last executing test programs: 2.724941529s ago: executing program 0 (id=5412): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000180), 0xa7c, r0}, 0x38) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000180)={0x1d, r2}, 0x10) sendmmsg$sock(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="0100000003000000640000000000008000000000000000000000000000000000000000000000000020a107000000000002000000010000000200000001000015b600000000000000", 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="0100000003000000640000f9ffffffffffffff00000000000000000000000000000000000000000000000000000000000200000001000000", 0x48}, {0x0}, {&(0x7f0000000480)="3c288d8b3b7d97f8c475ed07c88ca0836243c44dddf9e0f57bfa33a44b9d48f76902f42fc722f03e6dd8ce26c87191adc51558ec6f6c4d9098317c377d4fa22032bc971b1f810292053dcf6ac06c8903c5", 0x50}], 0x3}}], 0x2, 0x20004090) 2.557762456s ago: executing program 0 (id=5415): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x4, 0x3, 0x2, 0x40}, 0x2c, 0x0, 0x5, 0xb, 0x8001, 0x1, 0x12, 0xe, 0x5, 0x7db8, {0x1, 0x8, 0xffff, 0x80, 0xffffffff, 0xd7d}}}}]}, 0x78}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 2.345841378s ago: executing program 0 (id=5419): preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/225, 0xe1}], 0x1, 0x7, 0x20000000) 2.13228107s ago: executing program 0 (id=5423): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./bus\x00', 0x14552, &(0x7f0000000280)=ANY=[], 0x7b, 0x1207, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002f80)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000002fc0)=ANY=[], 0x32600) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x44000, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file2\x00', 0x181341, 0x0) fallocate(r1, 0x1, 0x1, 0x2000404) 1.917155482s ago: executing program 4 (id=5427): process_madvise(0xffffffffffffffff, &(0x7f0000001540)=[{0xffffffffffffffff}], 0x22, 0x0, 0x0) 1.915876292s ago: executing program 1 (id=5428): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="12", 0x1}], 0x1}, 0x1) recvfrom$inet(r0, &(0x7f0000000500)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 1.764925448s ago: executing program 4 (id=5430): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0xc0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000080)={0x3, 'batadv0\x00', {0x7f}, 0x2}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3400000011000500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300626174616476300000000000"], 0x34}}, 0x0) 1.717564863s ago: executing program 1 (id=5431): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 1.660424919s ago: executing program 2 (id=5432): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000009c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000a00)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000a80)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008006411ff20010000000000000000000000000002ff0500000000000000000000000000014f194e20"], 0x9e) 1.594468285s ago: executing program 4 (id=5433): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8042) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x884) 1.45491237s ago: executing program 3 (id=5434): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000580)={0x9, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000005c0)=r2, 0x4) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 1.316456354s ago: executing program 2 (id=5435): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002e00)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002f80)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0x10000, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94}, 0x24040084) 1.316227184s ago: executing program 3 (id=5436): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000180), 0xa7c, r0}, 0x38) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000180)={0x1d, r2}, 0x10) sendmmsg$sock(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="0100000003000000640000000000008000000000000000000000000000000000000000000000000020a107000000000002000000010000000200000001000015b600000000000000", 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="0100000003000000640000f9ffffffffffffff00000000000000000000000000000000000000000000000000000000000200000001000000", 0x48}, {0x0}, {&(0x7f0000000480)="3c288d8b3b7d97f8c475ed07c88ca0836243c44dddf9e0f57bfa33a44b9d48f76902f42fc722f03e6dd8ce26c87191adc51558ec6f6c4d9098317c377d4fa22032bc971b1f810292053dcf6ac06c8903c5", 0x50}], 0x3}}], 0x2, 0x20004090) 1.232692783s ago: executing program 1 (id=5437): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61122400000000006113340000000000bf10000000000000150002000000f0ff3d030100000000008701000000000000bc26000000000000bf67000000000000560300000ee600f0670200000f00000014030000e433fe1fbf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c785fb77dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25f40c87bf25b750bbaa"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x17, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000066090100000003e71600000006000000180100002020702500000000002020207b9af8ff000000007e9000000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f00000001c0)) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x61) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.232503803s ago: executing program 0 (id=5438): write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='270', 0x3) syz_open_dev$loop(0x0, 0x6, 0x14f882) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) unshare(0x40000000) 827.045145ms ago: executing program 3 (id=5439): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000004c0), 0x56) sendmsg$kcm(r2, &(0x7f0000000500)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r1, 0x42}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000600)="27030200dc0f14000e0000000025c1020000ff11125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f0000000640)="02db0b9ef1cafdab", 0xdd86}], 0x2}, 0x4005) 719.533886ms ago: executing program 2 (id=5440): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000004080)={0xa, 0x4e20, 0xffffefff, @mcast2, 0x4}, 0x1c) sendmsg$inet(r0, &(0x7f0000006d00)={&(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10, 0x0}, 0x4800) 719.301346ms ago: executing program 3 (id=5441): openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000000c0)=0x1) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000240)="69ad52", 0x3}, {0x0}], 0x2) 717.642156ms ago: executing program 1 (id=5442): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80c80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbf, {0x0, 0x0, 0x0, r4, {0x5, 0xffe0}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2000, 0x7, 0x2}, {{0x1, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x5}, {0x9, 0x0, 0x7, 0x2, 0x5, 0x1, 0x1}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045081}, 0x20004004) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x3f}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000440)='[', 0x1}], 0x1}, 0x5) 585.68717ms ago: executing program 3 (id=5443): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0xc0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000080)={0x3, 'batadv0\x00', {0x7f}, 0x2}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3400000011000500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300626174616476300000000000"], 0x34}}, 0x0) 585.41387ms ago: executing program 2 (id=5444): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "8dc30000000f00", "de2c6342f55741179ae094f4e89b87ac", "880365be", "b514b8484e63a491"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8f", 0x84}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c756", 0x8c}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f8", 0xb}, {&(0x7f00000014c0)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c7", 0x9c}], 0x5) 523.354806ms ago: executing program 3 (id=5445): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c00)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c40)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000c80)='./proc\x00', &(0x7f0000000cc0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r1, &(0x7f0000000d40)='7', 0x1) fcntl$lock(r0, 0x26, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000d80)={0x1, 0x2, 0x2, 0xf34}) 488.598999ms ago: executing program 4 (id=5446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000a00)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000a80)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008006411ff20010000000000000000000000000002ff0500000000000000000000000000014f194e20"], 0x9e) 436.309595ms ago: executing program 1 (id=5447): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040098) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x1, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, &(0x7f0000000380)='0', 0x1, 0x40000, &(0x7f00000003c0)={0x11, 0x6, r2, 0x1, 0x2, 0x6, @local}, 0x14) 390.568019ms ago: executing program 0 (id=5448): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 127.297037ms ago: executing program 4 (id=5449): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x0, 0xa7c, r0}, 0x38) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000180)={0x1d, r2}, 0x10) sendmmsg$sock(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="0100000003000000640000000000008000000000000000000000000000000000000000000000000020a107000000000002000000010000000200000001000015b600000000000000", 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="0100000003000000640000f9ffffffffffffff00000000000000000000000000000000000000000000000000000000000200000001000000", 0x48}, {0x0}, {&(0x7f0000000480)="3c288d8b3b7d97f8c475ed07c88ca0836243c44dddf9e0f57bfa33a44b9d48f76902f42fc722f03e6dd8ce26c87191adc51558ec6f6c4d9098317c377d4fa22032bc971b1f810292053dcf6ac06c8903c5", 0x50}], 0x3}}], 0x2, 0x20004090) 110.699008ms ago: executing program 2 (id=5450): r0 = shmat(0x0, &(0x7f000080d000/0x1000)=nil, 0x6000) shmdt(r0) 70.774562ms ago: executing program 4 (id=5451): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x1008c10, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r0, &(0x7f0000000000)="ff", 0x58200, 0xfb2200) 153.83µs ago: executing program 1 (id=5452): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000004c0), 0x56) sendmsg$kcm(r2, &(0x7f0000000500)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r1, 0x42}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000600)="27030200dc0f14000e0000000025c1020000ff11125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f0000000640)="02db0b9ef1cafdab", 0xdd86}], 0x2}, 0x4005) 0s ago: executing program 2 (id=5453): openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000000c0)=0x1) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000240)="69ad52", 0x3}, {0x0}], 0x2) kernel console output (not intermixed with test programs): p mac addresses unique to avoid problems! [ 348.734344][T11828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.759614][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 348.769276][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 348.786029][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 348.812039][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 348.852618][T11828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.888026][T11828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.897908][T11828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.948005][T11828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.968472][T11828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.000271][T11828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.018558][ T4277] Bluetooth: hci4: command 0x0419 tx timeout [ 349.033510][T11828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.115643][T11828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.147363][T11828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.167795][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 349.188862][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 