][T10559] Bluetooth: hci5: command tx timeout [ 1012.758948][T14468] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2494'. [ 1014.128406][T14482] netlink: 'syz.1.2501': attribute type 1 has an invalid length. [ 1014.275599][T11359] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1014.275641][T11359] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.701814][T10559] Bluetooth: hci5: command tx timeout [ 1015.065478][T11359] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1015.065520][T11359] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.220175][T14494] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2504'. [ 1015.221175][T14494] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2504'. [ 1015.609986][T14507] loop2: detected capacity change from 0 to 7 [ 1015.638084][T14507] Dev loop2: unable to read RDB block 7 [ 1015.638120][T14507] loop2: AHDI p1 p2 p3 [ 1015.638150][T14507] loop2: partition table partially beyond EOD, truncated [ 1015.655430][T14507] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1015.655458][T14507] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1015.841553][T11359] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1015.841592][T11359] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.993210][T14509] loop2: detected capacity change from 0 to 7 [ 1016.165811][T14509] Dev loop2: unable to read RDB block 7 [ 1016.165863][T14509] loop2: unable to read partition table [ 1016.173000][T14509] loop2: partition table beyond EOD, truncated [ 1016.173037][T14509] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1016.799932][T10559] Bluetooth: hci5: command tx timeout [ 1017.811569][T14521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2513'. [ 1018.199676][T14525] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2515'. [ 1018.199950][T14525] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2515'. [ 1018.586008][T14540] 9p: Bad value for 'rfdno' [ 1018.622937][T14542] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2521'. [ 1019.883579][T14558] gretap1: entered allmulticast mode [ 1020.787954][T14566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2526'. [ 1020.788223][T14566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2526'. [ 1020.955592][T14405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.955819][T14405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.956073][T14405] bridge_slave_0: entered allmulticast mode [ 1020.993094][T14405] bridge_slave_0: entered promiscuous mode [ 1021.011514][T14405] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.013448][T14405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.015389][T14405] bridge_slave_1: entered allmulticast mode [ 1021.045426][T14405] bridge_slave_1: entered promiscuous mode [ 1021.155573][T14405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.171314][T14405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.238630][T14405] team0: Port device team_slave_0 added [ 1021.280678][T14405] team0: Port device team_slave_1 added [ 1021.595611][T11359] bridge_slave_1: left allmulticast mode [ 1021.595666][T11359] bridge_slave_1: left promiscuous mode [ 1021.595944][T11359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.695516][T11359] bridge_slave_0: left allmulticast mode [ 1021.695550][T11359] bridge_slave_0: left promiscuous mode [ 1021.695774][T11359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.158263][T14601] Can't find ip_set type has [ 1023.458313][T11359] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1025.540791][T11359] bond0 (unregistering): left promiscuous mode [ 1025.540814][T11359] bond_slave_0: left promiscuous mode [ 1025.540981][T11359] bond_slave_1: left promiscuous mode [ 1025.594646][T11359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1025.651292][T11359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1025.694279][T11359] bond0 (unregistering): Released all slaves [ 1025.708196][T11359] bond1 (unregistering): Released all slaves [ 1025.723338][T11359] bond2 (unregistering): Released all slaves [ 1025.739984][T11359] bond3 (unregistering): Released all slaves [ 1025.769220][T11359] bond4 (unregistering): Released all slaves [ 1025.795630][T11359] bond5 (unregistering): Released all slaves [ 1025.903381][T14586] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1025.928936][T14589] gretap1: entered allmulticast mode [ 1026.255034][ T5262] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1026.256467][T14622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2540'. [ 1026.256731][T14622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2540'. [ 1026.529359][T14633] netlink: 'syz.5.2544': attribute type 1 has an invalid length. [ 1026.666482][T14405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.666499][T14405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.666524][T14405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.928983][T14633] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1026.935495][T14405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.935513][T14405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.935540][T14405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1028.392408][T14652] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2552'. [ 1028.392691][T14652] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2552'. [ 1030.018232][T14674] netlink: 'syz.6.2560': attribute type 1 has an invalid length. [ 1030.311683][T14682] Bluetooth: MGMT ver 1.23 [ 1030.354460][T10559] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1032.570305][T10559] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1032.571405][T10559] Bluetooth: hci0: command 0x0406 tx timeout [ 1032.681353][T14674] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1033.544640][T14693] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2567'. [ 1033.545564][T14693] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2567'. [ 1033.570499][T14405] hsr_slave_0: entered promiscuous mode [ 1033.580900][T14405] hsr_slave_1: entered promiscuous mode [ 1033.582029][T14405] debugfs: 'hsr0' already exists in 'hsr' [ 1033.582055][T14405] Cannot create hsr debugfs directory [ 1033.871218][T11359] batadv0: left promiscuous mode [ 1035.280836][T11359] hsr_slave_0: left promiscuous mode [ 