last executing test programs: 11m53.006073963s ago: executing program 2 (id=3): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x210b00, 0x6c) r1 = openat$cgroup_pressure(r0, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) r2 = dup(r1) read$FUSE(r2, 0x0, 0x0) 11m50.767514894s ago: executing program 2 (id=14): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @loopback, 0x6}, 0x1c) socket$packet(0x11, 0x3, 0x300) socket(0x2, 0xa, 0x300) write(r0, 0x0, 0x0) 11m50.045075517s ago: executing program 2 (id=17): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) shutdown(r0, 0x1) 11m49.185638663s ago: executing program 2 (id=19): r0 = syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x2218448, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1de, &(0x7f0000000640)="$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") r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(r0, r1, 0x0, 0x10578410eb) 11m45.617390304s ago: executing program 2 (id=25): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x6d) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) syz_clone(0xf21e4000, 0x0, 0x0, 0x0, 0x0, 0x0) 11m42.878933743s ago: executing program 2 (id=27): sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd(r2, &(0x7f0000000300)={[0x4]}, 0x8) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) 11m26.796741214s ago: executing program 32 (id=27): sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd(r2, &(0x7f0000000300)={[0x4]}, 0x8) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) 11m17.634550073s ago: executing program 0 (id=57): r0 = socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000001800dd8d00000000fedbdf2502201000fd04ff02"], 0x20}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCINQ(r4, 0x541b, 0x0) 11m9.995935018s ago: executing program 0 (id=72): r0 = syz_open_procfs(0x0, &(0x7f0000002300)='net/route\x00') pread64(r0, &(0x7f0000000380)=""/208, 0xd0, 0x0) 11m9.907188962s ago: executing program 0 (id=73): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x20020080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x42, &(0x7f0000000040), 0x3b) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000000), &(0x7f00000000c0)=r4}, 0x68) recvmsg$unix(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000003c0)=""/199, 0xc7}], 0x1}, 0x20) 11m5.480640147s ago: executing program 0 (id=80): sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x301880, 0x20d) r0 = getpid() mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x21021, 0x0) 10m58.506059267s ago: executing program 0 (id=86): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m57.497706669s ago: executing program 1 (id=88): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x42000500) chdir(0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f0000001140)={0x2020}, 0x2020) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x4, 0x4, 0x11}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0500"], 0x10) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000300)={0x2, 0x3}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a0000000800000001000084f7ffffff0400000002000000566700000800000000000008000000000030615f610000305f"], &(0x7f0000000200)=""/138, 0x46, 0x8a, 0x1}, 0x28) recvmmsg(r3, &(0x7f000000d740)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000500)=""/193, 0xc1}, {&(0x7f0000000600)}, {&(0x7f00000006c0)=""/143, 0x8f}, {&(0x7f0000000840)=""/192, 0xc0}], 0x4, &(0x7f0000000940)=""/6, 0x6}, 0x1}, {{&(0x7f0000000980)=@generic, 0x80, &(0x7f0000005240)=[{&(0x7f0000000a00)=""/231, 0xe7}, {&(0x7f0000000b00)=""/30, 0x1e}, {&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000004180)=""/65, 0x41}, {&(0x7f0000004200)=""/4096, 0x1000}, {&(0x7f0000005200)=""/58, 0x3a}], 0x6, &(0x7f00000052c0)=""/161, 0xa1}, 0xffff}, {{&(0x7f0000005380)=@can, 0x80, &(0x7f0000005880)=[{&(0x7f0000005400)=""/92, 0x5c}, {&(0x7f0000005480)=""/20, 0x14}, {&(0x7f00000054c0)=""/231, 0xe7}, {&(0x7f00000055c0)=""/64, 0x40}, {&(0x7f0000005600)=""/28, 0x1c}, {&(0x7f0000005640)=""/121, 0x79}, {&(0x7f00000056c0)=""/233, 0xe9}, {&(0x7f00000057c0)=""/175, 0xaf}], 0x8, &(0x7f0000005900)}, 0xb}, {{&(0x7f0000005940)=@qipcrtr, 0x80, &(0x7f0000006ac0)=[{&(0x7f00000059c0)=""/91, 0x5b}, {&(0x7f0000005a40)=""/108, 0x6c}, {&(0x7f0000005ac0)=""/4096, 0x1000}], 0x3, &(0x7f0000006b00)=""/14, 0xe}, 0xd06a}, {{&(0x7f0000006b40)=@nfc_llcp, 0x80, &(0x7f0000007f00)=[{&(0x7f0000006bc0)=""/4096, 0x1000}, {&(0x7f0000007bc0)=""/10, 0xa}, {&(0x7f0000007c00)=""/198, 0xc6}, {&(0x7f0000007d00)=""/55, 0x37}, {&(0x7f0000007d40)=""/198, 0xc6}, {&(0x7f0000007e40)=""/170, 0xaa}], 0x6}}, {{&(0x7f0000007f80)=@ieee802154, 0x80, &(0x7f0000009640)=[{&(0x7f0000008000)=""/144, 0x90}, {&(0x7f00000080c0)=""/71, 0x47}, {&(0x7f0000008140)=""/156, 0x9c}, {&(0x7f0000008200)=""/212, 0xd4}, {&(0x7f0000008300)=""/148, 0x94}, {&(0x7f00000083c0)=""/4096, 0x1000}, {&(0x7f00000093c0)=""/149, 0x95}, {&(0x7f0000009480)=""/87, 0x57}, {&(0x7f0000009500)=""/253, 0xfd}, {&(0x7f0000009600)=""/24, 0x18}], 0xa, &(0x7f0000009700)=""/51, 0x33}, 0x5}, {{&(0x7f0000009740)=@hci, 0x80, &(0x7f00000098c0)=[{&(0x7f00000097c0)=""/244, 0xf4}], 0x1, &(0x7f0000009900)=""/208, 0xd0}, 0x604}, {{&(0x7f0000009a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f000000a080)=[{&(0x7f0000009a80)=""/222, 0xde}, {&(0x7f0000009b80)=""/168, 0xa8}, {&(0x7f0000009c40)=""/72, 0x48}, {&(0x7f0000009cc0)=""/175, 0xaf}, {&(0x7f0000009d80)=""/253, 0xfd}, {&(0x7f0000009e80)=""/208, 0xd0}, {&(0x7f0000009f80)=""/247, 0xf7}], 0x7, &(0x7f000000a100)=""/4096, 0x1000}, 0x6}, {{&(0x7f000000b100)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f000000d640)=[{&(0x7f000000b180)=""/250, 0xfa}, {&(0x7f000000b280)=""/170, 0xaa}, {&(0x7f000000b340)=""/4096, 0x1000}, {&(0x7f000000c340)=""/4096, 0x1000}, {&(0x7f000000d340)=""/49, 0x31}, {&(0x7f000000d380)=""/190, 0xbe}, {&(0x7f000000d440)=""/54, 0x36}, {&(0x7f000000d480)=""/155, 0x9b}, {&(0x7f000000d540)=""/9, 0x9}, {&(0x7f000000d580)=""/138, 0x8a}], 0xa, &(0x7f000000d700)=""/59, 0x3b}, 0x21b}], 0x9, 0x2001, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r6, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[], 0x41) 10m56.31396008s ago: executing program 1 (id=92): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000004a230000"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r1, &(0x7f0000000340)}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 10m55.960482728s ago: executing program 0 (id=93): r0 = msgget$private(0x0, 0x3ac) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) shutdown(r5, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000680)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x9}, 0x0, 0x0, 0x0, 0xffffffffc412890b, 0x1, 0xfffffffffffffffa, 0x0, 0x8, 0x200, 0x1}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e6788", 0x21}], 0x1}, 0x41) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 10m55.398475233s ago: executing program 1 (id=94): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) symlink(&(0x7f0000000500)='./file0/file0\x00', 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = signalfd(r2, &(0x7f0000000300)={[0x4]}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x10, 0x2c, 0x1, @empty, @mcast2, {[@hopopts={0xff, 0x0, '\x00', [@generic={0x6}]}]}}}}}, 0x0) 10m53.800357866s ago: executing program 1 (id=95): sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x301880, 0x20d) r0 = getpid() mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x21021, 0x0) 10m52.871708053s ago: executing program 1 (id=99): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) symlink(&(0x7f0000000500)='./file0/file0\x00', 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = signalfd(r2, &(0x7f0000000300)={[0x4]}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x10, 0x2c, 0x1, @empty, @mcast2, {[@hopopts={0xff, 0x0, '\x00', [@generic={0x6}]}]}}}}}, 0x0) 10m46.057518171s ago: executing program 1 (id=111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) symlink(&(0x7f0000000500)='./file0/file0\x00', 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = signalfd(r2, &(0x7f0000000300)={[0x4]}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x10, 0x2c, 0x1, @empty, @mcast2, {[@hopopts={0xff, 0x0, '\x00', [@generic={0x6}]}]}}}}}, 0x0) 4.057909322s ago: executing program 4 (id=995): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x80102, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0x7) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(0x0, 0x20) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="008000"}) ioctl(r4, 0x8b2a, &(0x7f0000000040)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000007c0)={0xf, 0x0, 0x1, 0x5, 0x9, 0x8, 0x80}, 0xc) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 2.3401134s ago: executing program 4 (id=996): kexec_load(0x3, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c20", 0x7e, 0x5, 0xffffffff}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb8", 0x21, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60", 0x17}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d62230167", 0x9e}], 0x3}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.153667112s ago: executing program 3 (id=998): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00007ff000/0x800000)=nil, 0x800000}, 0x1}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x60, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x54}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5c2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x1}, {0x6c, 0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0x48, 0x1}, {0x1}, {0x1b, 0x1}, {0x16}, {0x4}, {0x24, 0x1}, {0x12, 0x1}, {0x1}, {0x30, 0x1}, {0xf}, {0x24, 0x1}, {0xc}, {0x12}]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7, 0xbe, "9c3321"}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 1.492304762s ago: executing program 3 (id=999): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081054e81f782db44b9040a1d080243000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7d9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace80ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000000c0)=0x61d6, 0x4) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000003c0)=@delqdisc={0x34, 0x25, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff1, 0x6}, {0x19, 0x10}, {0xb, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x87}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10000}]}, 0x34}, 0x1, 0x0, 0x0, 0x14040}, 0x810) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a310000000014000380080001400000000008000240000000005c000000160a0101000b000000000000010000000900020073797a31000000000900010073797a3000000000300003802c0003802800010067656e657665300000000000000000001400010076657468315f746f5f626f6e66000000140000001000010000000000000000000000000a"], 0xe4}}, 0x0) 1.423681126s ago: executing program 4 (id=1000): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd701004000000050000000600010005001000080009000200000008000b000000000008000c00a80a0000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x32, 0xffffffffffffffff, 0xe59d4000) migrate_pages(0x0, 0xfc, 0x0, &(0x7f0000000240)=0x1) 785.961273ms ago: executing program 4 (id=1001): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000400)={0x0, 0xf39b, 0x80, 0x3, 0xb0}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd5fb, 0x40, 0x0, 0x31b, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9860, 0x2000, 0x1, 0x3df, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab1c, 0x400, 0x3, 0x90284}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x400, 0x2, 0x7b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x5, 0xa0b, 0x0, 0x0}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x677b276d6d56f612}, 0x20008890) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="997425bd7000fbdbdf25150000004c0001"], 0x60}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) 699.73234ms ago: executing program 3 (id=1002): socket$pppoe(0x18, 0x1, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="8a8d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', 0x13b4c0, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, 0x0, &(0x7f0000000080)) 471.26408ms ago: executing program 3 (id=1003): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="b702000001040000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80d0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57bbb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333a8b1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d65ceec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d7500760600f3ffb2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a08ff275df45508ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a03b4c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b1eb176d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000061d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a381b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df620047bade4ba41ee0141843958479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2af2b96779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd02000000bf48ea48e0e1f463d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a24460e545c71e1940c998f39ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d596b5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c3e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1a1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a1866b598a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253ba5d5ab46938e8fb23fa7047bc59c4345e912585a8adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cea48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89e11a300510776934e87bb3c21394f46954a012b2a3b0760f5bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb000000000000000000000000001b58cadcc5aaf65e05663985a177aa1d1ea2ad1b8151c7d58f5b92827f550269b3585d98e1394e816a477e52ce2f6de2bd7192f46cf965e774968d151d2bda084b10ec4c8d2c6ab582b1e5e3ed874235ff128c661298ed75879d8a4025ad1c3d9ef6355dc7284c6e648a61da026a777fcc7ae2c60ce64a2f2b0000000000000000000000000000003022110d1230e998429a6fd8f35939a8ae5acc89125539d84b98df6f8ee2ad0b238759bf400ac14c591aefe9660076a494f73b0ea8f3cb4a9c2e4f745a2afb593fabb9481600b2f44e6415153c1f8cf974a226d2700608bb2838ef07d75aed8b082716be3c37f60f48b9995f6325fdaa1c164b1e2bcbde000000000000000000d4fd710a526223440f9df8d22bf9224e4b71b0757dbc8311a2ffbf680a2c09a893ffd79f0a645df3e2dce61e24c28750f50ccb9244fdb344773f79483ec0b6936fd853fda9ee154914a00831cf4bf6f9e6fe6cdfab5ab31de15450e6e703316d9597100d83d0444d511ec95edfc460461eef194209655b2a966078be83da84fe699fa66295c9995c869c18501c3d3bf6b17e5b2211c4903580dcdc7ea2bf9e3b202d7b01ea0b800868eb22cbb86e927b364c9c5642ea6188f53c36dffecbdeda61ceb3b1c1f4a7bc77e39a9ff7e547cef240c3cf78f61d3e000000000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0xa002a0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x4000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 336.540125ms ago: executing program 4 (id=1004): syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc0, 0x8, 0x0, 0x1000}}}}}}, 0x0) 205.129835ms ago: executing program 4 (id=1005): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0xa0002013}) close(r0) r2 = epoll_create1(0x80000) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x9]}, 0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x60000008}) 150.132447ms ago: executing program 3 (id=1006): r0 = syz_open_dev$usbmon(&(0x7f0000000540), 0xc0, 0x20800) read$usbmon(r0, &(0x7f0000000580)=""/4096, 0x1000) 0s ago: executing program 3 (id=1007): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000140)={0x28, 0x1, 0x0, 0x0, 0x100, 0x3, 0x5}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110a, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="7084c3d1b35889fe7591ae8b1ccb", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) kernel console output (not intermixed with test programs): 34] Bluetooth: hci0: command tx timeout [ 361.202400][ T37] audit: type=1326 audit(1780387741.982:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7492 comm="syz.3.319" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23d715ce59 code=0x0 [ 361.805526][ T5634] Bluetooth: hci0: command tx timeout [ 363.837042][ T5634] Bluetooth: hci0: command tx timeout [ 365.637111][ T1030] bridge_slave_1: left allmulticast