349.224074][T11828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.246980][T11828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.276064][T11828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.306696][T11828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.412924][T12109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3026'. [ 350.583827][T12115] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3027'. [ 350.618843][ T4647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.645581][ T4647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.670480][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 350.737010][ T4364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.752438][ T4364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.772819][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 350.934721][T12131] netlink: 'syz.0.3033': attribute type 17 has an invalid length. [ 351.279777][ T4284] Bluetooth: hci5: unexpected cc 0x2003 length: 8 < 9 [ 351.287245][ T4284] Bluetooth: hci5: unexpected cc 0x2060 length: 3 < 7 [ 351.799152][T12166] netlink: 'syz.0.3047': attribute type 17 has an invalid length. [ 351.924014][T12174] netlink: 296 bytes leftover after parsing attributes in process `syz.0.3050'. [ 352.205820][T12179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3052'. [ 353.192235][T12192] device ip6gre1 entered promiscuous mode [ 354.269915][T12199] netlink: 'syz.2.3061': attribute type 1 has an invalid length. [ 354.339067][T12199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 354.690519][T12226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3070'. [ 355.262284][T12247] netlink: 'syz.1.3078': attribute type 1 has an invalid length. [ 355.288912][T12247] 8021q: adding VLAN 0 to HW filter on device bond1 [ 355.304497][T12245] pimreg0: tun_chr_ioctl cmd 1074025677 [ 355.318356][T12245] pimreg0: linktype set to 776 [ 355.326127][T12245] pimreg0: tun_chr_ioctl cmd 35108 [ 356.825891][T12256] ip_tables: iptables: counters copy to user failed while replacing table [ 356.946382][T12260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3084'. [ 357.418864][T12285] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3095'. [ 358.562622][T12298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3099'. [ 358.729698][T12301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3100'. [ 360.494907][T12333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3115'. [ 360.548985][T12336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3114'. [ 363.376584][T12362] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3126'. [ 363.728267][T12377] ksmbd: Unknown IPC event: 4, ignore. [ 363.786195][T12367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3127'. [ 363.812707][T12373] netlink: 'syz.4.3130': attribute type 1 has an invalid length. [ 363.894269][T12373] 8021q: adding VLAN 0 to HW filter on device bond2 [ 363.942526][T12376] bond2: (slave veth0_to_bond): making interface the new active one [ 363.960482][T12376] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 363.975481][T12378] device macvlan2 entered promiscuous mode [ 363.986888][T12378] device bond2 entered promiscuous mode [ 363.993672][T12378] device veth0_to_bond entered promiscuous mode [ 364.001203][T12378] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 364.011615][T12378] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 364.030106][T12378] device bond2 left promiscuous mode [ 364.036229][T12378] device veth0_to_bond left promiscuous mode [ 364.075814][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 364.095811][T12385] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3133'. [ 364.121269][T12386] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3133'. [ 364.188729][T12390] ip_tables: iptables: counters copy to user failed while replacing table [ 364.433249][T12405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3142'. [ 365.374176][T12442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3155'. [ 365.514341][T12450] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 365.543261][T12450] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 365.595804][ T4284] Bluetooth: hci0: unexpected cc 0x2003 length: 8 < 9 [ 365.607257][ T4284] Bluetooth: hci0: unexpected cc 0x2060 length: 3 < 7 [ 365.901897][T12458] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3162'. [ 366.215811][T12475] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3168'. [ 366.320471][T12481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3169'. [ 366.590313][ T4284] Bluetooth: hci1: unexpected cc 0x2003 length: 8 < 9 [ 366.599793][ T4284] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 367.975542][ T4284] Bluetooth: hci5: unexpected cc 0x2003 length: 8 < 9 [ 367.984833][ T4284] Bluetooth: hci5: unexpected cc 0x2060 length: 3 < 7 [ 368.234837][T12555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3190'. [ 369.152171][T12598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3202'. [ 370.324074][T12644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3217'. [ 370.660475][T12659] device ip6gre1 entered promiscuous mode [ 371.313455][T12696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3233'. [ 372.444019][T12744] ip_tables: iptables: counters copy to user failed while replacing table [ 372.861186][T12765] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3254'. [ 373.164423][T12777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.216417][T12777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.246933][T12777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.264232][T12784] ip_tables: iptables: counters copy to user failed while replacing table [ 373.284200][T12777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.295582][T12777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.319554][T12777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.333178][T12777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.345755][T12777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.358282][T12777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.372490][T12777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.385541][T12777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.417072][T12777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.434247][T12777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.444869][T12777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.454895][T12777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.465418][T12777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.481837][T12777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.507198][T12777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.517371][T12777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.534822][T12777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.922767][T12807] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3270'. [ 374.798847][T12840] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3279'. [ 374.985326][T12844] ip_tables: iptables: counters copy to user failed while replacing table [ 375.270020][T12849] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 375.324354][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 375.326157][T12849] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 375.341151][T12849] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 375.349177][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 375.368257][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 375.376550][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 375.384577][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 375.392789][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 375.532406][T12849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.563862][T12849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.608003][T12849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.624758][T12849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.634850][T12849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.654167][T12849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.670893][T12849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.682235][T12849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.694725][T12849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.706780][T12849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.738129][T12849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.765950][T12849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.775997][T12849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.787065][T12849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.797454][T12849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.808200][T12849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.989133][T12863] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3285'. [ 376.083178][T12853] rxe_eth0 speed is unknown, defaulting to 1000 [ 376.374708][T12886] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3290'. [ 376.919872][T12905] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3297'. [ 376.937584][T12853] chnl_net:caif_netlink_parms(): no params data found [ 377.206043][T12917] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 377.243916][T12917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 377.257027][T12917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 377.285730][T12917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.312534][T12917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.328651][T12917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.341355][T12917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.351451][T12917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.365530][T12917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.376283][T12917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.387016][T12917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.416643][T12917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.428030][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 377.457582][T12917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.479420][T12917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.500885][T12917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.524720][T12917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.564364][T12917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.607142][T12917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.625427][T12917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.792429][T12935] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3303'. [ 377.840098][T12853] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.874399][T12853] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.892966][T12853] device bridge_slave_0 entered promiscuous mode [ 378.012708][T12853] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.037883][T12853] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.069238][T12853] device bridge_slave_1 entered promiscuous mode [ 378.130571][T12948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3306'. [ 378.222044][T12952] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3308'. [ 378.349893][T12853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.400765][T12853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.480290][ T4277] Bluetooth: hci1: unexpected cc 0x2003 length: 8 < 9 [ 378.481108][T12968] Bluetooth: MGMT ver 1.22 [ 378.487495][ T4277] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 378.561457][T12853] team0: Port device team_slave_0 added [ 378.571934][T12853] team0: Port device team_slave_1 added [ 378.605492][T12853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.642855][T12853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.703179][T12853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.720184][T12853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.727272][T12853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.765721][T12853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.823645][T12977] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 