1035.286506][T14718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2575'. [ 1035.324241][T11359] hsr_slave_1: left promiscuous mode [ 1035.328198][T11359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1035.328228][T11359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1035.367182][T11359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1035.367209][T11359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1035.507684][T11359] veth1_macvtap: left promiscuous mode [ 1035.507808][T11359] veth0_macvtap: left promiscuous mode [ 1035.508002][T11359] veth1_vlan: left promiscuous mode [ 1035.508194][T11359] veth0_vlan: left promiscuous mode [ 1036.252133][T14732] loop2: detected capacity change from 0 to 7 [ 1036.324246][T14732] Dev loop2: unable to read RDB block 7 [ 1036.324280][T14732] loop2: unable to read partition table [ 1036.324433][T14732] loop2: partition table beyond EOD, truncated [ 1036.324464][T14732] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1039.613822][T11359] team0 (unregistering): Port device team_slave_1 removed [ 1039.691944][T11359] team0 (unregistering): Port device team_slave_0 removed [ 1040.843930][T14734] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2581'. [ 1040.844178][T14734] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2581'. [ 1043.957398][T14805] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2608'. [ 1043.957677][T14805] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2608'. [ 1043.972615][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2610'. [ 1046.503515][T14833] overlayfs: failed to clone lowerpath [ 1047.278946][T14836] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2618'. [ 1047.278974][T14836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2618'. [ 1047.329791][T14839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2618'. [ 1049.032261][T14852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2623'. [ 1051.920939][ T5262] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1051.986619][ T5601] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1054.558910][T14916] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2649'. [ 1054.794282][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.794373][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.082449][T14923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2651'. [ 1056.324104][T14935] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2656'. [ 1057.114846][T14944] loop2: detected capacity change from 0 to 7 [ 1057.134994][T14944] Dev loop2: unable to read RDB block 7 [ 1057.135046][T14944] loop2: unable to read partition table [ 1057.135319][T14944] loop2: partition table beyond EOD, truncated [ 1057.135340][T14944] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1057.261087][T14947] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2660'. [ 1057.563468][T14960] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2663'. [ 1057.951329][T14968] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2666'. [ 1059.555406][T14981] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2671'. [ 1060.182178][T14987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2673'. [ 1060.489030][T14996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2677'. [ 1060.552365][T14998] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2676'. [ 1061.781082][T14405] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1061.983812][T14405] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1061.997903][T14405] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1062.127527][T14405] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1062.139827][T14405] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1062.199948][T14405] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1062.212424][T14405] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1062.262964][T14405] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1063.602887][T14405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1063.961345][T14405] 8021q: adding VLAN 0 to HW filter on device team0 [ 1065.371042][T10940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.371197][T10940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1065.413075][T10940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.413334][T10940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1066.534359][T12231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1066.569627][T12231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1066.580054][T12231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1066.586358][T12231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1066.595105][T12231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1066.837887][T15096] loop2: detected capacity change from 0 to 7 [ 1066.842961][T15096] Dev loop2: unable to read RDB block 7 [ 1066.843004][T15096] loop2: unable to read partition table [ 1066.843229][T15096] loop2: partition table beyond EOD, truncated [ 1066.843247][T15096] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1067.185184][T10559] Bluetooth: hci2: command 0x0406 tx timeout [ 1068.687198][T15116] binder: 15114:15116 ioctl c0306201 200000000680 returned -14 [ 1068.700896][ T5601] Bluetooth: hci3: command tx timeout [ 1069.376139][T15121] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 1069.442157][T15121] bond1 (unregistering): Released all slaves [ 1070.793555][ T5601] Bluetooth: hci3: command tx timeout [ 1072.860951][ T5601] Bluetooth: hci3: command tx timeout [ 1074.065964][T15145] gretap1: entered allmulticast mode [ 1074.173365][T15154] syz_tun: entered allmulticast mode [ 1074.290138][T15159] dvmrp1: entered allmulticast mode [ 1075.076205][ T5601] Bluetooth: hci3: command tx timeout [ 1076.761623][T15152] syz_tun: left allmulticast mode [ 1087.442803][T15261] macsec1: entered allmulticast mode [ 1087.442859][T15261] hsr0: entered allmulticast mode [ 1087.442875][T15261] hsr_slave_0: entered allmulticast mode [ 1087.442902][T15261] hsr_slave_1: entered allmulticast mode [ 1087.442967][T15261] hsr0: entered promiscuous mode [ 1088.190033][T15275] can0: slcan on ttyS3. [ 1088.309016][T15275] can0 (unregistered): slcan off ttyS3. [ 1088.347259][T15280] loop2: detected capacity change from 0 to 7 [ 1088.349848][T15280] Dev loop2: unable to read RDB block 7 [ 1088.349882][T15280] loop2: AHDI