mode [ 365.637150][ T1030] bridge_slave_1: left promiscuous mode [ 365.637455][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.798080][ T1030] bridge_slave_0: left allmulticast mode [ 365.798133][ T1030] bridge_slave_0: left promiscuous mode [ 365.799917][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.920782][ T5634] Bluetooth: hci0: command tx timeout [ 366.507069][ T1030] bridge_slave_1: left allmulticast mode [ 366.507098][ T1030] bridge_slave_1: left promiscuous mode [ 366.507298][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.649820][ T1030] bridge_slave_0: left allmulticast mode [ 366.649859][ T1030] bridge_slave_0: left promiscuous mode [ 366.650140][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.887165][ T1030] bridge_slave_1: left allmulticast mode [ 366.887214][ T1030] bridge_slave_1: left promiscuous mode [ 366.887415][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.988188][ T1030] bridge_slave_0: left allmulticast mode [ 366.988216][ T1030] bridge_slave_0: left promiscuous mode [ 366.988420][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.567794][ T1030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.668016][ T1030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.730761][ T1030] bond0 (unregistering): Released all slaves [ 368.831482][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 368.865417][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 368.873931][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 368.878144][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 368.881213][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 370.748015][ T1030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.867915][ T1030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.957050][ T5634] Bluetooth: hci3: command tx timeout [ 370.958731][ T1030] bond0 (unregistering): Released all slaves [ 371.367934][ T1030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.447778][ T1030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.508894][ T1030] bond0 (unregistering): Released all slaves [ 373.469674][ T5634] Bluetooth: hci3: command tx timeout [ 374.362499][ T7449] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.362864][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.363201][ T7449] bridge_slave_0: entered allmulticast mode [ 374.371030][ T7449] bridge_slave_0: entered promiscuous mode [ 374.501363][ T7449] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.501700][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.502031][ T7449] bridge_slave_1: entered allmulticast mode [ 374.531520][ T7449] bridge_slave_1: entered promiscuous mode [ 374.746948][ T1030] hsr_slave_0: left promiscuous mode [ 374.789061][ T1030] hsr_slave_1: left promiscuous mode [ 374.792594][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.829903][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.028508][ T1030] hsr_slave_0: left promiscuous mode [ 375.077750][ T1030] hsr_slave_1: left promiscuous mode [ 375.078911][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.108193][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.298570][ T1030] hsr_slave_0: left promiscuous mode [ 375.337051][ T1030] hsr_slave_1: left promiscuous mode [ 375.338276][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.378105][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.533198][ T5634] Bluetooth: hci3: command tx timeout [ 375.897954][ T1030] team0 (unregistering): Port device team_slave_1 removed [ 376.009290][ T1030] team0 (unregistering): Port device team_slave_0 removed [ 376.174561][ T7623] fuse: Unknown parameter '0xffffffffffffffff' [ 376.176537][ T5634] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 376.688374][ T1030] team0 (unregistering): Port device team_slave_1 removed [ 376.737731][ T1030] team0 (unregistering): Port device team_slave_0 removed [ 377.277666][ T1030] team0 (unregistering): Port device team_slave_1 removed [ 377.338638][ T1030] team0 (unregistering): Port device team_slave_0 removed [ 377.600562][ T5634] Bluetooth: hci3: command tx timeout [ 378.097949][ T7449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.157262][ T7449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.148096][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.148218][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.407854][ T7449] team0: Port device team_slave_0 added [ 379.451049][ T7449] team0: Port device team_slave_1 added [ 379.583233][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.583253][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.583282][ T7449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.650431][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.650450][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.650480][ T7449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.736023][ T7208] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 379.942672][ T7208] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 380.017193][ T7208] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 380.094248][ T7208] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 380.155095][ T7208] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 380.215269][ T7208] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 380.499496][ T7208] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 380.541383][ T7208] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 381.924760][ T7449] hsr_slave_0: entered promiscuous mode [ 381.937159][ T7449] hsr_slave_1: entered promiscuous mode [ 381.954170][ T7449] debugfs: 'hsr0' already exists in 'hsr' [ 381.954200][ T7449] Cannot create hsr debugfs directory [ 383.348413][ T7567] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.348847][ T7567] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.349164][ T7567] bridge_slave_0: entered allmulticast mode [ 383.352938][ T7567] bridge_slave_0: entered promiscuous mode [ 383.424483][ T7567] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.424840][ T7567] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.425173][ T7567] bridge_slave_1: entered allmulticast mode [ 383.434870][ T7567] bridge_slave_1: entered promiscuous mode [ 383.817951][ T7661] fuse: Bad value for 'fd' [ 383.919864][ T7567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.136176][ T7567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.202195][ T7668] fuse: Unknown parameter '0xffffffffffffffff' [ 384.203963][ T5634] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 384.458833][ T7567] team0: Port device team_slave_0 added [ 384.484629][ T7567] team0: Port device team_slave_1 added [ 384.643477][ T7567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.643497][ T7567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.643526][ T7567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.698179][ T7567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.698198][ T7567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.698229][ T7567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.778901][ T7449] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 384.793160][ T7676] overlayfs: failed to clone upperpath [ 384.825058][ T7449] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 384.836174][ T7449] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 384.864651][ T7449] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 384.887229][ T7449] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 384.939674][ T7449] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 385.117146][ T7449] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 387.924679][ T7449] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 388.320786][ T7700] fuse: Unknown parameter '0xffffffffffffffff' [ 388.322810][ T5629] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 388.355979][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 388.363409][ T7567] hsr_slave_0: entered promiscuous mode [ 388.379215][ T7567] hsr_slave_1: entered promiscuous mode [ 388.381051][ T7567] debugfs: 'hsr0' already exists in 'hsr' [ 388.381076][ T7567] Cannot create hsr debugfs directory [ 388.407448][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 388.414643][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 388.454960][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 388.463008][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 388.955561][ T7720] overlayfs: failed to clone upperpath [ 389.979429][ T7449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.329645][ T7744] fuse: Unknown parameter '0xffffffffffffffff' [ 390.331751][ T5634] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 390.639856][ T7752] overlayfs: failed to clone upperpath [ 390.640240][ T5634] Bluetooth: hci5: command tx timeout [ 390.791254][ T7449] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.839450][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.839771][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.922079][ T3417] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.922194][ T3417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.722445][ T5634] Bluetooth: hci5: command tx timeout [ 394.931664][ T5634] Bluetooth: hci5: command tx timeout [ 395.661242][ T7793] overlayfs: failed to clone upperpath [ 395.696465][ T7696] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.724904][ T7696] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.725256][ T7696] bridge_slave_0: entered allmulticast mode [ 395.747685][ T7796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.392'. [ 395.753714][ T7696] bridge_slave_0: entered promiscuous mode [ 395.774740][ T7696] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.775029][ T7696] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.775345][ T7696] bridge_slave_1: entered allmulticast mode [ 395.788079][ T7696] bridge_slave_1: entered promiscuous mode [ 396.459833][ T1030] bridge_slave_1: left allmulticast mode [ 396.459861][ T1030] bridge_slave_1: left promiscuous mode [ 396.460079][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.502111][ T7799] trusted_key: encrypted_key: key user:syz not found [ 396.578682][ T1030] bridge_slave_0: left allmulticast mode [ 396.578723][ T1030] bridge_slave_0: left promiscuous mode [ 396.579117][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.956979][ T5634] Bluetooth: hci5: command tx timeout [ 397.119420][ T1030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.198024][ T1030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.259087][ T1030] bond0 (unregistering): Released all slaves [ 397.581225][ T7696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.668970][ T7696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.857103][ T1030] hsr_slave_0: left promiscuous mode [ 399.897010][ T1030] hsr_slave_1: left promiscuous mode [ 399.898251][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.948065][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.757828][ T1030] team0 (unregistering): Port device team_slave_1 removed [ 402.016335][ T1030] team0 (unregistering): Port device team_slave_0 removed [ 402.102007][ T7828] overlayfs: failed to clone upperpath [ 402.526564][ T7696] team0: Port device team_slave_0 added [ 402.534159][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.403'. [ 402.784404][ T7696] team0: Port device team_slave_1 added [ 404.251291][ T7696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.251311][ T7696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.251353][ T7696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.391107][ T7696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.391125][ T7696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.391156][ T7696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.468836][ T37] audit: type=1326 audit(1780387785.242:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.3.406" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23d715ce59 code=0x0 [ 406.946494][ T7696] hsr_slave_0: entered promiscuous mode [ 406.949842][ T7696] hsr_slave_1: entered promiscuous mode [ 406.970503][ T7696] debugfs: 'hsr0' already exists in 'hsr' [ 406.970548][ T7696] Cannot create hsr debugfs directory [ 407.086715][ T7449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.690891][ T7875] overlayfs: failed to clone upperpath [ 411.462768][ T7449] veth0_vlan: entered promiscuous mode [ 411.464382][ T7567] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 411.511051][ T7567] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 411.515802][ T7567] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 411.544226][ T7567] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 411.828519][ T7567] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 411.873067][ T7567] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 411.910092][ T7567] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 412.003061][ T7567] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 412.019785][ T7449] veth1_vlan: entered promiscuous mode [ 415.581597][ T7449] veth0_macvtap: entered promiscuous mode [ 415.638334][ T7449] veth1_macvtap: entered promiscuous mode [ 415.837626][ T7449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.129085][ T7449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.639389][ T7567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.932845][ T7567] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.041760][ T1030] bridge_slave_1: left allmulticast mode [ 420.041796][ T1030] bridge_slave_1: left promiscuous mode [ 420.042111][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.219061][ T1030] bridge_slave_0: left allmulticast mode [ 420.219099][ T1030] bridge_slave_0: left promiscuous mode [ 420.219398][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.429354][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 420.495640][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 420.500288][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 420.516394][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 420.517992][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 422.429285][ T1030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.507912][ T1030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.601942][ T1030] bond0 (unregistering): Released all slaves [ 422.637077][ T5634] Bluetooth: hci1: command tx timeout [ 423.354496][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.354736][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.517033][ T1030] hsr_slave_0: left promiscuous mode [ 424.752552][ T5634] Bluetooth: hci1: command tx timeout [ 424.756167][ T1030] hsr_slave_1: left promiscuous mode [ 424.801438][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.855193][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.508529][ T1030] team0 (unregistering): Port device team_slave_1 removed [ 425.608552][ T1030] team0 (unregistering): Port device team_slave_0 removed [ 426.983843][ T5634] Bluetooth: hci1: command tx timeout [ 429.049739][ T5634] Bluetooth: hci1: command tx timeout [ 429.575820][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 429.611103][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 429.639530][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 429.644191][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 429.668989][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 431.757492][ T5629] Bluetooth: hci0: command tx timeout [ 433.847803][ T5629] Bluetooth: hci0: command tx timeout [ 436.910352][ T5629] Bluetooth: hci0: command tx timeout [ 437.510436][ T7696] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 437.561384][ T7696] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 439.553256][ T5629] Bluetooth: hci0: command tx timeout [ 440.298204][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.298343][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.474499][ T7696] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 442.056925][ T7696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 442.275853][ T7696] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 442.417880][ T7696] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 442.920841][ T7696] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 