378.853885][T12977] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 378.870570][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.873776][T12977] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 378.876942][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.954230][T12977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.975655][T12977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.997042][T12977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.008448][T12977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.027825][T12977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.058155][T12977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.078078][T12977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.098576][T12977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.114811][T12977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.131287][T12977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.145590][T12977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.156554][T12977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.166689][T12977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.177315][T12977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.187560][T12977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.205942][T12977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.281404][T12979] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3315'. [ 379.498808][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 379.604975][T13000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3320'. [ 379.701696][T12853] device hsr_slave_0 entered promiscuous mode [ 379.743706][T12853] device hsr_slave_1 entered promiscuous mode [ 379.758771][T12853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.782839][T12853] Cannot create hsr debugfs directory [ 379.874235][T13010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3324'. [ 380.071883][ T4277] Bluetooth: hci4: unexpected cc 0x2003 length: 8 < 9 [ 380.079016][ T4277] Bluetooth: hci4: unexpected cc 0x2060 length: 3 < 7 [ 380.275220][T13025] netlink: 'syz.0.3328': attribute type 1 has an invalid length. [ 380.396892][T13025] 8021q: adding VLAN 0 to HW filter on device bond2 [ 380.513955][ T4467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.559365][ T4467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.127589][ T4467] bond2 (unregistering): Released all slaves [ 381.343656][ T4467] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 381.353483][ T4467] bond1 (unregistering): Released all slaves [ 381.580860][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 381.908720][ T4467] team0 (unregistering): Port device team_slave_1 removed [ 381.957907][ T4467] team0 (unregistering): Port device team_slave_0 removed [ 382.006881][ T4467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.055451][ T4467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.425344][ T4467] bond0 (unregistering): Released all slaves [ 382.858508][T13066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3337'. [ 382.936823][T13070] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 382.987047][T13070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 383.037041][T13070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 383.112964][T13070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.129655][T13070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.188580][T13070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.229984][T13070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.258430][T13070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.276462][T13070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.296645][T13070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.328014][T13070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.389500][T13070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.457827][T13070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.497823][T13070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.524158][T13070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.534327][T13070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.545544][T13070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.563742][T13070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.577652][T13070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.658172][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 385.739446][T13104] netlink: 'syz.4.3347': attribute type 1 has an invalid length. [ 385.803257][T13105] bond2: (slave veth0_to_bond): Releasing active interface [ 386.250591][T13125] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3355'. [ 386.465679][T13132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3358'. [ 386.512781][T12853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 386.549196][T12853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 386.615133][T12853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 387.110500][T12853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 389.496388][T12853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.551282][T13172] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3369'. [ 389.602740][T12853] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.641308][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 389.651538][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 389.708379][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 389.735506][ T4277] Bluetooth: hci1: unexpected cc 0x2003 length: 8 < 9 [ 389.742689][ T4277] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 389.752963][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 389.841119][ T4470] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.848323][ T4470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.908250][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 389.945113][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 389.964163][ T4470] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.971370][ T4470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.008539][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 390.059263][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 390.110863][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 390.140290][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 390.178999][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 390.219031][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 390.237437][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 390.271156][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 390.330605][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 390.377568][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 390.407185][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 390.450494][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 390.491746][T12853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 391.475228][ T4277] Bluetooth: hci1: unexpected cc 0x2003 length: 8 < 9 [ 391.482333][ T4277] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 393.027422][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 393.046211][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 393.122841][T12853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.191357][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 393.228981][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 393.298038][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 393.325202][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 393.353523][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 393.388837][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 393.415800][T12853] device veth0_vlan entered promiscuous mode [ 393.456101][T12853] device veth1_vlan entered promiscuous mode [ 393.515445][T13248] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 393.566597][T13248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 393.592393][T13248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 393.670424][T13248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.681911][T13248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.693751][T13248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.705191][T13248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.715670][T13248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.735634][T13248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.748812][T13248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.768076][T13248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.800828][T13248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.836749][T13248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.858068][T13248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.878192][T13248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.898640][T13248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.922809][T13248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.945246][ T4277] Bluetooth: hci2: unexpected cc 0x2003 length: 8 < 9 [ 393.957783][ T4277] Bluetooth: hci2: unexpected cc 0x2060 length: 3 < 7 [ 393.965664][T13248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.010683][T13248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.185098][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 394.210364][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 394.287450][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 394.303132][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 394.353668][T12853] device veth0_macvtap entered promiscuous mode [ 394.411564][T12853] device veth1_macvtap entered promiscuous mode [ 394.518624][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.557665][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.595297][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.626853][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.643556][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.678829][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.706758][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.730942][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.766368][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.786744][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.815459][T12853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.828221][T13281] netlink: 'syz.0.3402': attribute type 1 has an invalid length. [ 394.875565][T13281] 8021q: adding VLAN 0 to HW filter on device bond3 [ 394.892892][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 394.910107][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 394.918828][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 394.960580][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 395.280043][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.316895][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.358119][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.418699][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.459475][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.494641][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.527142][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.584891][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.619621][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.667995][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.709115][T12853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.709200][ T4277] Bluetooth: hci2: unexpected cc 0x2003 length: 8 < 9 [ 395.734146][ T4277] Bluetooth: hci2: unexpected cc 0x2060 length: 3 < 7 [ 395.743209][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 395.794606][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 