p1 p2 p3 [ 1088.349912][T15280] loop2: partition table partially beyond EOD, truncated [ 1088.357947][T15280] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1088.357977][T15280] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1088.534349][ T4966] Dev loop2: unable to read RDB block 7 [ 1088.534391][ T4966] loop2: AHDI p1 p2 p3 [ 1088.534425][ T4966] loop2: partition table partially beyond EOD, truncated [ 1088.534715][ T4966] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1088.534735][ T4966] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1088.733011][T15291] syz_tun: entered allmulticast mode [ 1088.960446][T15086] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.960590][T15086] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.960857][T15086] bridge_slave_0: entered allmulticast mode [ 1088.964132][T15086] bridge_slave_0: entered promiscuous mode [ 1088.973489][T15288] syz_tun: left allmulticast mode [ 1089.003761][T15086] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.004097][T15086] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.004335][T15086] bridge_slave_1: entered allmulticast mode [ 1089.015011][T15086] bridge_slave_1: entered promiscuous mode [ 1089.489007][T15086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1089.544144][T15086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1091.050622][ T3431] bridge_slave_1: left allmulticast mode [ 1091.050661][ T3431] bridge_slave_1: left promiscuous mode [ 1091.050961][ T3431] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.123790][ T3431] bridge_slave_0: left allmulticast mode [ 1091.123829][ T3431] bridge_slave_0: left promiscuous mode [ 1091.124112][ T3431] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.776878][T15328] Can't find ip_set type has [ 1094.601683][ T3431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1094.681750][ T3431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1094.722798][ T3431] bond0 (unregistering): Released all slaves [ 1094.764291][T15086] team0: Port device team_slave_0 added [ 1094.861622][T15319] macsec0: entered allmulticast mode [ 1094.861639][T15319] hsr0: entered allmulticast mode [ 1094.861646][T15319] hsr_slave_0: entered allmulticast mode [ 1094.861662][T15319] hsr_slave_1: entered allmulticast mode [ 1094.861697][T15319] hsr0: entered promiscuous mode [ 1094.937784][T15086] team0: Port device team_slave_1 added [ 1098.932266][ T3431] hsr_slave_0: left promiscuous mode [ 1098.975163][ T3431] hsr_slave_1: left promiscuous mode [ 1098.976283][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1099.021780][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1100.354098][T15401] Can't find ip_set type has [ 1101.881705][ T3431] team0 (unregistering): Port device team_slave_1 removed [ 1102.835800][ T3431] team0 (unregistering): Port device team_slave_0 removed [ 1103.134211][T15426] loop2: detected capacity change from 0 to 7 [ 1103.158158][T15426] Dev loop2: unable to read RDB block 7 [ 1103.158201][T15426] loop2: AHDI p1 p2 p3 [ 1103.158578][T15426] loop2: partition table partially beyond EOD, truncated [ 1103.301065][T15426] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1103.301101][T15426] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1103.708699][T15086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1103.708720][T15086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1103.708750][T15086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1103.761981][ T5262] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1103.779039][T15086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1103.779056][T15086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1103.779085][T15086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.148956][T15086] hsr_slave_0: entered promiscuous mode [ 1104.158465][T15086] hsr_slave_1: entered promiscuous mode [ 1104.159559][T15086] debugfs: 'hsr0' already exists in 'hsr' [ 1104.159586][T15086] Cannot create hsr debugfs directory [ 1108.728159][T15476] loop2: detected capacity change from 0 to 7 [ 1108.809663][T15476] Dev loop2: unable to read RDB block 7 [ 1108.809700][T15476] loop2: AHDI p1 p2 p3 [ 1108.809730][T15476] loop2: partition table partially beyond EOD, truncated [ 1108.836096][T15476] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1108.836130][T15476] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1109.079509][ T5262] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1109.132367][T15479] netlink: 'syz.4.2810': attribute type 1 has an invalid length. [ 1114.691651][T15509] syz_tun: entered allmulticast mode [ 1115.018458][T15522] loop2: detected capacity change from 0 to 7 [ 1115.121282][T15522] Dev loop2: unable to read RDB block 7 [ 1115.121322][T15522] loop2: AHDI p1 p2 p3 [ 1115.121353][T15522] loop2: partition table partially beyond EOD, truncated [ 1115.121632][T15522] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1115.121654][T15522] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1115.815180][T15528] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 1116.227763][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.227830][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.816156][T15556] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 1119.253601][T15086] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1119.355123][T15086] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1119.356504][T15086] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1119.398261][T15086] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1119.417815][T15086] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1119.478913][T15086] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1119.509275][T15086] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1119.587765][T15086] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1121.727624][T15086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1121.827928][T15086] 8021q: adding VLAN 0 to HW filter on device team0 [ 1121.848761][ T1562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.849078][ T1562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1121.911234][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.911338][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1124.069409][T15633] netlink: 'syz.4.2848': attribute