443.053036][ T7696] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 444.134574][ T7966] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.134809][ T7966] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.135093][ T7966] bridge_slave_0: entered allmulticast mode [ 444.173850][ T7966] bridge_slave_0: entered promiscuous mode [ 444.259218][ T7966] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.290919][ T7966] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.291231][ T7966] bridge_slave_1: entered allmulticast mode [ 444.331591][ T7966] bridge_slave_1: entered promiscuous mode [ 444.978643][ T7966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.114770][ T7966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.881975][ T7966] team0: Port device team_slave_0 added [ 448.919545][ T7966] team0: Port device team_slave_1 added [ 449.786646][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 449.853295][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 449.864161][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 449.865586][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 449.884452][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 450.320643][ T7966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.320656][ T7966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.320677][ T7966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.914132][ T7966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.914152][ T7966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.914190][ T7966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.104297][ T5629] Bluetooth: hci3: command tx timeout [ 454.167537][ T5629] Bluetooth: hci3: command tx timeout [ 455.369701][ T7966] hsr_slave_0: entered promiscuous mode [ 455.388412][ T7966] hsr_slave_1: entered promiscuous mode [ 455.412461][ T7966] debugfs: 'hsr0' already exists in 'hsr' [ 455.412483][ T7966] Cannot create hsr debugfs directory [ 455.591893][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 455.624305][ T8025] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.624541][ T8025] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.624821][ T8025] bridge_slave_0: entered allmulticast mode [ 455.658594][ T8025] bridge_slave_0: entered promiscuous mode [ 456.237233][ T5629] Bluetooth: hci3: command tx timeout [ 456.329164][ T8025] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.329486][ T8025] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.329748][ T8025] bridge_slave_1: entered allmulticast mode [ 456.340594][ T8025] bridge_slave_1: entered promiscuous mode [ 456.817960][ T8025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.971165][ T8025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.384852][ T8025] team0: Port device team_slave_0 added [ 457.511537][ T8025] team0: Port device team_slave_1 added [ 458.252833][ T8025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.252848][ T8025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.252869][ T8025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.327328][ T5629] Bluetooth: hci3: command tx timeout [ 458.549464][ T8025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.549546][ T8025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.549567][ T8025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.405850][ T8025] hsr_slave_0: entered promiscuous mode [ 459.424050][ T8025] hsr_slave_1: entered promiscuous mode [ 459.426112][ T8025] debugfs: 'hsr0' already exists in 'hsr' [ 459.426138][ T8025] Cannot create hsr debugfs directory [ 459.611157][ T1030] bridge_slave_1: left allmulticast mode [ 459.611195][ T1030] bridge_slave_1: left promiscuous mode [ 459.611493][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.778731][ T1030] bridge_slave_0: left allmulticast mode [ 459.778770][ T1030] bridge_slave_0: left promiscuous mode [ 459.779084][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.027275][ T1030] bridge_slave_1: left allmulticast mode [ 460.027313][ T1030] bridge_slave_1: left promiscuous mode [ 460.027639][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.165205][ T1030] bridge_slave_0: left allmulticast mode [ 460.165244][ T1030] bridge_slave_0: left promiscuous mode [ 460.165537][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.584260][ T8240] overlayfs: failed to clone upperpath [ 462.790959][ T1030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.879595][ T1030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.021994][ T1030] bond0 (unregistering): Released all slaves [ 464.657975][ T1030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.737949][ T1030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.764307][ T1030] bond0 (unregistering): Released all slaves [ 464.989093][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 468.296925][ T1030] hsr_slave_0: left promiscuous mode [ 468.337033][ T1030] hsr_slave_1: left promiscuous mode [ 468.338205][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.362734][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.517005][ T1030] hsr_slave_0: left promiscuous mode [ 468.536913][ T1030] hsr_slave_1: left promiscuous mode [ 468.537911][ T1030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.537931][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.578217][ T1030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.578247][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.659016][ T1030] veth1_macvtap: left promiscuous mode [ 468.659090][ T1030] veth0_macvtap: left promiscuous mode [ 468.659282][ T1030] veth1_vlan: left promiscuous mode [ 468.659464][ T1030] veth0_vlan: left promiscuous mode [ 469.217751][ T1030] team0 (unregistering): Port device team_slave_1 removed [ 469.268003][ T1030] team0 (unregistering): Port device team_slave_0 removed [ 470.320089][ T1030] team0 (unregistering): Port device team_slave_1 removed [ 470.377707][ T1030] team0 (unregistering): Port device team_slave_0 removed [ 474.645233][ T8150] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.645751][ T8150] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.646065][ T8150] bridge_slave_0: entered allmulticast mode [ 474.658158][ T8150] bridge_slave_0: entered promiscuous mode [ 474.693824][ T8150] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.694174][ T8150] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.694512][ T8150] bridge_slave_1: entered allmulticast mode [ 474.717506][ T8150] bridge_slave_1: entered promiscuous mode [ 475.085485][ T8150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.095594][ T8150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.810428][ T8150] team0: Port device team_slave_0 added [ 475.828227][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 475.833869][ T8150] team0: Port device team_slave_1 added [ 476.087340][ T8150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.087358][ T8150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.087388][ T8150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.231944][ T8150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.231959][ T8150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.231981][ T8150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.162922][ T8150] hsr_slave_0: entered promiscuous mode [ 478.178324][ T8150] hsr_slave_1: entered promiscuous mode [ 478.184619][ T8150] debugfs: 'hsr0' already exists in 'hsr' [ 478.184649][ T8150] Cannot create hsr debugfs directory [ 478.648417][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 478.690479][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 478.691852][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 478.693383][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 478.694575][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 479.502760][ T8366] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.510'. [ 480.837019][ T5634] Bluetooth: hci5: command tx timeout [ 484.831318][ T5634] Bluetooth: hci5: command tx timeout [ 486.889014][ T5634] Bluetooth: hci5: command tx timeout [ 487.999450][ T8447] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.520'. [ 488.975977][ T5634] Bluetooth: hci5: command tx timeout [ 490.370851][ T8481] overlayfs: failed to clone upperpath [ 490.684008][ T5629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 490.784786][ T5629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 490.813053][ T5629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 490.820241][ T5629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 490.861667][ T5629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 492.498643][ T1030] bridge_slave_1: left allmulticast mode [ 492.498679][ T1030] bridge_slave_1: left promiscuous mode [ 492.499015][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.683212][ T5629] Bluetooth: hci6: command tx timeout [ 494.188984][ T1030] bridge_slave_0: left allmulticast mode [ 494.189024][ T1030] bridge_slave_0: left promiscuous mode [ 494.189349][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.767544][ T5629] Bluetooth: hci6: command tx timeout [ 496.015094][ T1030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.127753][ T1030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.190111][ T1030] bond0 (unregistering): Released all slaves [ 496.799396][ T8354] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.802833][ T8354] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.803128][ T8354] bridge_slave_0: entered allmulticast mode [ 496.827701][ T8354] bridge_slave_0: entered promiscuous mode [ 496.853511][ T8354] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.855939][ T8354] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.856288][ T8354] bridge_slave_1: entered allmulticast mode [ 496.906225][ T8354] bridge_slave_1: entered promiscuous mode [ 497.060099][ T8531] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.530'. [ 497.200873][ T1030] hsr_slave_0: left promiscuous mode [ 497.236977][ T1030] hsr_slave_1: left promiscuous mode [ 497.239771][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.278040][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.840036][ T5629] Bluetooth: hci6: command tx timeout [ 497.908002][ T1030] team0 (unregistering): Port device team_slave_1 removed [ 497.948254][ T1030] team0 (unregistering): Port device team_slave_0 removed [ 498.763583][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 498.880942][ T8354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.975586][ T8354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.039153][ T8556] overlayfs: failed to clone upperpath [ 499.158923][ T8354] team0: Port device team_slave_0 added [ 499.182102][ T8354] team0: Port device team_slave_1 added [ 499.328309][ T8354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.328328][ T8354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.328361][ T8354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.399248][ T8354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.399267][ T8354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.399300][ T8354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.621989][ T8354] hsr_slave_0: entered promiscuous mode [ 499.624934][ T8354] hsr_slave_1: entered promiscuous mode [ 499.638883][ T8354] debugfs: 'hsr0' already exists in 'hsr' [ 499.638913][ T8354] Cannot create hsr debugfs directory [ 499.916987][ T5629] Bluetooth: hci6: command tx timeout [ 501.688278][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.688395][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.129391][ T8025] netdevsim netdevsim1: probe with driver netdevsim failed with error -12 [ 503.979683][ T8484] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.980084][ T8484] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.980444][ T8484] bridge_slave_0: entered allmulticast mode [ 503.994307][ T8484] bridge_slave_0: entered promiscuous mode [ 504.034726][ T8484] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.035096][ T8484] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.035459][ T8484] bridge_slave_1: entered allmulticast mode [ 504.084220][ T8484] bridge_slave_1: entered promiscuous mode [ 506.340128][ T8484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.234726][ T8484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.304854][ T8484] team0: Port device team_slave_0 added [ 509.312522][ T8484] team0: Port device team_slave_1 added [ 509.433126][ T8484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.433140][ T8484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.433161][ T8484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.435818][ T8484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.435832][ T8484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.435853][ T8484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.676394][ T8484] hsr_slave_0: entered promiscuous mode [ 509.683177][ T8484] hsr_slave_1: entered promiscuous mode [ 509.684722][ T8484] debugfs: 'hsr0' already exists in 'hsr' [ 509.684749][ T8484] Cannot create hsr debugfs directory [ 510.232162][ T5634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 510.246191][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 510.262340][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 510.264087][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 510.264919][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 510.322843][ T1030] bridge_slave_1: left allmulticast mode [ 510.322878][ T1030] bridge_slave_1: left promiscuous mode [ 510.323143][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.659368][ T1030] bridge_slave_0: left allmulticast mode [ 510.659405][ T1030] bridge_slave_0: left promiscuous mode [ 510.661872][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.418027][ T1030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.908814][ T5629] Bluetooth: hci0: command tx timeout [ 512.913262][ T1030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.679422][ T1030] bond0 (unregistering): Released all slaves [ 513.789134][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.556'. [ 514.417145][ T1030] hsr_slave_0: left promiscuous mode [ 514.467067][ T1030] hsr_slave_1: left promiscuous mode [ 514.469832][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.510093][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.957832][ T5629] Bluetooth: hci0: command tx timeout [ 516.077752][ T1030] team0 (unregistering): Port device team_slave_1 removed [ 516.127622][ T1030] team0 (unregistering): Port device team_slave_0 removed [ 516.298696][ T8698] fuse: Bad value for 'fd' [ 516.368312][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 517.822953][ T5629] Bluetooth: hci0: command tx timeout [ 519.837612][ T5629] Bluetooth: hci0: command tx timeout [ 521.554116][ T8354] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 521.707800][ T8354] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 521.725288][ T8354] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 522.895568][ T8354] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 522.949019][ T8354] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 523.212175][ T8354] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 523.827262][ T8354] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 523.912649][ T8354] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 526.360298][ T8484] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 526.425298][ T8484] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 526.498566][ T8484] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 526.621721][ T8484] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 526.880987][ T8484] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 526.944291][ T8484] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 526.958683][ T8484] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 527.096301][ T8484] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 531.415140][ T8665] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.526849][ T8665] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.527193][ T8665] bridge_slave_0: entered allmulticast mode [ 531.554436][ T8665] bridge_slave_0: entered promiscuous mode [ 531.730254][ T8665] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.730594][ T8665] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.730869][ T8665] bridge_slave_1: entered allmulticast mode [ 531.733962][ T8665] bridge_slave_1: entered promiscuous mode [ 531.851954][ T8665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.895488][ T8665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.032289][ T8665] team0: Port device team_slave_0 added [ 532.050148][ T8665] team0: Port device team_slave_1 added [ 532.473821][ T8665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.473849][ T8665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.473880][ T8665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.555131][ T8665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.555148][ T8665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.555171][ T8665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.011997][ T8665] hsr_slave_0: entered promiscuous mode [ 533.014479][ T8665] hsr_slave_1: entered promiscuous mode [ 533.016459][ T8665] debugfs: 'hsr0' already exists in 'hsr' [ 533.016484][ T8665] Cannot create hsr debugfs directory [ 533.373638][ T8354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.067078][ T1030] bridge_slave_1: left allmulticast mode [ 536.067116][ T1030] bridge_slave_1: left promiscuous mode [ 536.067407][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.710871][ T1030] bridge_slave_0: left allmulticast mode [ 536.710904][ T1030] bridge_slave_0: left promiscuous mode [ 536.711186][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.920701][ T37] audit: type=1326 audit(1780387918.702:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.4.583" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f816cd2ce59 code=0x0 [ 538.027067][ T1030] bridge_slave_1: left allmulticast mode [ 538.027096][ T1030] bridge_slave_1: left promiscuous mode [ 538.027408][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.128981][ T1030] bridge_slave_0: left allmulticast mode [ 538.129021][ T1030] bridge_slave_0: left promiscuous mode [ 538.129293][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.537774][ T1030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.637792][ T1030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.699543][ T1030] bond0 (unregistering): Released all slaves [ 539.009372][ T1030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.108626][ T1030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.168848][ T1030] bond0 (unregistering): Released all slaves [ 539.670989][ T8805] fuse: Unknown parameter '0xffffffffffffffff' [ 539.676028][ T8484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.690728][ T5629] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 540.015836][ T1030] hsr_slave_0: left promiscuous mode [ 540.038145][ T1030] hsr_slave_1: left promiscuous mode [ 540.039437][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.129306][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.316289][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 540.386607][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 540.401237][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 540.419183][ T1030] hsr_slave_0: left promiscuous mode [ 540.420378][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 540.422765][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 540.537749][ T1030] hsr_slave_1: left promiscuous mode [ 540.540035][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.583285][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.029195][ T1030] team0 (unregistering): Port device team_slave_1 removed [ 542.115001][ T1030] team0 (unregistering): Port device team_slave_0 removed [ 542.556964][ T5629] Bluetooth: hci1: command tx timeout [ 543.558129][ T1030] team0 (unregistering): Port device team_slave_1 removed [ 543.717780][ T1030] team0 (unregistering): Port device team_slave_0 removed [ 544.675572][ T5629] Bluetooth: hci1: command tx timeout [ 544.941595][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 545.425147][ T8484] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.669870][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.670049][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.585445][ T8885] fuse: Unknown parameter '0xffffffffffffffff' [ 546.609716][ T5629] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 546.829643][ T5629] Bluetooth: hci1: command tx timeout [ 546.922579][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.922766][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.945333][ T5629] Bluetooth: hci1: command tx timeout [ 549.163859][ T37] audit: type=1326 audit(1780387929.932:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.4.600" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f816cd2ce59 code=0x0 [ 550.331968][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 552.873310][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 553.000743][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 553.051689][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 553.055465][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 553.084693][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 556.153025][ T5634] Bluetooth: hci3: command tx timeout [ 557.217938][ T8977] trusted_key: encrypted_key: key user:syz not found [ 557.426199][ T8819] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.430625][ T8819] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.431051][ T8819] bridge_slave_0: entered allmulticast mode [ 557.476117][ T8819] bridge_slave_0: entered promiscuous mode [ 557.498661][ T8819] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.499459][ T8819] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.514626][ T8819] bridge_slave_1: entered allmulticast mode [ 557.545068][ T8819] bridge_slave_1: entered promiscuous mode [ 557.772170][ T8819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.842445][ T8819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.157058][ T5629] Bluetooth: hci3: command tx timeout [ 560.247362][ T5629] Bluetooth: hci3: command tx timeout [ 560.638371][ T9011] capability: warning: `syz.4.611' uses deprecated v2 capabilities in a way that may be insecure [ 562.416931][ T5629] Bluetooth: hci3: command tx timeout [ 562.978849][ T8819] team0: Port device team_slave_0 added [ 563.122558][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.122677][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.332606][ T8819] team0: Port device team_slave_1 added [ 564.546999][ T8819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.547019][ T8819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.547050][ T8819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.596102][ T8819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.596229][ T8819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.596317][ T8819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.121537][ T9046] xt_time: unknown flags 0xf4 [ 567.429817][ T8665] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 568.374718][ T8665] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 570.445488][ T9061] netlink: 408 bytes leftover after parsing attributes in process `syz.4.623'. [ 570.689959][ T8665] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 570.711392][ T8665] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 570.751918][ T8819] hsr_slave_0: entered promiscuous mode [ 570.754107][ T8819] hsr_slave_1: entered promiscuous mode [ 570.755601][ T8819] debugfs: 'hsr0' already exists in 'hsr' [ 570.755628][ T8819] Cannot create hsr debugfs directory [ 573.482777][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 573.526570][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 573.535620][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 573.547269][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 573.550980][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 576.596247][ T5634] Bluetooth: hci5: command tx timeout [ 579.526653][ T5634] Bluetooth: hci5: command tx timeout [ 579.602866][ T8927] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.604142][ T8927] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.605952][ T8927] bridge_slave_0: entered allmulticast mode [ 579.638670][ T8927] bridge_slave_0: entered promiscuous mode [ 579.839071][ T8927] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.839427][ T8927] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.839793][ T8927] bridge_slave_1: entered allmulticast mode [ 579.915082][ T8927] bridge_slave_1: entered promiscuous mode [ 582.690637][ T5634] Bluetooth: hci5: command tx timeout [ 582.841070][ T8927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.900484][ T8927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.500238][ T8927] team0: Port device team_slave_0 added [ 583.541815][ T8927] team0: Port device team_slave_1 added [ 583.822595][ T8927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.822613][ T8927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.822643][ T8927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.930770][ T8927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.930789][ T8927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.930823][ T8927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.231339][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 584.347030][ T1030] bridge_slave_1: left allmulticast mode [ 584.347071][ T1030] bridge_slave_1: left promiscuous mode [ 584.347394][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.533972][ T1030] bridge_slave_0: left allmulticast mode [ 584.534013][ T1030] bridge_slave_0: left promiscuous mode [ 584.534293][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.811096][ T5634] Bluetooth: hci5: command tx timeout [ 586.337293][ T1030] bridge_slave_1: left allmulticast mode [ 586.337340][ T1030] bridge_slave_1: left promiscuous mode [ 586.337620][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.531956][ T1030] bridge_slave_0: left allmulticast mode [ 586.531996][ T1030] bridge_slave_0: left promiscuous mode [ 586.532274][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.248254][ T1030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.317769][ T1030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.360563][ T1030] bond0 (unregistering): Released all slaves [ 588.617327][ T9179] netlink: 'syz.3.644': attribute type 10 has an invalid length. [ 588.666097][ T9178] netlink: 'syz.3.644': attribute type 10 has an invalid length. [ 589.211194][ T1030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.327774][ T1030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.409018][ T1030] bond0 (unregistering): Released all slaves [ 589.746237][ T9179] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 589.755842][ T9179] team0: Port device netdevsim1 added [ 590.929989][ T9190] overlayfs: failed to clone upperpath [ 591.067799][ T8927] hsr_slave_0: entered promiscuous mode [ 591.071370][ T8927] hsr_slave_1: entered promiscuous mode [ 591.073368][ T8927] debugfs: 'hsr0' already exists in 'hsr' [ 591.073394][ T8927] Cannot create hsr debugfs directory [ 592.910472][ T1030] hsr_slave_0: left promiscuous mode [ 592.958708][ T1030] hsr_slave_1: left promiscuous mode [ 592.962170][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.999957][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.248398][ T1030] hsr_slave_0: left promiscuous mode [ 593.266911][ T1030] hsr_slave_1: left promiscuous mode [ 593.299016][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.337858][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.482145][ T1030] team0 (unregistering): Port device team_slave_1 removed [ 595.579479][ T1030] team0 (unregistering): Port device team_slave_0 removed [ 598.447801][ T1030] team0 (unregistering): Port device team_slave_1 removed [ 598.497714][ T1030] team0 (unregistering): Port device team_slave_0 removed [ 598.754223][ T8819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 598.811360][ T8819] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 598.817611][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 598.836983][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.654'. [ 598.899772][ T8819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 599.047356][ T8819] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 599.090685][ T8819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 599.143848][ T8819] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 599.233024][ T8819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 599.304117][ T8819] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 599.671525][ T8819] kthread_run failed with err -4 [ 600.234181][ T9078] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.234743][ T9078] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.235031][ T9078] bridge_slave_0: entered allmulticast mode [ 600.264881][ T9078] bridge_slave_0: entered promiscuous mode [ 600.275591][ T9078] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.276355][ T9078] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.276681][ T9078] bridge_slave_1: entered allmulticast mode [ 600.303801][ T9078] bridge_slave_1: entered promiscuous mode [ 600.972011][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 600.986105][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 601.038882][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 601.058525][ T9078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.187715][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 601.188544][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 603.276979][ T5634] Bluetooth: hci0: command tx timeout [ 603.773005][ T9078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.026450][ T9078] team0: Port device team_slave_0 added [ 605.113014][ T9078] team0: Port device team_slave_1 added [ 605.647465][ T5634] Bluetooth: hci0: command tx timeout [ 608.489900][ T9078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.489919][ T9078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.489952][ T9078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.520076][ T9078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.520095][ T9078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.520129][ T9078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.539387][ T5634] Bluetooth: hci0: command tx timeout [ 609.386460][ T9078] hsr_slave_0: entered promiscuous mode [ 609.389997][ T9078] hsr_slave_1: entered promiscuous mode [ 609.412627][ T9078] debugfs: 'hsr0' already exists in 'hsr' [ 609.412654][ T9078] Cannot create hsr debugfs directory [ 610.879064][ T5634] Bluetooth: hci0: command tx timeout [ 612.173641][ T8927] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 612.261362][ T8927] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 613.527844][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 613.576090][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 613.590658][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 613.609638][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 613.646423][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 616.599306][ T5629] Bluetooth: hci1: command tx timeout [ 617.899524][ T9453] fuse: fd is not a fuse device [ 618.265428][ T9286] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.265956][ T9286] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.266202][ T9286] bridge_slave_0: entered allmulticast mode [ 618.279182][ T9286] bridge_slave_0: entered promiscuous mode [ 618.586113][ T9286] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.586415][ T9286] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.587122][ T9286] bridge_slave_1: entered allmulticast mode [ 618.600749][ T9286] bridge_slave_1: entered promiscuous mode [ 618.637107][ T5634] Bluetooth: hci1: command tx timeout [ 619.611857][ T9286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.643110][ T9471] trusted_key: encrypted_key: key user:syz not found [ 619.649271][ T9286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.792970][ T9286] team0: Port device team_slave_0 added [ 619.815846][ T9286] team0: Port device team_slave_1 added [ 619.983940][ T9286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.983960][ T9286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.983992][ T9286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.005612][ T9286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.005721][ T9286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.005801][ T9286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.115958][ T9477] netlink: 'syz.3.687': attribute type 1 has an invalid length. [ 620.366032][ T9286] hsr_slave_0: entered promiscuous mode [ 620.374823][ T9286] hsr_slave_1: entered promiscuous mode [ 620.382948][ T9286] debugfs: 'hsr0' already exists in 'hsr' [ 620.382969][ T9286] Cannot create hsr debugfs directory [ 620.727016][ T5634] Bluetooth: hci1: command tx timeout [ 620.911793][ T9078] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 620.939341][ T9078] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 620.981454][ T9078] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 621.015017][ T9078] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 621.106990][ T1030] bridge_slave_1: left allmulticast mode [ 621.107018][ T1030] bridge_slave_1: left promiscuous mode [ 621.107303][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.217088][ T1030] bridge_slave_0: left allmulticast mode [ 621.217117][ T1030] bridge_slave_0: left promiscuous mode [ 621.220628][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.406966][ T1030] bridge_slave_1: left allmulticast mode [ 621.406995][ T1030] bridge_slave_1: left promiscuous mode [ 621.407198][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.508729][ T1030] bridge_slave_0: left allmulticast mode [ 621.508760][ T1030] bridge_slave_0: left promiscuous mode [ 621.508958][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.011179][ T1030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.107871][ T1030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.807046][ T5634] Bluetooth: hci1: command tx timeout [ 622.834836][ T1030] bond0 (unregistering): Released all slaves [ 623.387665][ T1030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.467639][ T1030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.529612][ T1030] bond0 (unregistering): Released all slaves [ 623.588295][ T9078] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 623.673372][ T9078] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 623.861517][ T9078] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 623.924463][ T9078] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 624.449492][ T9417] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.449951][ T9417] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.450342][ T9417] bridge_slave_0: entered allmulticast mode [ 624.455005][ T9417] bridge_slave_0: entered promiscuous mode [ 624.563390][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.563510][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.602412][ T9506] netlink: 168 bytes leftover after parsing attributes in process `syz.4.690'. [ 624.816891][ T1030] hsr_slave_0: left promiscuous mode [ 625.389974][ T1030] hsr_slave_1: left promiscuous mode [ 625.390852][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.429703][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.503765][ T9512] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.694'. [ 625.615912][ T1030] hsr_slave_0: left promiscuous mode [ 625.653306][ T1030] hsr_slave_1: left promiscuous mode [ 625.669564][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.687777][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.147577][ T1030] team0 (unregistering): Port device team_slave_1 removed [ 626.197482][ T1030] team0 (unregistering): Port device team_slave_0 removed [ 626.707621][ T1030] team0 (unregistering): Port device team_slave_1 removed [ 626.748142][ T1030] team0 (unregistering): Port device team_slave_0 removed [ 626.963234][ T9417] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.964805][ T9417] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.965147][ T9417] bridge_slave_1: entered allmulticast mode [ 626.993428][ T9417] bridge_slave_1: entered promiscuous mode [ 627.137700][ T9515] bridge0: port 3(syz_tun) entered blocking state [ 627.137973][ T9515] bridge0: port 3(syz_tun) entered disabled state [ 627.150406][ T9515] syz_tun: entered allmulticast mode [ 627.196187][ T9515] syz_tun: entered promiscuous mode [ 627.711800][ T9417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.753377][ T9417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.027035][ T9417] team0: Port device team_slave_0 added [ 630.051804][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 630.069446][ T9417] team0: Port device team_slave_1 added [ 631.447055][ T9417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.447074][ T9417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.447106][ T9417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.454725][ T9417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.454742][ T9417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.454768][ T9417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.790190][ T9417] hsr_slave_0: entered promiscuous mode [ 631.796038][ T9417] hsr_slave_1: entered promiscuous mode [ 631.806947][ T9417] debugfs: 'hsr0' already exists in 'hsr' [ 631.806977][ T9417] Cannot create hsr debugfs directory [ 634.015216][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 634.058869][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 634.325705][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 634.360546][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 634.365438][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 636.636883][ T5634] Bluetooth: hci3: command tx timeout [ 637.606992][ T9286] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 637.674104][ T9286] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 639.136872][ T5634] Bluetooth: hci3: command tx timeout [ 639.749520][ T9286] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 639.828493][ T9286] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 639.920667][ T9286] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 639.962682][ T9286] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 641.208447][ T5634] Bluetooth: hci3: command tx timeout [ 641.708454][ T9286] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 641.753157][ T9286] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 642.441411][ T9286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.477487][ T9286] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.565031][ T9286] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 642.565057][ T9286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 643.212946][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.213198][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.309285][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.311038][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.497277][ T5634] Bluetooth: hci3: command tx timeout [ 644.949145][ T9573] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.949555][ T9573] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.949887][ T9573] bridge_slave_0: entered allmulticast mode [ 644.952644][ T9573] bridge_slave_0: entered promiscuous mode [ 645.121268][ T9573] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.121590][ T9573] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.123365][ T9573] bridge_slave_1: entered allmulticast mode [ 645.153371][ T9573] bridge_slave_1: entered promiscuous mode [ 645.432290][ T9573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.489428][ T9573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.615941][ T1030] bridge_slave_1: left allmulticast mode [ 645.615979][ T1030] bridge_slave_1: left promiscuous mode [ 645.616274][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.029467][ T1030] bridge_slave_0: left allmulticast mode [ 647.029506][ T1030] bridge_slave_0: left promiscuous mode [ 647.029792][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.267073][ T1030] bridge_slave_1: left allmulticast mode [ 647.267103][ T1030] bridge_slave_1: left promiscuous mode [ 647.267309][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.388178][ T1030] bridge_slave_0: left allmulticast mode [ 647.388214][ T1030] bridge_slave_0: left promiscuous mode [ 647.388450][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.907815][ T1030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.007717][ T1030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 648.069654][ T1030] bond0 (unregistering): Released all slaves [ 648.307654][ T1030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.427716][ T1030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 648.488819][ T1030] bond0 (unregistering): Released all slaves [ 650.784702][ T9573] team0: Port device team_slave_0 added [ 650.806039][ T9573] team0: Port device team_slave_1 added [ 650.966549][ T9286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.124103][ T9573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.124117][ T9573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.124138][ T9573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.208761][ T9573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.208781][ T9573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.208814][ T9573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.508428][ T9417] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 651.557945][ T9417] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 651.579826][ T9417] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 651.712360][ T9417] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 651.959842][ T1030] hsr_slave_0: left promiscuous mode [ 652.008823][ T1030] hsr_slave_1: left promiscuous mode [ 652.009988][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.049999][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.370468][ T1030] hsr_slave_0: left promiscuous mode [ 652.409814][ T1030] hsr_slave_1: left promiscuous mode [ 652.434436][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.478185][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.297965][ T1030] team0 (unregistering): Port device team_slave_1 removed [ 654.347892][ T1030] team0 (unregistering): Port device team_slave_0 removed [ 655.808290][ T1030] team0 (unregistering): Port device team_slave_1 removed [ 655.848369][ T1030] team0 (unregistering): Port device team_slave_0 removed [ 656.112905][ T9417] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 656.173200][ T9417] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 656.176452][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 656.334070][ T9417] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 656.385545][ T9417] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 656.465342][ T9573] hsr_slave_0: entered promiscuous mode [ 656.470845][ T9573] hsr_slave_1: entered promiscuous mode [ 656.476071][ T9573] debugfs: 'hsr0' already exists in 'hsr' [ 656.476140][ T9573] Cannot create hsr debugfs directory [ 657.058916][ T9711] netlink: 168 bytes leftover after parsing attributes in process `syz.3.724'. [ 657.939566][ T9286] veth0_vlan: entered promiscuous mode [ 658.374987][ T9286] veth1_vlan: entered promiscuous mode [ 660.569621][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 660.679807][ T9286] veth0_macvtap: entered promiscuous mode [ 661.273773][ T9417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.462282][ T9417] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.544403][ T6022] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.562251][ T6022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.734204][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.734385][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.220636][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 662.262246][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 662.263757][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 662.313328][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 662.314254][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 665.098302][ T5634] Bluetooth: hci5: command tx timeout [ 668.179696][ T5634] Bluetooth: hci5: command tx timeout [ 670.239946][ T5634] Bluetooth: hci5: command tx timeout [ 670.767949][ T9820] netlink: 'syz.3.738': attribute type 1 has an invalid length. [ 670.767973][ T9820] netlink: 'syz.3.738': attribute type 2 has an invalid length. [ 670.894174][ T9822] netlink: 20 bytes leftover after parsing attributes in process `syz.3.738'. [ 671.044417][ T9573] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 671.130459][ T9573] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 671.185318][ T9827] netlink: 168 bytes leftover after parsing attributes in process `syz.3.739'. [ 671.303456][ T9573] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 671.350258][ T9573] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 671.893888][ T9573] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 671.957005][ T9573] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 672.083910][ T9849] process 'syz.4.736' launched './file1' with NULL argv: empty string added [ 672.317496][ T5634] Bluetooth: hci5: command tx timeout [ 672.907205][ T9573] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 673.435101][ T9573] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 675.369362][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 675.481010][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 675.484651][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 675.521589][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 675.531251][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 676.788992][ T1030] bridge_slave_1: left allmulticast mode [ 676.789030][ T1030] bridge_slave_1: left promiscuous mode [ 676.789329][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.919660][ T37] audit: type=1326 audit(1780388057.702:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9911 comm="syz.4.755" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816cd2ce59 code=0x7ffc0000 [ 676.919721][ T37] audit: type=1326 audit(1780388057.702:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9911 comm="syz.4.755" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816cd2ce59 code=0x7ffc0000 [ 676.919790][ T37] audit: type=1326 audit(1780388057.702:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9911 comm="syz.4.755" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816cd2ce59 code=0x7ffc0000 [ 676.919840][ T37] audit: type=1326 audit(1780388057.702:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9911 comm="syz.4.755" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f816cd2ce59 code=0x7ffc0000 [ 676.919906][ T37] audit: type=1326 audit(1780388057.702:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9911 comm="syz.4.755" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816cd2ce59 code=0x7ffc0000 [ 676.920097][ T37] audit: type=1326 audit(1780388057.702:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9911 comm="syz.4.755" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816cd2ce59 code=0x7ffc0000 [ 676.920259][ T37] audit: type=1326 audit(1780388057.702:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9911 comm="syz.4.755" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816cd2ce59 code=0x7ffc0000 [ 676.920768][ T37] audit: type=1326 audit(1780388057.702:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9911 comm="syz.4.755" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816cd2ce59 code=0x7ffc0000 [ 676.920973][ T37] audit: type=1326 audit(1780388057.702:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9911 comm="syz.4.755" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f816cd2ce59 code=0x7ffc0000 [ 676.921155][ T37] audit: type=1326 audit(1780388057.702:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9911 comm="syz.4.755" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816cd2ce59 code=0x7ffc0000 [ 676.999844][ T1030] bridge_slave_0: left allmulticast mode [ 676.999949][ T1030] bridge_slave_0: left promiscuous mode [ 677.000708][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.264954][ T9916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.755'. [ 677.688213][ T5629] Bluetooth: hci0: command tx timeout [ 679.327577][ T1030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.389321][ T1030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 679.409283][ T1030] bond0 (unregistering): Released all slaves [ 679.745485][ T9913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.755'. [ 679.770038][ T5629] Bluetooth: hci0: command tx timeout [ 681.286870][ T9761] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.287209][ T9761] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.287631][ T9761] bridge_slave_0: entered allmulticast mode [ 681.358153][ T9761] bridge_slave_0: entered promiscuous mode [ 681.523746][ T9761] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.524073][ T9761] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.524331][ T9761] bridge_slave_1: entered allmulticast mode [ 681.533341][ T9761] bridge_slave_1: entered promiscuous mode [ 681.749751][ T9761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.827974][ T9761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.838278][ T5629] Bluetooth: hci0: command tx timeout [ 682.530889][ T1030] hsr_slave_0: left promiscuous mode [ 682.577065][ T1030] hsr_slave_1: left promiscuous mode [ 682.578269][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.607987][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.761745][ T1030] veth0_macvtap: left promiscuous mode [ 682.763630][ T1030] veth1_vlan: left promiscuous mode [ 682.763835][ T1030] veth0_vlan: left promiscuous mode [ 683.807488][ T1030] team0 (unregistering): Port device team_slave_1 removed [ 683.868681][ T1030] team0 (unregistering): Port device team_slave_0 removed [ 683.917688][ T5629] Bluetooth: hci0: command tx timeout [ 684.291713][ T9761] team0: Port device team_slave_0 added [ 684.424064][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 684.435981][ T9761] team0: Port device team_slave_1 added [ 684.509195][ T9761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.509209][ T9761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.509230][ T9761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.515137][ T9761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.515150][ T9761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.515171][ T9761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.700994][ T9573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.914551][ T9761] hsr_slave_0: entered promiscuous mode [ 684.919746][ T9761] hsr_slave_1: entered promiscuous mode [ 684.925853][ T9761] debugfs: 'hsr0' already exists in 'hsr' [ 684.925946][ T9761] Cannot create hsr debugfs directory [ 685.397352][ T9573] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.625410][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.625654][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.808253][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.808500][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.970192][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 686.001495][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.001612][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.116317][ T9886] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.117607][ T9886] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.117907][ T9886] bridge_slave_0: entered allmulticast mode [ 686.121527][ T9886] bridge_slave_0: entered promiscuous mode [ 686.158252][ T9886] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.159161][ T9886] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.159443][ T9886] bridge_slave_1: entered allmulticast mode [ 686.163852][ T9886] bridge_slave_1: entered promiscuous mode [ 686.284949][ T9886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.466352][ T9886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.693400][ T9886] team0: Port device team_slave_0 added [ 686.710139][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.768'. [ 686.726130][ T9886] team0: Port device team_slave_1 added [ 691.055761][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.055784][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.055817][ T9886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.510881][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.510896][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.510919][ T9886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.334098][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 694.366507][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 694.423235][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 694.458213][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 694.475266][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 694.627088][ T9886] hsr_slave_0: entered promiscuous mode [ 694.640790][ T9886] hsr_slave_1: entered promiscuous mode [ 694.658159][ T9886] debugfs: 'hsr0' already exists in 'hsr' [ 694.658190][ T9886] Cannot create hsr debugfs directory [ 697.273368][ T5634] Bluetooth: hci1: command tx timeout [ 699.279171][ T5629] Bluetooth: hci1: command tx timeout [ 699.779727][ T9761] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 699.822114][ T9761] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 699.856142][ T9761] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 699.903573][ T9761] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 700.103833][ T9761] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 700.141725][ T9761] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 700.171740][ T9761] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 700.362288][ T9761] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 701.358604][ T5629] Bluetooth: hci1: command tx timeout [ 701.747166][ T1030] bridge_slave_1: left allmulticast mode [ 701.747205][ T1030] bridge_slave_1: left promiscuous mode [ 701.747502][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.920143][ T1030] bridge_slave_0: left allmulticast mode [ 701.920183][ T1030] bridge_slave_0: left promiscuous mode [ 701.920490][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.439543][ T5629] Bluetooth: hci1: command tx timeout [ 705.897785][ T1030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.978609][ T1030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.019427][ T1030] bond0 (unregistering): Released all slaves [ 706.728917][T10154] trusted_key: encrypted_key: key user:syz not found [ 707.317081][ T1030] hsr_slave_0: left promiscuous mode [ 707.340084][ T1030] hsr_slave_1: left promiscuous mode [ 707.341920][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.378387][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.137659][ T1030] team0 (unregistering): Port device team_slave_1 removed [ 710.199194][ T1030] team0 (unregistering): Port device team_slave_0 removed [ 713.391707][ T9761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.643295][T10199] netlink: 20 bytes leftover after parsing attributes in process `syz.3.797'. [ 713.643365][T10199] netlink: 20 bytes leftover after parsing attributes in process `syz.3.797'. [ 713.697288][ T37] kauditd_printk_skb: 323 callbacks suppressed [ 713.697309][ T37] audit: type=1326 audit(1780388094.482:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.3.797" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d715ce59 code=0x7ffc0000 [ 713.697356][ T37] audit: type=1326 audit(1780388094.482:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.3.797" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d715ce59 code=0x7ffc0000 [ 713.697774][ T37] audit: type=1326 audit(1780388094.482:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.3.797" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d715ce59 code=0x7ffc0000 [ 713.698290][ T37] audit: type=1326 audit(1780388094.482:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.3.797" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d715ce59 code=0x7ffc0000 [ 713.698343][ T37] audit: type=1326 audit(1780388094.482:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.3.797" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f23d715ce59 code=0x7ffc0000 [ 713.702942][ T37] audit: type=1326 audit(1780388094.482:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.3.797" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d715ce59 code=0x7ffc0000 [ 713.703547][ T37] audit: type=1326 audit(1780388094.482:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.3.797" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d715ce59 code=0x7ffc0000 [ 713.703599][ T37] audit: type=1326 audit(1780388094.482:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.3.797" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d715ce59 code=0x7ffc0000 [ 713.703969][ T37] audit: type=1326 audit(1780388094.482:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.3.797" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f23d715ce59 code=0x7ffc0000 [ 713.704486][ T37] audit: type=1326 audit(1780388094.482:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.3.797" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d715ce59 code=0x7ffc0000 [ 713.995988][T10035] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.996411][T10035] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.999605][T10035] bridge_slave_0: entered allmulticast mode [ 714.023844][T10035] bridge_slave_0: entered promiscuous mode [ 715.283300][ T9761] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.284798][T10035] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.285203][T10035] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.285522][T10035] bridge_slave_1: entered allmulticast mode [ 715.289964][T10035] bridge_slave_1: entered promiscuous mode [ 715.651987][T10035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.692337][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.693765][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.791357][T10035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.836130][T10215] overlayfs: failed to clone upperpath [ 716.084347][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.084523][ T6022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.219482][T10035] team0: Port device team_slave_0 added [ 716.271309][T10035] team0: Port device team_slave_1 added [ 718.945668][T10035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.945719][T10035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.945780][T10035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.337943][T10035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.337964][T10035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.337998][T10035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.594942][T10035] hsr_slave_0: entered promiscuous mode [ 719.870539][T10035] hsr_slave_1: entered promiscuous mode [ 719.874217][T10035] debugfs: 'hsr0' already exists in 'hsr' [ 719.874247][T10035] Cannot create hsr debugfs directory [ 720.794980][T10244] netlink: 20 bytes leftover after parsing attributes in process `syz.4.811'. [ 720.795070][T10244] netlink: 20 bytes leftover after parsing attributes in process `syz.4.811'. [ 720.847164][ T37] kauditd_printk_skb: 67 callbacks suppressed [ 720.847183][ T37] audit: type=1326 audit(1780388101.632:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10242 comm="syz.4.811" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816cd2ce59 code=0x7ffc0000 [ 720.847816][ T37] audit: type=1326 audit(1780388101.632:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10242 comm="syz.4.811" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816cd2ce59 code=0x7ffc0000 [ 720.847884][ T37] audit: type=1326 audit(1780388101.632:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10242 comm="syz.4.811" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816cd2ce59 code=0x7ffc0000 [ 720.848211][ T37] audit: type=1326 audit(1780388101.632:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10242 comm="syz.4.811" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f816cd2ce59 code=0x7ffc0000 [ 720.849117][ T37] audit: type=1326 audit(1780388101.632:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10242 comm="syz.4.811" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816cd2ce59 code=0x7ffc0000 [ 720.849386][ T37] audit: type=1326 audit(1780388101.632:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10242 comm="syz.4.811" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816cd2ce59 code=0x7ffc0000 [ 720.849584][ T37] audit: type=1326 audit(1780388101.632:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10242 comm="syz.4.811" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816cd2ce59 code=0x7ffc0000 [ 720.861273][ T37] audit: type=1326 audit(1780388101.632:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10242 comm="syz.4.811" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816cd2ce59 code=0x7ffc0000 [ 720.861337][ T37] audit: type=1326 audit(1780388101.642:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10242 comm="syz.4.811" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816cd2ce59 code=0x7ffc0000 [ 720.861392][ T37] audit: type=1326 audit(1780388101.642:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10242 comm="syz.4.811" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f816cd2ce59 code=0x7ffc0000 [ 721.571931][ T9886] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 721.661011][ T9886] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 721.804267][ T9886] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 721.885326][ T9886] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 722.414343][ T9886] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 722.452849][ T9886] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 722.476434][ T9886] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 722.511834][ T9886] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 723.028865][T10272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 723.031422][T10272] netlink: 'syz.4.816': attribute type 10 has an invalid length. [ 723.405873][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 723.458368][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 723.459906][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 723.490725][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 723.491838][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 723.685070][T10272] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.688768][T10272] bond0: (slave team0): Enslaving as an active interface with an up link [ 725.679314][ T5629] Bluetooth: hci3: command tx timeout [ 726.238632][ T1030] bridge_slave_1: left allmulticast mode [ 726.238674][ T1030] bridge_slave_1: left promiscuous mode [ 726.239005][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.431410][ T1030] bridge_slave_0: left allmulticast mode [ 726.431454][ T1030] bridge_slave_0: left promiscuous mode [ 726.431800][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.756796][ T5629] Bluetooth: hci3: command tx timeout [ 727.967615][ T1030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.048092][ T1030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.112266][ T1030] bond0 (unregistering): Released all slaves [ 729.681133][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 729.839639][ T5629] Bluetooth: hci3: command tx timeout [ 732.526237][ T5629] Bluetooth: hci3: command tx timeout [ 732.907686][ T1030] hsr_slave_0: left promiscuous mode [ 732.947249][ T1030] hsr_slave_1: left promiscuous mode [ 732.955963][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.995339][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.808659][ T1030] team0 (unregistering): Port device team_slave_1 removed [ 734.868042][ T1030] team0 (unregistering): Port device team_slave_0 removed [ 735.094215][ T9886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.925368][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 735.980135][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 735.984328][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 735.986073][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 735.993608][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 736.143408][T10385] vlan2: entered promiscuous mode [ 736.143434][T10385] bridge0: entered promiscuous mode [ 