395.846144][T12853] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.878725][T12853] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.917998][T12853] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.926762][T12853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.132761][T13324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3412'. [ 397.375227][ T4467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.382258][T13346] netlink: 'syz.4.3415': attribute type 1 has an invalid length. [ 397.420130][ T4467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.468686][T13346] 8021q: adding VLAN 0 to HW filter on device bond3 [ 397.486558][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 397.594201][ T4550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.618425][ T4550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.626684][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 398.002349][T13374] device syzkaller0 entered promiscuous mode [ 403.011708][T13385] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3425'. [ 403.026176][T13387] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3425'. [ 403.204893][T13439] netlink: 'syz.1.3432': attribute type 1 has an invalid length. [ 403.244982][T13439] 8021q: adding VLAN 0 to HW filter on device bond2 [ 403.766646][T13465] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3443'. [ 403.828571][T13465] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3443'. [ 406.382954][T13496] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3455'. [ 406.398121][T13497] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3455'. [ 407.510247][T13533] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 407.525586][T13533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 407.534690][T13533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 407.620114][T13533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.668660][T13533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.687348][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 407.699635][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 407.709163][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 407.725374][T13533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.739043][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 407.746678][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 407.754269][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 407.801023][T13533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.848051][T13533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.868044][T13533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.895068][T13533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.932760][T13533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.967550][T13533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.000518][T13533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.043144][T13533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.081593][T13533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.097857][T13533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.116436][T13533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.135291][T13533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.164116][T13533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.175239][T13533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.192526][T13533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.203920][T13533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.218169][T13533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.818412][ T4277] Bluetooth: hci3: command 0x0409 tx timeout [ 410.206855][T13542] rxe_eth0 speed is unknown, defaulting to 1000 [ 410.656917][ T4714] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.800030][ T4714] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.995922][ T4714] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.031533][T13542] chnl_net:caif_netlink_parms(): no params data found [ 411.158912][ T4714] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.898393][ T4277] Bluetooth: hci3: command 0x041b tx timeout [ 413.972697][T13542] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.980382][ T4277] Bluetooth: hci3: command 0x040f tx timeout [ 413.989385][T13542] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.001968][T13542] device bridge_slave_0 entered promiscuous mode [ 414.013687][T13542] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.021130][T13542] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.029957][T13542] device bridge_slave_1 entered promiscuous mode [ 414.132750][T13542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.149192][T13542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.244313][T13542] team0: Port device team_slave_0 added [ 414.288877][T13542] team0: Port device team_slave_1 added [ 414.435415][T13542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.452890][T13542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.517632][T13542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.559405][T13542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.569196][T13542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.615797][T13542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.650747][T13634] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 414.686667][T13634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 414.696339][T13634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 414.747348][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.768736][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.779792][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.790519][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.800673][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.811785][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.822711][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.833727][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.847220][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.865916][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.886672][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.912588][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.930147][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.945056][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.962466][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.976165][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.993796][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.014663][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.034986][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.055874][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.182957][T13640] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3503'. [ 415.375067][T13641] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3503'. [ 415.509686][T13653] device macvlan2 entered promiscuous mode [ 415.580609][T13542] device hsr_slave_0 entered promiscuous mode [ 415.634733][T13542] device hsr_slave_1 entered promiscuous mode [ 416.058356][ T4292] Bluetooth: hci3: command 0x0419 tx timeout [ 416.778174][ T4277] Bluetooth: hci1: command 0x0406 tx timeout [ 418.547454][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3514'. [ 418.691713][T13699] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 418.746737][T13699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 418.764330][T13699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 418.829120][T13699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.858287][T13699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.878066][T13699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.907682][T13699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.929550][T13699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.973932][T13699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.987775][T13699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.015408][T13699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.036323][T13699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.055781][T13699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.086127][T13699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.115676][T13699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.140219][T13699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.165789][T13699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.215248][T13699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.238047][T13699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.261045][T13699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.281396][T13699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.292839][T13699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.305482][T13699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.409401][T13704] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3516'. [ 419.489361][T13707] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3516'. [ 419.546984][T13713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3518'. [ 422.213655][ T4292] Bluetooth: hci1: unexpected cc 0x2003 length: 8 < 9 [ 422.221847][ T4292] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 422.625378][T13763] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3530'. [ 422.715145][T13763] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3530'. [ 422.885694][ T4714] device hsr_slave_0 left promiscuous mode [ 422.903529][ T4714] device hsr_slave_1 left promiscuous mode [ 422.948177][ T4714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.964135][ T4714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.988984][ T4714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.014761][ T4714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.082010][ T4714] device veth1_macvtap left promiscuous mode [ 423.099508][ T4714] device veth0_macvtap left promiscuous mode [ 423.111842][ T4714] device veth1_vlan left promiscuous mode [ 423.143765][ T4714] device veth0_vlan left promiscuous mode [ 423.397024][ T4292] Bluetooth: hci5: unexpected cc 0x2003 length: 8 < 9 [ 423.407251][ T4292] Bluetooth: hci5: unexpected cc 0x2060 length: 3 < 7 [ 423.741957][ T4714] bond2 (unregistering): Released all slaves [ 423.905527][ T4714] bond1 (unregistering): Released all slaves [ 424.485412][ T4714] team0 (unregistering): Port device team_slave_1 removed [ 424.527537][ T4714] team0 (unregistering): Port device team_slave_0 removed [ 424.573915][ T4714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.623885][ T4714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.937417][ T4714] bond0 (unregistering): Released all slaves [ 424.978560][T13542] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 424.991506][T13766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3531'. [ 425.080295][T13542] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 425.138992][T13542] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 425.174760][T13801] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3541'. [ 425.204131][T13801] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3541'. [ 425.251452][T13542] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 425.509099][T13814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3546'. [ 425.650779][T13542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.709479][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 425.728758][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 425.760557][T13542] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.789161][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 425.806656][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 425.825675][ T4370] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.833330][ T4370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.892955][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 425.941154][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 