type 1 has an invalid length. [ 1127.558817][T15653] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 1127.952776][T10559] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1128.015960][T10559] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1128.033159][T10559] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1128.043899][T10559] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1128.045243][T10559] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1130.513421][T10559] Bluetooth: hci5: command tx timeout [ 1132.603280][T10559] Bluetooth: hci5: command tx timeout [ 1134.973846][T10559] Bluetooth: hci5: command tx timeout [ 1137.044955][T10559] Bluetooth: hci5: command tx timeout [ 1138.948326][T15795] netlink: 'syz.1.2890': attribute type 1 has an invalid length. [ 1142.061472][T15832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2903'. [ 1143.796810][T15854] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2906'. [ 1147.016999][T15874] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 1147.261657][T15886] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2915'. [ 1147.480770][T15884] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2914'. [ 1147.481055][T15884] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2914'. [ 1147.787708][T15672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.787855][T15672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.788127][T15672] bridge_slave_0: entered allmulticast mode [ 1147.794111][T15672] bridge_slave_0: entered promiscuous mode [ 1148.566655][T15672] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.566802][T15672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.567055][T15672] bridge_slave_1: entered allmulticast mode [ 1148.570991][T15672] bridge_slave_1: entered promiscuous mode [ 1149.227484][T15907] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2919'. [ 1149.762255][T15672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1149.767833][T15672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1149.816469][T15672] team0: Port device team_slave_0 added [ 1149.822860][T15672] team0: Port device team_slave_1 added [ 1149.920294][T15672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1149.920322][T15672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.920351][T15672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1149.922928][T15672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1149.922942][T15672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.922970][T15672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1150.087618][T15672] hsr_slave_0: entered promiscuous mode [ 1150.089169][T15672] hsr_slave_1: entered promiscuous mode [ 1150.102514][T15672] debugfs: 'hsr0' already exists in 'hsr' [ 1150.102544][T15672] Cannot create hsr debugfs directory [ 1152.121224][T15924] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2926'. [ 1152.121513][T15924] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2926'. [ 1153.572855][T10559] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1157.213938][ T3297] bridge_slave_1: left allmulticast mode [ 1157.213978][ T3297] bridge_slave_1: left promiscuous mode [ 1157.214275][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.336254][ T3297] bridge_slave_0: left allmulticast mode [ 1157.336290][ T3297] bridge_slave_0: left promiscuous mode [ 1157.336558][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.227477][T16001] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1160.343795][ T3297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1160.431408][ T3297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1160.453496][ T3297] bond0 (unregistering): Released all slaves [ 1160.524195][T15977] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2941'. [ 1160.524546][T15977] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2941'. [ 1161.339669][T16017] loop2: detected capacity change from 0 to 7 [ 1161.418652][T16017] Dev loop2: unable to read RDB block 7 [ 1161.418702][T16017] loop2: unable to read partition table [ 1161.418918][T16017] loop2: partition table beyond EOD, truncated [ 1161.440355][T16017] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1163.981096][ T3297] hsr_slave_0: left promiscuous mode [ 1164.073579][ T3297] hsr_slave_1: left promiscuous mode [ 1164.074778][ T3297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1164.097496][ T3297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1166.727899][T16063] binder: 16062:16063 ioctl c0306201 200000000680 returned -14 [ 1167.092675][ T3297] team0 (unregistering): Port device team_slave_1 removed [ 1167.193103][ T3297] team0 (unregistering): Port device team_slave_0 removed [ 1168.829522][T16087] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2973'. [ 1168.829576][T16087] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2973'. [ 1168.971608][T16087] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2973'. [ 1168.971636][T16087] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2973'. [ 1169.082477][T11359] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.082815][T11359] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.082859][T11359] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.082904][T11359] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.252795][T16096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2977'. [ 1169.819424][ T5262] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1175.837840][T16146] warning: `syz.1.2993' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1177.663451][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.663550][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.656774][T15672] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1184.275741][T15672] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1184.312282][T15672] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1184.899240][T15672] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1184.915169][T15672] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1185.519923][T15672] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1185.607729][T15672] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1185.927614][T15672] 8021q: adding VLAN 0 to HW filter on device netdevsim3 Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.