738.187636][ T5634] Bluetooth: hci5: command tx timeout [ 740.267138][T10275] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.267505][T10275] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.267871][T10275] bridge_slave_0: entered allmulticast mode [ 740.301794][T10275] bridge_slave_0: entered promiscuous mode [ 740.556106][ T5634] Bluetooth: hci5: command tx timeout [ 740.634292][T10275] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.634723][T10275] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.635063][T10275] bridge_slave_1: entered allmulticast mode [ 740.668998][T10275] bridge_slave_1: entered promiscuous mode [ 740.923531][T10445] trusted_key: encrypted_key: key user:syz not found [ 741.255542][T10454] netlink: 64 bytes leftover after parsing attributes in process `syz.3.852'. [ 741.511268][T10275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.743814][T10275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.477789][T10275] team0: Port device team_slave_0 added [ 742.477882][T10035] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 742.509953][T10035] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 742.534128][T10275] team0: Port device team_slave_1 added [ 742.535665][T10035] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 742.556847][ T5634] Bluetooth: hci5: command tx timeout [ 742.587883][T10035] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 742.821003][T10035] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 742.870873][T10035] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 743.018264][T10035] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 743.064994][T10035] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 743.094284][T10275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.094305][T10275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.094336][T10275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.719737][T10275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.719757][T10275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.719790][T10275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 744.637644][ T5634] Bluetooth: hci5: command tx timeout [ 744.779158][T10275] hsr_slave_0: entered promiscuous mode [ 744.798747][T10275] hsr_slave_1: entered promiscuous mode [ 744.815118][T10275] debugfs: 'hsr0' already exists in 'hsr' [ 744.815150][T10275] Cannot create hsr debugfs directory [ 745.993130][T10528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.441611][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.441732][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.262865][T10390] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.277176][T10390] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.277652][T10390] bridge_slave_0: entered allmulticast mode [ 749.309995][T10390] bridge_slave_0: entered promiscuous mode [ 749.789199][T10390] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.790588][T10390] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.793993][T10390] bridge_slave_1: entered allmulticast mode [ 749.824569][T10390] bridge_slave_1: entered promiscuous mode [ 749.964418][T10390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.035887][T10390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.582510][T10390] team0: Port device team_slave_0 added [ 752.189914][T10390] team0: Port device team_slave_1 added [ 752.675465][T10390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.675486][T10390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.675519][T10390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.734497][T10390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.734515][T10390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.734537][T10390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.871210][T10035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.279544][T10390] hsr_slave_0: entered promiscuous mode [ 753.305601][T10390] hsr_slave_1: entered promiscuous mode [ 753.319409][T10390] debugfs: 'hsr0' already exists in 'hsr' [ 753.319442][T10390] Cannot create hsr debugfs directory [ 753.489159][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 753.857208][T10035] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.112214][ T3335] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.112543][ T3335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.677718][ T1030] bridge_slave_1: left allmulticast mode [ 754.677758][ T1030] bridge_slave_1: left promiscuous mode [ 754.678064][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.858813][ T1030] bridge_slave_0: left allmulticast mode [ 754.858852][ T1030] bridge_slave_0: left promiscuous mode [ 754.859182][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.281680][ T1030] bridge_slave_1: left allmulticast mode [ 755.281715][ T1030] bridge_slave_1: left promiscuous mode [ 755.281982][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.488033][ T1030] bridge_slave_0: left allmulticast mode [ 755.488062][ T1030] bridge_slave_0: left promiscuous mode [ 755.488264][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.570969][T10575] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.874'. [ 755.620624][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 755.670121][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 755.672871][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 755.698114][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 755.700769][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 757.917041][ T5629] Bluetooth: hci0: command tx timeout [ 757.967572][ T1030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.047580][ T1030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.110422][ T1030] bond0 (unregistering): Released all slaves [ 758.617733][ T1030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.697700][ T1030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.719309][ T1030] bond0 (unregistering): Released all slaves [ 759.939830][ T1030] hsr_slave_0: left promiscuous mode [ 759.982797][ T1030] hsr_slave_1: left promiscuous mode [ 759.983968][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.996948][ T5629] Bluetooth: hci0: command tx timeout [ 760.028055][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 760.626788][ T1030] hsr_slave_0: left promiscuous mode [ 760.687771][ T1030] hsr_slave_1: left promiscuous mode [ 760.689087][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 760.739768][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.687049][T10615] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 761.687049][T10615] The task syz.4.883 (10615) triggered the difference, watch for misbehavior. [ 761.773737][ T1030] team0 (unregistering): Port device team_slave_1 removed [ 761.827604][ T1030] team0 (unregistering): Port device team_slave_0 removed [ 762.077087][ T5629] Bluetooth: hci0: command tx timeout [ 762.378707][ T1030] team0 (unregistering): Port device team_slave_1 removed [ 762.427576][ T1030] team0 (unregistering): Port device team_slave_0 removed [ 764.156772][ T5629] Bluetooth: hci0: command tx timeout [ 764.359688][T10638] capability: warning: `syz.3.888' uses 32-bit capabilities (legacy support in use) [ 765.311862][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 766.799239][T10670] fuse: Bad value for 'fd' [ 766.814375][T10670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.893'. [ 770.915208][T10577] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.915544][T10577] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.915899][T10577] bridge_slave_0: entered allmulticast mode [ 770.919993][T10577] bridge_slave_0: entered promiscuous mode [ 770.945108][T10577] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.945927][T10577] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.955773][T10577] bridge_slave_1: entered allmulticast mode [ 770.990855][T10577] bridge_slave_1: entered promiscuous mode [ 771.559335][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 771.609929][T10577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.648563][T10577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.771440][T10707] 9pnet_fd: Insufficient options for proto=fd [ 772.212885][T10710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.899'. [ 772.212932][T10710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.899'. [ 772.239859][T10577] team0: Port device team_slave_0 added [ 772.255672][T10577] team0: Port device team_slave_1 added [ 772.965119][T10726] fuse: Bad value for 'fd' [ 773.105454][T10726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.902'. [ 774.059691][T10577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.059708][T10577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.059744][T10577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.135362][T10577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.135382][T10577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.135412][T10577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.290368][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.906'. [ 774.290406][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.906'. [ 774.523352][T10740] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.907'. [ 774.734355][T10577] hsr_slave_0: entered promiscuous mode [ 774.758498][T10577] hsr_slave_1: entered promiscuous mode [ 774.760461][T10577] debugfs: 'hsr0' already exists in 'hsr' [ 774.760484][T10577] Cannot create hsr debugfs directory [ 778.981682][T10761] netlink: 16 bytes leftover after parsing attributes in process `syz.4.914'. [ 780.300060][T10275] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 780.397997][T10275] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 780.419489][T10275] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 780.463977][T10275] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 780.511206][T10775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.916'. [ 780.515878][T10275] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 780.546181][T10275] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 781.104878][T10275] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 781.161293][T10275] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 782.935543][T10817] netlink: 84 bytes leftover after parsing attributes in process `syz.4.923'. [ 785.100364][T10390] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 785.178848][T10390] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 785.199793][T10390] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 785.400230][T10390] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 785.647959][T10390] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 785.694477][T10390] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 785.715340][T10390] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 785.766042][T10390] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 787.873765][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 787.909570][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 787.911539][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 787.942467][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 787.948611][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 788.566955][ T1030] bridge_slave_1: left allmulticast mode [ 788.566993][ T1030] bridge_slave_1: left promiscuous mode [ 788.567297][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.733119][ T1030] bridge_slave_0: left allmulticast mode [ 788.733156][ T1030] bridge_slave_0: left promiscuous mode [ 788.733470][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.647833][ T1030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 790.156880][ T5629] Bluetooth: hci1: command tx timeout [ 790.167565][ T1030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 790.232312][ T1030] bond0 (unregistering): Released all slaves [ 792.286743][ T5629] Bluetooth: hci1: command tx timeout [ 792.872494][ T1030] hsr_slave_0: left promiscuous mode [ 792.923427][ T1030] hsr_slave_1: left promiscuous mode [ 792.928748][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.966509][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.777662][ T1030] team0 (unregistering): Port device team_slave_1 removed [ 793.837948][ T1030] team0 (unregistering): Port device team_slave_0 removed [ 795.335413][ T5629] Bluetooth: hci1: command tx timeout [ 795.522890][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 797.356727][ T5629] Bluetooth: hci1: command tx timeout [ 797.534307][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 797.568939][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 797.571907][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 797.573115][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 797.575186][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 797.828569][T10955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.941'. [ 797.828638][T10955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.941'. [ 797.937412][ T37] kauditd_printk_skb: 29 callbacks suppressed [ 797.937432][ T37] audit: type=1326 audit(1780388178.722:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10950 comm="syz.3.941" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d715ce59 code=0x7ffc0000 [ 797.937482][ T37] audit: type=1326 audit(1780388178.722:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10950 comm="syz.3.941" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d715ce59 code=0x7ffc0000 [ 797.940604][ T37] audit: type=1326 audit(1780388178.722:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10950 comm="syz.3.941" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d715ce59 code=0x7ffc0000 [ 797.943209][ T37] audit: type=1326 audit(1780388178.722:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10950 comm="syz.3.941" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d715ce59 code=0x7ffc0000 [ 797.943409][ T37] audit: type=1326 audit(1780388178.722:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10950 comm="syz.3.941" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d715ce59 code=0x7ffc0000 [ 797.945102][ T37] audit: type=1326 audit(1780388178.722:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10950 comm="syz.3.941" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f23d715ce59 code=0x7ffc0000 [ 797.945415][ T37] audit: type=1326 audit(1780388178.722:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10950 comm="syz.3.941" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d715ce59 code=0x7ffc0000 [ 797.945581][ T37] audit: type=1326 audit(1780388178.722:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10950 comm="syz.3.941" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d715ce59 code=0x7ffc0000 [ 797.945876][ T37] audit: type=1326 audit(1780388178.722:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10950 comm="syz.3.941" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d715ce59 code=0x7ffc0000 [ 798.197533][ T37] audit: type=1326 audit(1780388178.982:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10950 comm="syz.3.941" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d715ce59 code=0x7ffc0000 [ 798.807173][T10577] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 799.274923][T10577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 799.352700][T10577] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 799.423557][T10577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 799.550617][T10577] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 799.599100][T10577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 800.775049][ T5629] Bluetooth: hci3: command tx timeout [ 800.920579][T10985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.947'. [ 801.362100][T10577] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 801.438724][T10577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 803.225083][ T5629] Bluetooth: hci3: command tx timeout [ 803.516517][T10846] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.518442][T10846] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.519541][T10846] bridge_slave_0: entered allmulticast mode [ 803.533338][T10846] bridge_slave_0: entered promiscuous mode [ 