425.979565][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 426.017877][ T4370] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.028258][ T4370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.099646][T13828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3550'. [ 426.139187][ T4292] Bluetooth: hci5: unexpected cc 0x2003 length: 8 < 9 [ 426.146128][ T4292] Bluetooth: hci5: unexpected cc 0x2060 length: 3 < 7 [ 426.207856][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 426.303975][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 426.337417][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 426.381218][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 426.428473][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 426.449454][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 426.479265][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 426.495512][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 426.506112][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 426.525060][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 426.550883][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 426.581542][T13542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 426.728525][T13851] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3555'. [ 426.774576][T13851] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3555'. [ 427.336268][T13872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 427.415769][T13872] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 427.436894][ T4292] Bluetooth: hci4: unexpected cc 0x2003 length: 8 < 9 [ 427.445086][ T4292] Bluetooth: hci4: unexpected cc 0x2060 length: 3 < 7 [ 427.510792][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 427.545011][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 427.566246][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 427.579835][T13542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.590838][T13872] device macvlan2 entered promiscuous mode [ 427.609507][T13872] device bond1 entered promiscuous mode [ 427.615248][T13872] device veth0_to_bond entered promiscuous mode [ 427.630585][T13872] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 427.640023][T13872] device bond1 left promiscuous mode [ 427.645854][T13872] device veth0_to_bond left promiscuous mode [ 427.687860][T13885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3563'. [ 427.867174][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 427.879528][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 427.949517][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 427.967320][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 427.981509][T13542] device veth0_vlan entered promiscuous mode [ 428.000243][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 428.017713][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 428.034493][T13895] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3566'. [ 428.067068][T13895] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3566'. [ 428.143515][T13542] device veth1_vlan entered promiscuous mode [ 428.195584][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 428.211853][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 428.249763][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 428.284756][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 428.317420][T13542] device veth0_macvtap entered promiscuous mode [ 428.454042][T13542] device veth1_macvtap entered promiscuous mode [ 428.500220][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.535432][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.571493][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.612793][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.653376][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.686726][ T4292] Bluetooth: hci1: unexpected cc 0x2003 length: 8 < 9 [ 428.693796][ T4292] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 428.703331][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.719385][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.730366][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.740993][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.752024][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.799156][T13542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.850797][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 428.890045][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 428.959420][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 428.969361][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 428.993684][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.014683][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.048919][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.067508][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.093945][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.118405][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.135357][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.152748][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.183514][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.206912][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.232415][T13542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.248971][T13932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3576'. [ 429.383349][T13936] 8021q: adding VLAN 0 to HW filter on device bond2 [ 429.410478][T13942] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 429.433392][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 429.465309][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 429.489584][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 429.556236][T13948] device macvlan2 entered promiscuous mode [ 429.569305][T13948] device bond2 entered promiscuous mode [ 429.574924][T13948] device veth0_to_bond entered promiscuous mode [ 429.618836][T13948] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 429.666807][T13948] device bond2 left promiscuous mode [ 429.704600][T13948] device veth0_to_bond left promiscuous mode [ 429.879111][T13542] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.903914][T13542] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.953496][T13542] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.991647][T13542] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.209330][ T4292] Bluetooth: hci0: unexpected cc 0x2003 length: 8 < 9 [ 430.217034][ T4292] Bluetooth: hci0: unexpected cc 0x2060 length: 3 < 7 [ 430.795405][T13998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3591'. [ 430.887477][ T4550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.913714][ T4550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.996720][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 431.115614][ T4550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.128979][ T4550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.136580][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 431.468730][T14019] device syzkaller0 entered promiscuous mode [ 434.471183][T14031] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 434.498486][T14031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 434.507589][T14031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 434.554066][T14031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.570765][T14031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.582405][T14031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.594592][T14031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.612415][T14031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.629146][T14031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.642355][T14031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.654497][T14031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.667334][T14031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.679008][T14031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.691053][T14031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.702155][T14031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.712139][T14031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.723179][T14031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.733839][T14031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.744482][T14031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.754764][T14031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.765435][T14031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.775384][T14031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.792479][T14031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.238075][ T4467] device hsr_slave_0 left promiscuous mode [ 435.271124][ T4467] device hsr_slave_1 left promiscuous mode [ 435.281773][ T4467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.318177][ T4467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.341664][ T4467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.362329][ T4467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.409364][ T4467] device team0 left promiscuous mode [ 435.427318][ T4467] device team_slave_0 left promiscuous mode [ 435.458178][ T4467] device team_slave_1 left promiscuous mode [ 435.501066][ T4467] bridge0: port 3(team0) entered disabled state [ 435.545029][ T4467] device bridge_slave_1 left promiscuous mode [ 435.563774][ T4467] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.588822][ T4467] device bridge_slave_0 left promiscuous mode [ 435.607694][ T4467] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.694961][ T4467] device veth1_macvtap left promiscuous mode [ 435.713832][ T4467] device veth0_macvtap left promiscuous mode [ 436.607655][ T4467] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 436.625753][ T4467] bond2 (unregistering): Released all slaves [ 436.948059][ T4467] bond1 (unregistering): Released all slaves [ 437.026156][ T4467] team0 (unregistering): Port device bridge4 removed [ 437.403740][ T4467] team0 (unregistering): Port device team_slave_1 removed [ 437.454604][ T4467] team0 (unregistering): Port device team_slave_0 removed [ 437.494902][ T4467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.546955][ T4467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.887851][ T4467] bond0 (unregistering): Released all slaves [ 439.577333][T14178] device syzkaller0 entered promiscuous mode [ 440.307626][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.314061][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.378056][ T4292] Bluetooth: hci5: command 0x0406 tx timeout [ 443.451668][T14284] af_packet: tpacket_rcv: packet too big, clamped from 65324 to 3952. macoff=96 [ 444.786229][T14348] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3718'. [ 445.543986][T14380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3730'. [ 446.192993][T14408] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 451.655629][ T4277] Bluetooth: hci3: unexpected cc 0x2003 length: 8 < 9 [ 451.663565][ T4277] Bluetooth: hci3: unexpected cc 0x2060 length: 3 < 7 [ 451.715894][T14543] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3800'. [ 454.269324][ T4277] Bluetooth: hci3: unexpected cc 0x2003 length: 8 < 9 [ 454.278188][ T4277] Bluetooth: hci3: unexpected cc 0x2060 length: 3 < 7 [ 455.178030][ T4277] Bluetooth: hci5: unexpected cc 0x2003 length: 8 < 9 [ 455.185706][ T4277] Bluetooth: hci5: unexpected cc 0x2060 length: 3 < 7 [ 457.522690][T14628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3837'. [ 457.796431][T14643] netlink: 'syz.4.3844': attribute type 16 has an invalid length. [ 457.802956][T14647] ip_tables: iptables: counters copy to user failed while replacing table [ 457.839477][T14648] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3843'. [ 458.415958][T14674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3857'. [ 460.516311][T14683] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3859'. [ 460.546951][T14683] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.554551][T14683] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.825086][T14701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3868'. [ 460.953019][T14706] device ip6gre1 entered promiscuous mode [ 461.760943][ T4277] Bluetooth: hci4: unexpected cc 0x2003 length: 8 < 9 [ 461.769377][ T4277] Bluetooth: hci4: unexpected cc 0x2060 length: 3 < 7 [ 464.159081][ T4277] Bluetooth: hci4: unexpected cc 0x2003 length: 8 < 9 [ 464.174599][ T4277] Bluetooth: hci4: unexpected cc 0x2060 length: 3 < 7 [ 465.565951][T14791] IPVS: Error joining to the multicast group [ 465.691278][ T4277] Bluetooth: hci1: unexpected cc 0x2003 length: 8 < 9 [ 465.698676][ T4277] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 467.775082][T14813] IPVS: Error joining to the multicast group [ 467.921477][ T4277] Bluetooth: hci1: unexpected cc 0x2003 length: 8 < 9 [ 467.934441][ T4277] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 468.122328][T14833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3927'. [ 469.201292][T14850] netlink: 'syz.0.3934': attribute type 1 has an invalid length. [ 469.290874][T14850] 8021q: adding VLAN 0 to HW filter on device bond4 [ 469.383836][ T4277] Bluetooth: hci0: unexpected cc 0x2003 length: 8 < 9 [ 469.391550][ T4277] Bluetooth: hci0: unexpected cc 0x2060 length: 3 < 7 [ 471.891510][ T4277] Bluetooth: hci4: unexpected cc 0x2003 length: 8 < 9 [ 471.899924][ T4277] Bluetooth: hci4: unexpected cc 0x2060 length: 3 < 7 [ 472.251847][T14897] netlink: 'syz.3.3953': attribute type 1 has an invalid length. [ 472.307262][T14897] 8021q: adding VLAN 0 to HW filter on device bond2 [ 472.320724][T14900] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 472.358217][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 475.280884][T14930] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 475.479369][T14943] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3969'. [ 476.007089][T14972] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 478.832977][T15016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4001'. [ 478.965195][T15025] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 482.126915][T15085] netlink: 'syz.3.4030': attribute type 1 has an invalid length. [ 482.152865][T15085] 8021q: adding VLAN 0 to HW filter on device bond3 [ 482.173287][T15085] device macvlan2 entered promiscuous mode [ 482.180551][T15085] device bond3 entered promiscuous mode [ 482.186810][T15085] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 482.198710][T15085] device bond3 left promiscuous mode [ 482.296043][T15093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4033'. [ 482.891197][T15108] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 484.805360][T15122] netlink: 'syz.3.4045': attribute type 1 has an invalid length. [ 485.334317][T15156] netlink: 'syz.1.4059': attribute type 1 has an invalid length. [ 485.423237][T15156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 485.482013][T15160] device macvlan2 entered promiscuous mode [ 485.504093][T15160] device bond1 entered promiscuous mode [ 485.512648][T15160] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 485.522340][T15160] device bond1 left promiscuous mode [ 487.200783][T15198] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4075'. [ 489.812025][T15255] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 491.965450][T15270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4106'. [ 491.995100][T15270] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 492.015112][T15270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 492.030128][T15270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 492.103769][T15279] netlink: 'syz.2.4109': attribute type 1 has an invalid length. [ 492.199448][T15279] 8021q: adding VLAN 0 to HW filter on device bond3 [ 492.223638][T15279] device macvlan2 entered promiscuous mode [ 492.231918][T15279] device bond3 entered promiscuous mode [ 492.271363][T15279] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 492.285559][T15279] device bond3 left promiscuous mode [ 492.315205][T15283] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4114'. [ 492.546345][T15300] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4116'. [ 495.149878][T15321] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4128'. [ 495.282644][T15325] netlink: 'syz.1.4130': attribute type 1 has an invalid length. [ 495.330205][T15325] 8021q: adding VLAN 0 to HW filter on device bond2 [ 495.417186][T15325] device macvlan2 entered promiscuous mode [ 495.470530][T15325] device bond2 entered promiscuous mode [ 495.497745][T15325] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 495.587515][T15325] device bond2 left promiscuous mode [ 496.057351][ T4277] Bluetooth: hci1: unexpected cc 0x2003 length: 8 < 9 [ 496.066033][ T4277] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 496.091075][T15354] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4141'. [ 496.501566][T15368] netlink: 'syz.3.4147': attribute type 1 has an invalid length. [ 496.527552][T15368] 8021q: adding VLAN 0 to HW filter on device bond4 [ 496.552894][T15368] device macvlan2 entered promiscuous mode [ 496.560226][T15368] device bond4 entered promiscuous mode [ 496.566212][T15368] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 496.814741][T15368] device bond4 left promiscuous mode [ 498.757980][T15383] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4152'. [ 499.054092][T15397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4158'. [ 499.418101][T15414] netlink: 'syz.3.4165': attribute type 1 has an invalid length. [ 499.482675][T15414] 8021q: adding VLAN 0 to HW filter on device bond5 [ 499.516602][T15418] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4166'. [ 499.568555][T15414] device macvlan2 entered promiscuous mode [ 499.595012][T15414] device bond5 entered promiscuous mode [ 499.616209][T15414] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 499.648804][T15414] device bond5 left promiscuous mode [ 501.684985][T15445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4172'. [ 501.751396][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.757848][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.788710][T15440] device syzkaller0 entered promiscuous mode [ 502.144967][T15478] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4183'. [ 502.154378][T15478] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4183'. [ 502.628666][T15488] ip_tables: iptables: counters copy to user failed while replacing table [ 504.573998][T15481] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 504.593641][T15481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 504.613461][T15481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 504.798778][T15506] netlink: 332 bytes leftover after parsing attributes in process `syz.2.4189'. [ 504.828267][T15506] netlink: 'syz.2.4189': attribute type 9 has an invalid length. [ 504.851856][T15506] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4189'. [ 504.887994][T15506] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4189'. [ 507.572236][T15541] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 507.582071][T15541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 507.590721][T15541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 507.994392][T15559] netlink: 'syz.4.4208': attribute type 1 has an invalid length. [ 508.029937][T15559] 8021q: adding VLAN 0 to HW filter on device bond4 [ 508.097497][T15567] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4212'. [ 508.143179][T15559] device macvlan2 entered promiscuous mode [ 508.159999][T15559] device bond4 entered promiscuous mode [ 508.183412][T15559] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 508.224485][T15559] device bond4 left promiscuous mode [ 508.604334][T15580] device syzkaller0 entered promiscuous mode [ 511.662864][T15597] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4225'. [ 512.252577][T15670] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4247'. [ 512.529956][T15676] device syzkaller0 entered promiscuous mode [ 515.800460][ T4277] Bluetooth: hci3: unexpected cc 0x2003 length: 8 < 9 [ 515.807852][ T4277] Bluetooth: hci3: unexpected cc 0x2060 length: 3 < 7 [ 518.253343][T15748] device ip6gre1 entered promiscuous mode [ 518.434019][ T4277] Bluetooth: hci1: unexpected cc 0x2003 length: 8 < 9 [ 518.441288][ T4277] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 518.523780][T15765] netlink: 'syz.4.4286': attribute type 1 has an invalid length. [ 518.554010][T15765] 8021q: adding VLAN 0 to HW filter on device bond5 [ 518.568997][T15765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4286'. [ 518.584100][T15765] device macvlan2 entered promiscuous mode [ 518.591716][T15765] device bond5 entered promiscuous mode [ 518.598762][T15765] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 518.617083][T15765] device bond5 left promiscuous mode [ 518.651493][T15771] netlink: 'syz.0.4287': attribute type 1 has an invalid length. [ 518.686985][T15771] 8021q: adding VLAN 0 to HW filter on device bond5 [ 518.744159][T15772] netlink: 'syz.1.4285': attribute type 4 has an invalid length. [ 520.817732][T15782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4290'. [ 520.870966][T15767] device syzkaller1 entered promiscuous mode [ 521.259883][T15802] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4298'. [ 521.620605][T15819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4303'. [ 521.944788][T15839] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4312'. [ 522.115811][T15847] netlink: 'syz.4.4315': attribute type 29 has an invalid length. [ 522.146402][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4315'. [ 522.174241][ T4277] Bluetooth: hci4: unexpected event 0x0e length: 1 < 3 [ 522.191984][T15847] netlink: 'syz.4.4315': attribute type 29 has an invalid length. [ 522.229287][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4315'. [ 522.248593][T15851] netlink: 'syz.4.4315': attribute type 29 has an invalid length. [ 522.256816][T15851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4315'. [ 522.427292][T15856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4318'. [ 522.609207][T15867] batman_adv: batadv0: Adding interface: veth0 [ 522.638083][T15867] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.727397][T15867] batman_adv: batadv0: Interface activated: veth0 [ 522.741318][T15871] netlink: 'syz.0.4324': attribute type 1 has an invalid length. [ 522.844911][T15871] 8021q: adding VLAN 0 to HW filter on device bond6 [ 522.869173][T15874] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4325'. [ 522.908162][T15867] batman_adv: batadv0: Interface deactivated: veth0 [ 522.914896][T15867] batman_adv: batadv0: Removing interface: veth0 [ 522.961731][T15867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.973246][T15867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.003361][T15867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.013104][T15867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.079682][T15893] ip_tables: iptables: counters copy to user failed while replacing table [ 523.665675][T15918] tipc: Started in network mode [ 523.678019][T15918] tipc: Node identity 663bcdf50066, cluster identity 4711 [ 523.697164][T15918] tipc: Enabled bearer , priority 0 [ 523.754300][T15918] device syzkaller0 entered promiscuous mode [ 523.768342][T15918] tipc: Resetting bearer [ 523.778379][T15920] netlink: 'syz.2.4342': attribute type 1 has an invalid length. [ 523.823218][T15920] 8021q: adding VLAN 0 to HW filter on device bond4 [ 524.126019][T15917] tipc: Resetting bearer [ 524.505927][T15936] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input13 [ 527.184344][T15917] tipc: Disabling bearer [ 527.201038][T13979] tipc: Node number set to 1717423605 [ 527.217115][T15958] __nla_validate_parse: 1 callbacks suppressed [ 527.217180][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4352'. [ 