804.122414][T10846] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.122826][T10846] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.123062][T10846] bridge_slave_1: entered allmulticast mode [ 804.125783][T10846] bridge_slave_1: entered promiscuous mode [ 804.464879][T10846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.523742][T10846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.001554][T10846] team0: Port device team_slave_0 added [ 805.029433][T10846] team0: Port device team_slave_1 added [ 805.242511][T10846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.242530][T10846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.242561][T10846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.279323][ T5629] Bluetooth: hci3: command tx timeout [ 805.389832][T10846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.389851][T10846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.389883][T10846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.905153][T11033] IPv6: NLM_F_REPLACE set, but no existing node found! [ 807.359883][ T5629] Bluetooth: hci3: command tx timeout [ 807.637931][T10846] hsr_slave_0: entered promiscuous mode [ 807.643577][T10846] hsr_slave_1: entered promiscuous mode [ 807.659363][T10846] debugfs: 'hsr0' already exists in 'hsr' [ 807.659393][T10846] Cannot create hsr debugfs directory [ 808.734910][T11051] overlayfs: failed to clone upperpath [ 808.883633][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.883764][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.476054][T10948] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.476401][T10948] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.494009][T10948] bridge_slave_0: entered allmulticast mode [ 810.517542][T10948] bridge_slave_0: entered promiscuous mode [ 810.546949][T10948] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.548984][T10948] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.549331][T10948] bridge_slave_1: entered allmulticast mode [ 810.581540][T10948] bridge_slave_1: entered promiscuous mode [ 812.659090][T10948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.729158][T10577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.755848][T10948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 813.563776][T10948] team0: Port device team_slave_0 added [ 813.580946][T10948] team0: Port device team_slave_1 added [ 813.610813][T11089] overlayfs: failed to clone upperpath [ 813.669216][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 813.891810][T10948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.891828][T10948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.891857][T10948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.972460][T10948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.972474][T10948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.972496][T10948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.038157][T10577] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.177419][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.177594][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.709156][T10948] hsr_slave_0: entered promiscuous mode [ 814.723335][T10948] hsr_slave_1: entered promiscuous mode [ 814.737638][T10948] debugfs: 'hsr0' already exists in 'hsr' [ 814.737661][T10948] Cannot create hsr debugfs directory [ 814.821943][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.822061][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.887017][ T1030] bridge_slave_1: left allmulticast mode [ 815.887057][ T1030] bridge_slave_1: left promiscuous mode [ 815.887357][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.068729][ T1030] bridge_slave_0: left allmulticast mode [ 816.068768][ T1030] bridge_slave_0: left promiscuous mode [ 816.069103][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.447055][ T1030] bridge_slave_1: left allmulticast mode [ 816.447092][ T1030] bridge_slave_1: left promiscuous mode [ 816.524828][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.680025][ T1030] bridge_slave_0: left allmulticast mode [ 816.680064][ T1030] bridge_slave_0: left promiscuous mode [ 816.680359][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.923020][ T5634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 816.974068][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 816.985301][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 816.994341][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 817.016983][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 818.047555][ T1030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 818.167576][ T1030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 818.248829][ T1030] bond0 (unregistering): Released all slaves [ 818.768033][ T1030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 818.924079][ T1030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 819.006321][ T1030] bond0 (unregistering): Released all slaves [ 819.196827][ T5629] Bluetooth: hci0: command tx timeout [ 820.998991][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 821.132867][T11137] overlayfs: failed to clone upperpath [ 821.276906][ T5629] Bluetooth: hci0: command tx timeout [ 821.707112][T11144] sctp: [Deprecated]: syz.3.984 (pid 11144) Use of struct sctp_assoc_value in delayed_ack socket option. [ 821.707112][T11144] Use struct sctp_sack_info instead [ 821.712591][ T5629] Bluetooth: Frame is too long (len 16, expected len 4) [ 822.471106][T11158] overlayfs: failed to clone lowerpath [ 823.006877][ T1030] hsr_slave_0: left promiscuous mode [ 823.049788][ T1030] hsr_slave_1: left promiscuous mode [ 823.052851][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.112149][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.339061][ T1030] hsr_slave_0: left promiscuous mode [ 823.356813][ T5629] Bluetooth: hci0: command tx timeout [ 823.377021][ T1030] hsr_slave_1: left promiscuous mode [ 823.378162][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.419375][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.289369][ T5629] Bluetooth: hci0: command tx timeout [ 826.362342][ T1030] team0 (unregistering): Port device team_slave_1 removed [ 826.450793][ T1030] team0 (unregistering): Port device team_slave_0 removed [ 827.948835][ T1030] team0 (unregistering): Port device team_slave_1 removed [ 827.977131][ T1030] team0 (unregistering): Port device team_slave_0 removed [ 828.279541][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 828.280975][T11194] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 830.902756][T11252] ================================================================== [ 830.902846][T11252] BUG: KASAN: slab-use-after-free in reverse_path_check_proc+0x5b/0x240 [ 830.902931][T11252] Read of size 8 at addr ffff88803935ed00 by task syz.4.1005/11252 [ 830.902950][T11252] [ 830.902973][T11252] CPU: 1 UID: 0 PID: 11252 Comm: syz.4.1005 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 830.903003][T11252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 830.903025][T11252] Call Trace: [ 830.903067][T11252] [ 830.903124][T11252] dump_stack_lvl+0xe8/0x150 [ 830.903201][T11252] print_address_description+0x55/0x1e0 [ 830.903229][T11252] ? reverse_path_check_proc+0x5b/0x240 [ 830.903274][T11252] print_report+0x58/0x70 [ 830.903300][T11252] kasan_report+0x117/0x150 [ 830.903329][T11252] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 830.903370][T11252] ? reverse_path_check_proc+0x5b/0x240 [ 830.903395][T11252] ? ep_insert+0xbbb/0x1820 [ 830.903427][T11252] reverse_path_check_proc+0x5b/0x240 [ 830.903452][T11252] ? ep_insert+0xbbb/0x1820 [ 830.903483][T11252] ep_insert+0xc6c/0x1820 [ 830.903521][T11252] ? __pfx_ep_insert+0x10/0x10 [ 830.903560][T11252] ? lockdep_hardirqs_on+0x7a/0x110 [ 830.903581][T11252] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 830.903617][T11252] ? mutex_lock_nested+0x152/0x1d0 [ 830.903657][T11252] ? do_epoll_ctl_file+0xc69/0xed0 [ 830.903694][T11252] do_epoll_ctl_file+0x8bb/0xed0 [ 830.903726][T11252] ? do_epoll_ctl_file+0xac3/0xed0 [ 830.903755][T11252] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 830.903786][T11252] ? __fget_files+0x3a6/0x420 [ 830.903813][T11252] ? __fget_files+0x2a/0x420 [ 830.903843][T11252] __se_sys_epoll_ctl+0x14e/0x210 [ 830.903877][T11252] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 830.903912][T11252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.903934][T11252] do_syscall_64+0x174/0x580 [ 830.903956][T11252] ? trace_irq_disable+0x3b/0x140 [ 830.903982][T11252] ? clear_bhb_loop+0x40/0x90 [ 830.904008][T11252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.904028][T11252] RIP: 0033:0x7f816cd2ce59 [ 830.904100][T11252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.904121][T11252] RSP: 002b:00007f816af5d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 830.904175][T11252] RAX: ffffffffffffffda RBX: 00007f816cfa6090 RCX: 00007f816cd2ce59 [ 830.904191][T11252] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 830.904207][T11252] RBP: 00007f816cdc2d6f R08: 0000000000000000 R09: 0000000000000000 [ 830.904222][T11252] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 830.904237][T11252] R13: 00007f816cfa6128 R14: 00007f816cfa6090 R15: 00007ffec968c118 [ 830.904264][T11252] [ 830.904272][T11252] [ 830.904278][T11252] Allocated by task 11248: [ 830.904319][T11252] kasan_save_track+0x3e/0x80 [ 830.904346][T11252] __kasan_slab_alloc+0x6c/0x80 [ 830.904372][T11252] kmem_cache_alloc_noprof+0x33b/0x680 [ 830.904400][T11252] ep_insert+0x512/0x1820 [ 830.904429][T11252] do_epoll_ctl_file+0x8bb/0xed0 [ 830.904456][T11252] __se_sys_epoll_ctl+0x14e/0x210 [ 830.904485][T11252] do_syscall_64+0x174/0x580 [ 830.904505][T11252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.904524][T11252] [ 830.904530][T11252] Freed by task 11248: [ 830.904540][T11252] kasan_save_track+0x3e/0x80 [ 830.904565][T11252] kasan_save_free_info+0x46/0x50 [ 830.904587][T11252] __kasan_slab_free+0x5c/0x80 [ 830.904614][T11252] kmem_cache_free+0x187/0x6c0 [ 830.904653][T11252] eventpoll_release_file+0xc2/0x240 [ 830.904682][T11252] __fput+0x83c/0xa70 [ 830.904706][T11252] task_work_run+0x1d9/0x270 [ 830.904733][T11252] exit_to_user_mode_loop+0x193/0x680 [ 830.904761][T11252] do_syscall_64+0x353/0x580 [ 830.904780][T11252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.904800][T11252] [ 830.904805][T11252] The buggy address belongs to the object at ffff88803935ed00 [ 830.904805][T11252] which belongs to the cache ep_head of size 16 [ 830.904825][T11252] The buggy address is located 0 bytes inside of [ 830.904825][T11252] freed 16-byte region [ffff88803935ed00, ffff88803935ed10) [ 830.904849][T11252] [ 830.904854][T11252] The buggy address belongs to the physical page: [ 830.904909][T11252] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803935eea0 pfn:0x3935e [ 830.904931][T11252] memcg:ffff888035d86001 [ 830.904942][T11252] flags: 0x80000000000200(workingset|node=0|zone=1) [ 830.904967][T11252] page_type: f5(slab) [ 830.904987][T11252] raw: 0080000000000200 ffff888140423dc0 ffffea0000d40610 ffffea0000a69d10 [ 830.905009][T11252] raw: ffff88803935eea0 0000000800800016 00000000f5000000 ffff888035d86001 [ 830.905021][T11252] page dumped because: kasan: bad access detected [ 830.905037][T11252] page_owner tracks the page as allocated [ 830.905045][T11252] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4986, tgid 4986 (udevd), ts 50882911360, free_ts 50572265457 [ 830.905084][T11252] post_alloc_hook+0x1f9/0x250 [ 830.905110][T11252] get_page_from_freelist+0x265c/0x26e0 [ 830.905140][T11252] __alloc_frozen_pages_noprof+0x18d/0x380 [ 830.905169][T11252] allocate_slab+0x74/0x5e0 [ 830.905186][T11252] refill_objects+0x33c/0x3d0 [ 830.905205][T11252] __pcs_replace_empty_main+0x373/0x720 [ 830.905227][T11252] kmem_cache_alloc_noprof+0x433/0x680 [ 830.905252][T11252] ep_insert+0x512/0x1820 [ 830.905282][T11252] do_epoll_ctl_file+0x8bb/0xed0 [ 830.905312][T11252] __se_sys_epoll_ctl+0x14e/0x210 [ 830.905344][T11252] do_syscall_64+0x174/0x580 [ 830.905364][T11252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.905385][T11252] page last free pid 4981 tgid 4981 stack trace: [ 830.905400][T11252] __free_frozen_pages+0x10af/0x1190 [ 830.905427][T11252] __slab_free+0x252/0x2a0 [ 830.905455][T11252] qlist_free_all+0x99/0x100 [ 830.905478][T11252] kasan_quarantine_reduce+0x148/0x160 [ 830.905505][T11252] __kasan_slab_alloc+0x22/0x80 [ 830.905531][T11252] kmem_cache_alloc_noprof+0x33b/0x680 [ 830.905559][T11252] do_getname+0x2e/0x250 [ 830.905582][T11252] do_readlinkat+0xc8/0x510 [ 830.905610][T11252] __x64_sys_readlink+0x7f/0x90 [ 830.905645][T11252] do_syscall_64+0x174/0x580 [ 830.905666][T11252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.905687][T11252] [ 830.905694][T11252] Memory state around the buggy address: [ 830.905745][T11252] ffff88803935ec00: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 830.905763][T11252] ffff88803935ec80: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 830.905779][T11252] >ffff88803935ed00: fa fb fc fc 00 00 fc fc 00 00 fc fc fa fb fc fc [ 830.905792][T11252] ^ [ 830.905804][T11252] ffff88803935ed80: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 830.905818][T11252] ffff88803935ee00: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 830.905830][T11252] ================================================================== [ 830.905920][T11252] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 830.905945][T11252] CPU: 1 UID: 0 PID: 11252 Comm: syz.4.1005 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 830.905973][T11252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 830.905988][T11252] Call Trace: [ 830.905997][T11252] [ 830.906007][T11252] vpanic+0x56c/0xa60 [ 830.906045][T11252] ? __pfx_vpanic+0x10/0x10 [ 830.906083][T11252] panic+0xc5/0xd0 [ 830.906115][T11252] ? __pfx_panic+0x10/0x10 [ 830.906148][T11252] ? preempt_schedule_thunk+0x16/0x40 [ 830.906176][T11252] ? preempt_schedule_thunk+0x16/0x40 [ 830.906202][T11252] ? reverse_path_check_proc+0x5b/0x240 [ 830.906226][T11252] check_panic_on_warn+0x89/0xb0 [ 830.906257][T11252] ? reverse_path_check_proc+0x5b/0x240 [ 830.906280][T11252] end_report+0x73/0x170 [ 830.906313][T11252] ? reverse_path_check_proc+0x5b/0x240 [ 830.906336][T11252] kasan_report+0x128/0x150 [ 830.906367][T11252] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 830.906407][T11252] ? reverse_path_check_proc+0x5b/0x240 [ 830.906433][T11252] ? ep_insert+0xbbb/0x1820 [ 830.906466][T11252] reverse_path_check_proc+0x5b/0x240 [ 830.906493][T11252] ? ep_insert+0xbbb/0x1820 [ 830.906526][T11252] ep_insert+0xc6c/0x1820 [ 830.906568][T11252] ? __pfx_ep_insert+0x10/0x10 [ 830.906610][T11252] ? lockdep_hardirqs_on+0x7a/0x110 [ 830.906640][T11252] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 830.906677][T11252] ? mutex_lock_nested+0x152/0x1d0 [ 830.906706][T11252] ? do_epoll_ctl_file+0xc69/0xed0 [ 830.906743][T11252] do_epoll_ctl_file+0x8bb/0xed0 [ 830.906780][T11252] ? do_epoll_ctl_file+0xac3/0xed0 [ 830.906817][T11252] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 830.906853][T11252] ? __fget_files+0x3a6/0x420 [ 830.906882][T11252] ? __fget_files+0x2a/0x420 [ 830.906917][T11252] __se_sys_epoll_ctl+0x14e/0x210 [ 830.906953][T11252] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 830.906994][T11252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.907020][T11252] do_syscall_64+0x174/0x580 [ 830.907041][T11252] ? trace_irq_disable+0x3b/0x140 [ 830.907071][T11252] ? clear_bhb_loop+0x40/0x90 [ 830.907098][T11252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.907122][T11252] RIP: 0033:0x7f816cd2ce59 [ 830.907143][T11252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.907164][T11252] RSP: 002b:00007f816af5d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 830.907190][T11252] RAX: ffffffffffffffda RBX: 00007f816cfa6090 RCX: 00007f816cd2ce59 [ 830.907208][T11252] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 830.907223][T11252] RBP: 00007f816cdc2d6f R08: 0000000000000000 R09: 0000000000000000 [ 830.907238][T11252] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 830.907254][T11252] R13: 00007f816cfa6128 R14: 00007f816cfa6090 R15: 00007ffec968c118 [ 830.907282][T11252] [ 830.907906][T11252] Kernel Offset: disabled