527.380639][T15961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4353'. [ 527.650087][T15978] IPVS: ip_vs_add_dest(): server weight less than zero [ 527.933930][T15994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4369'. [ 528.124316][T16001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4373'. [ 528.168501][T16001] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 528.211089][T16001] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 528.243459][T15989] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4367'. [ 528.384643][T16012] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 528.460675][T16016] ip_tables: iptables: counters copy to user failed while replacing table [ 528.614127][T16022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4383'. [ 528.962308][T16040] tipc: Started in network mode [ 528.968987][T16040] tipc: Node identity , cluster identity 4711 [ 528.975114][T16040] tipc: Failed to obtain node identity [ 528.982718][T16040] tipc: Enabling of bearer rejected, failed to enable media [ 529.143603][T16048] batman_adv: batadv0: Adding interface: veth0 [ 529.155129][T16048] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.176311][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d8cec00: rx timeout, send abort [ 529.191669][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d8cec00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 529.239138][T16048] batman_adv: batadv0: Interface activated: veth0 [ 529.253315][T16051] batman_adv: batadv0: Interface deactivated: veth0 [ 529.294523][T16051] batman_adv: batadv0: Removing interface: veth0 [ 529.301890][T16051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.316453][T16051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.346482][T16051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.358196][T16051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.443514][T16058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4398'. [ 529.951562][T16087] device syzkaller0 entered promiscuous mode [ 530.094782][T16091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4412'. [ 530.436887][T16112] ip_tables: iptables: counters copy to user failed while replacing table [ 530.453309][T16112] ip_tables: iptables: counters copy to user failed while replacing table [ 530.641969][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801b2d2c00: rx timeout, send abort [ 530.652489][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801b2d2c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 530.711580][T16124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4425'. [ 531.044362][T16145] device syzkaller0 entered promiscuous mode [ 531.061715][T16145] simple: /de_1 [ 531.338517][T16160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4439'. [ 531.811996][T16182] batman_adv: batadv0: Adding interface: veth0 [ 531.828563][T16182] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.898118][T16182] batman_adv: batadv0: Interface activated: veth0 [ 531.905699][T16186] batman_adv: batadv0: Interface deactivated: veth0 [ 531.935154][T16186] batman_adv: batadv0: Removing interface: veth0 [ 531.952748][T16186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.985091][T16186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.996854][T16186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.020484][T16186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.253791][T16199] __nla_validate_parse: 1 callbacks suppressed [ 532.253808][T16199] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4457'. [ 532.295550][T16203] xt_hashlimit: size too large, truncated to 1048576 [ 532.329709][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 532.493569][T16212] xt_CT: You must specify a L4 protocol and not use inversions on it [ 533.807426][T16264] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 535.612725][T16345] tun0: tun_chr_ioctl cmd 2148553947 [ 536.558240][T16408] ip_tables: iptables: counters copy to user failed while replacing table [ 536.723385][T16412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4553'. [ 536.745980][T16412] tipc: Started in network mode [ 536.756643][T16412] tipc: Node identity 3e71e366895c, cluster identity 4711 [ 536.772163][T16412] tipc: Enabled bearer , priority 10 [ 536.788860][T16412] tipc: Resetting bearer [ 536.845721][T16412] tipc: Disabling bearer [ 536.854305][T16420] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20003 [ 537.301358][T16439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4563'. [ 537.392600][T16444] device syzkaller0 entered promiscuous mode [ 537.409674][T16446] netlink: 'syz.0.4566': attribute type 1 has an invalid length. [ 537.447343][T16446] 8021q: adding VLAN 0 to HW filter on device bond8 [ 537.564411][T16450] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4566'. [ 537.660762][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880793f3800: rx timeout, send abort [ 537.669872][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880793f3800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 537.754308][T16457] netlink: 'syz.3.4569': attribute type 1 has an invalid length. [ 537.850852][T16457] 8021q: adding VLAN 0 to HW filter on device bond6 [ 537.863449][T16464] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 537.895853][T16461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4569'. [ 537.988120][T16457] device macvlan2 entered promiscuous mode [ 538.009104][T16457] device bond6 entered promiscuous mode [ 538.028764][T16457] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 538.057207][T16457] device bond6 left promiscuous mode [ 538.221934][T16481] netlink: 'syz.4.4578': attribute type 1 has an invalid length. [ 538.287067][T16481] 8021q: adding VLAN 0 to HW filter on device bond6 [ 538.327954][T16487] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4578'. [ 538.594880][T16501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4586'. [ 538.741460][T16506] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4586'. [ 538.772906][T16506] netlink: 'syz.4.4586': attribute type 1 has an invalid length. [ 539.028624][T16526] netlink: 'syz.2.4596': attribute type 1 has an invalid length. [ 539.050665][T16526] 8021q: adding VLAN 0 to HW filter on device bond5 [ 539.071770][T16526] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4596'. [ 539.167689][T16533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4598'. [ 539.296729][T16541] ip_tables: iptables: counters copy to user failed while replacing table [ 539.337552][T16543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4604'. [ 539.453374][T16547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4605'. [ 539.538274][T16550] ip_tables: iptables: counters copy to user failed while replacing table [ 539.562775][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f95a000: rx timeout, send abort [ 539.572047][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807f95a000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 539.666889][T16555] netlink: 'syz.2.4609': attribute type 1 has an invalid length. [ 539.704209][T16555] 8021q: adding VLAN 0 to HW filter on device bond6 [ 540.313668][T16588] netlink: 'syz.2.4624': attribute type 1 has an invalid length. [ 540.358709][T16588] 8021q: adding VLAN 0 to HW filter on device bond7 [ 540.678870][T16602] IPVS: Scheduler module ip_vs_sip not found [ 540.904664][T16619] netlink: 'syz.3.4634': attribute type 1 has an invalid length. [ 540.965267][T16619] 8021q: adding VLAN 0 to HW filter on device bond7 [ 540.999999][T16619] device macvlan2 entered promiscuous mode [ 541.012999][T16619] device bond7 entered promiscuous mode [ 541.020022][T16619] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 541.033541][T16619] device bond7 left promiscuous mode [ 541.280068][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025fc3400: rx timeout, send abort [ 541.288666][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888025fc3400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 541.581817][ T4277] Bluetooth: hci1: unexpected cc 0x2003 length: 8 < 9 [ 541.593294][ T4277] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 541.768159][T16658] device syzkaller0 entered promiscuous mode [ 541.836237][T16664] device syz_tun entered promiscuous mode [ 541.843014][T16664] device macvlan2 entered promiscuous mode [ 541.870835][T16664] device syz_tun left promiscuous mode [ 542.069269][T16674] syzkaller1: tun_chr_ioctl cmd 3229636669 [ 542.087792][T16674] syzkaller1: tun_chr_ioctl cmd 1074812118 [ 543.055431][ T4277] Bluetooth: hci5: unexpected cc 0x2003 length: 8 < 9 [ 543.065107][ T4277] Bluetooth: hci5: unexpected cc 0x2060 length: 3 < 7 [ 543.975145][T16762] __nla_validate_parse: 6 callbacks suppressed [ 543.975163][T16762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4685'. [ 544.465649][T16784] lo speed is unknown, defaulting to 1000 [ 544.473487][T16784] lo speed is unknown, defaulting to 1000 [ 544.498738][T16784] lo speed is unknown, defaulting to 1000 [ 544.836092][T16784] infiniband syz0: set down [ 544.851478][ T4354] lo speed is unknown, defaulting to 1000 [ 544.867526][T16784] infiniband syz0: added lo [ 544.931110][T16784] RDS/IB: syz0: added [ 544.938641][T16784] smc: adding ib device syz0 with port count 1 [ 544.955509][T16784] smc: ib device syz0 port 1 has pnetid [ 544.962275][ T4354] lo speed is unknown, defaulting to 1000 [ 544.971524][T16784] lo speed is unknown, defaulting to 1000 [ 545.032132][ T4277] Bluetooth: hci1: unexpected cc 0x2003 length: 8 < 9 [ 545.039245][ T4277] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 545.240383][T16784] lo speed is unknown, defaulting to 1000 [ 545.492554][T16784] lo speed is unknown, defaulting to 1000 [ 545.745628][T16784] lo speed is unknown, defaulting to 1000 [ 545.847074][T16837] netlink: 'syz.0.4708': attribute type 1 has an invalid length. [ 545.900901][T16837] 8021q: adding VLAN 0 to HW filter on device bond9 [ 545.917803][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4708'. [ 545.927295][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4708'. [ 546.082133][T16784] lo speed is unknown, defaulting to 1000 [ 546.393712][ T4277] Bluetooth: hci5: unexpected cc 0x2003 length: 8 < 9 [ 546.414251][ T4277] Bluetooth: hci5: unexpected cc 0x2060 length: 3 < 7 [ 546.481485][T16861] device syzkaller0 entered promiscuous mode [ 547.591651][T16912] device syzkaller0 entered promiscuous mode [ 547.639979][T16917] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4732'. [ 547.806473][T16921] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4731'. [ 548.059299][ T4277] Bluetooth: hci3: unexpected cc 0x2003 length: 8 < 9 [ 548.066926][ T4277] Bluetooth: hci3: unexpected cc 0x2060 length: 3 < 7 [ 548.499154][T16958] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4743'. [ 548.814535][T16976] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4747'. [ 548.848384][T16972] device syzkaller0 entered promiscuous mode [ 548.860328][ T4277] Bluetooth: hci3: unexpected cc 0x2003 length: 8 < 9 [ 548.875610][ T4277] Bluetooth: hci3: unexpected cc 0x2060 length: 3 < 7 [ 549.448620][T16998] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4757'. [ 549.602374][T17009] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.610215][T17009] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.647113][T17003] IPVS: Scheduler module ip_vs_sip not found [ 549.774060][ T4277] Bluetooth: hci5: unexpected cc 0x2003 length: 8 < 9 [ 549.782126][ T4277] Bluetooth: hci5: unexpected cc 0x2060 length: 3 < 7 [ 549.996264][T17029] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4765'. [ 550.269839][T17039] netlink: 'syz.2.4768': attribute type 1 has an invalid length. [ 550.299829][T17039] 8021q: adding VLAN 0 to HW filter on device bond8 [ 550.369212][T17039] device macvlan2 entered promiscuous mode [ 550.377494][T17039] device bond8 entered promiscuous mode [ 550.384107][T17039] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 550.396719][T17039] device bond8 left promiscuous mode [ 550.877397][ T4277] Bluetooth: hci1: unexpected cc 0x2003 length: 8 < 9 [ 550.885023][ T4277] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 551.395109][T17091] netlink: 'syz.3.4783': attribute type 1 has an invalid length. [ 551.454150][T17091] 8021q: adding VLAN 0 to HW filter on device bond8 [ 551.472827][T17094] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4783'. [ 551.502354][T17091] device macvlan1 entered promiscuous mode [ 551.510738][T17091] device bond8 entered promiscuous mode [ 551.524477][T17091] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 551.544373][T17091] device bond8 left promiscuous mode [ 552.453250][ T4277] Bluetooth: hci1: unexpected cc 0x2003 length: 8 < 9 [ 552.465005][ T4277] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 552.721444][T17152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.729758][T17152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.740633][T17152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.748437][T17152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.930999][T17114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 555.070756][ T4277] Bluetooth: hci3: unexpected cc 0x2003 length: 8 < 9 [ 555.081497][ T4277] Bluetooth: hci3: unexpected cc 0x2060 length: 3 < 7 [ 555.169521][T17177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4815'. [ 555.638536][T17200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.656542][T17200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.674736][T17200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.686329][T17200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.813144][T17205] device syzkaller0 entered promiscuous mode [ 556.315761][T17231] netlink: 192 bytes leftover after parsing attributes in process `syz.4.4830'. [ 556.472213][T17221] device syzkaller0 entered promiscuous mode [ 556.542533][T17239] IPVS: wlc: TCP 172.20.20.170:20000 - no destination available [ 559.541074][T17255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4838'. [ 559.807977][T17295] IPVS: wlc: TCP 172.20.20.170:20000 - no destination available [ 560.094965][T17309] netlink: 'syz.1.4855': attribute type 1 has an invalid length. [ 560.198668][T17309] 8021q: adding VLAN 0 to HW filter on device bond3 [ 560.363023][T17325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4859'. [ 560.587214][T17330] device syzkaller0 entered promiscuous mode [ 563.188657][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.195008][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.251552][T17372] bridge_slave_0: default FDB implementation only supports local addresses [ 564.021189][T17421] netlink: 'syz.1.4891': attribute type 29 has an invalid length. [ 564.029356][T17421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4891'. [ 564.044870][T17421] netlink: 'syz.1.4891': attribute type 29 has an invalid length. [ 564.055268][T17421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4891'. [ 564.071748][T17421] netlink: 'syz.1.4891': attribute type 29 has an invalid length. [ 564.084321][T17421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4891'. [ 564.176715][T17429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4894'. [ 564.202904][T17429] device syz_tun entered promiscuous mode [ 564.209365][T17429] device macvlan2 entered promiscuous mode [ 564.218846][T17429] device syz_tun left promiscuous mode [ 565.292535][T17501] Bluetooth: MGMT ver 1.22 [ 565.580351][T17512] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.662255][T17518] device vlan2 entered promiscuous mode [ 565.696979][T17518] device bridge0 entered promiscuous mode [ 565.744744][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 566.045990][T17512] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.197412][T17512] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.264260][T17553] netlink: 'syz.1.4940': attribute type 2 has an invalid length. [ 566.433182][T17512] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.625844][T17512] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.648243][T17512] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.671571][T17512] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.701645][T17512] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.081422][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e75d000: rx timeout, send abort [ 567.092807][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e75d000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 567.644365][T17629] device syzkaller0 entered promiscuous mode [ 567.833472][ T4277] Bluetooth: hci3: unexpected cc 0x2003 length: 8 < 9 [ 567.841925][ T4277] Bluetooth: hci3: unexpected cc 0x2060 length: 3 < 7 [ 568.712650][T17685] ip_tables: iptables: counters copy to user failed while replacing table [ 568.788980][ C0] vcan0: j1939_tp_rxtimer: 0xffff888046de6000: rx timeout, send abort [ 568.797445][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888046de6000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 568.946371][ T4277] Bluetooth: hci5: unexpected cc 0x2003 length: 8 < 9 [ 568.953886][ T4277] Bluetooth: hci5: unexpected cc 0x2060 length: 3 < 7 [ 569.475285][T17729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5012'. [ 569.869590][T17755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5023'. [ 570.247303][T17772] ip_tables: iptables: counters copy to user failed while replacing table [ 570.364401][T17778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5034'. [ 570.498917][ C0] vcan0: j1939_tp_rxtimer: 0xffff888062058000: rx timeout, send abort [ 570.507327][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888062058000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 570.835037][T17803] device vlan2 entered promiscuous mode [ 570.841051][T17803] device bridge0 entered promiscuous mode [ 571.815041][T17853] device syzkaller0 entered promiscuous mode [ 572.197283][T17873] device syzkaller0 entered promiscuous mode [ 572.492020][T17889] device vlan2 entered promiscuous mode [ 572.695285][T17901] device syzkaller0 entered promiscuous mode [ 574.106613][T17979] ip_tables: iptables: counters copy to user failed while replacing table [ 574.242907][T17991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5128'. [ 574.421096][T17998] device syzkaller0 entered promiscuous mode [ 576.854365][T18034] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5142'. [ 576.950125][T18034] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.957595][T18034] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.184063][T18039] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5142'. [ 577.266715][T18039] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.273989][T18039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.281516][T18039] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.288837][T18039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.511977][T18039] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5142'. [ 577.548216][T18039] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.556686][T18039] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.825926][T18066] device syzkaller0 entered promiscuous mode [ 580.948512][T18130] device syzkaller0 entered promiscuous mode [ 583.390879][T18133] netlink: 'syz.4.5173': attribute type 1 has an invalid length. [ 583.407807][T18135] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5173'. [ 583.716238][T18182] IPVS: wlc: TCP 172.20.20.170:20000 - no destination available [ 583.907711][T18194] netlink: 'syz.3.5192': attribute type 1 has an invalid length. [ 583.945454][T18194] 8021q: adding VLAN 0 to HW filter on device bond9 [ 583.957756][T18194] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5192'. [ 583.973982][T18194] device macvlan1 entered promiscuous mode [ 583.982898][T18194] device bond9 entered promiscuous mode [ 583.993877][T18194] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 584.004857][T18194] device bond9 left promiscuous mode [ 584.232895][T18211] device vlan2 entered promiscuous mode [ 584.239547][T18211] device bridge0 entered promiscuous mode [ 584.381279][T18223] ip_tables: iptables: counters copy to user failed while replacing table [ 584.432698][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 584.538248][T18228] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5204'. [ 584.549984][T18228] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.557340][T18228] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.585424][T18227] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5204'. [ 584.594746][T18227] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.601932][T18227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.609390][T18227] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.616491][T18227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.627182][T18227] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5204'. [ 584.636698][T18227] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.643933][T18227] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.658626][T18230] netlink: 'syz.4.5205': attribute type 39 has an invalid length. [ 585.158588][T18250] ip_tables: iptables: counters copy to user failed while replacing table [ 585.316168][T18259] Cannot find add_set index 0 as target [ 585.811532][T18285] netlink: 'syz.4.5227': attribute type 1 has an invalid length. [ 585.837195][T18285] 8021q: adding VLAN 0 to HW filter on device bond7 [ 585.850081][T18285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5227'. [ 585.866140][T18285] device macvlan2 entered promiscuous mode [ 585.873528][T18285] device bond7 entered promiscuous mode [ 585.879718][T18285] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 585.891472][T18285] device bond7 left promiscuous mode [ 586.044033][T18294] device vlan2 entered promiscuous mode [ 586.882116][T18191] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 587.125234][T18336] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 587.279162][T18348] device syzkaller0 entered promiscuous mode [ 587.364109][T18354] EXT4-fs (sda1): shut down requested (0) [ 587.659521][T18361] netlink: 'syz.1.5253': attribute type 1 has an invalid length. [ 587.720362][T18361] 8021q: adding VLAN 0 to HW filter on device bond4 [ 587.729726][T18369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5253'. [ 587.769133][T18361] device macvlan2 entered promiscuous mode [ 587.784541][T18361] device bond4 entered promiscuous mode [ 587.797804][T18361] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 587.821483][T18361] device bond4 left promiscuous mode [ 587.877019][T18382] device vlan2 entered promiscuous mode [ 587.882981][T18382] device bridge0 entered promiscuous mode [ 588.039198][T18393] loop1: detected capacity change from 0 to 1024 [ 588.065969][T18393] ======================================================= [ 588.065969][T18393] WARNING: The mand mount option has been deprecated and [ 588.065969][T18393] and is ignored by this kernel. Remove the mand [ 588.065969][T18393] option from the mount to silence this warning. [ 588.065969][T18393] ======================================================= [ 588.101442][T18393] EXT4-fs: Ignoring removed nomblk_io_submit option [ 588.132771][T18393] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 588.208770][T18393] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.5261: lblock 2 mapped to illegal pblock 2 (length 1) [ 588.215660][T18399] device syzkaller0 entered promiscuous mode [ 588.244875][T18393] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 588.259360][T18393] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.5261: lblock 0 mapped to illegal pblock 48 (length 1) [ 588.277136][T18393] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 588.289533][T18393] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.5261: Failed to acquire dquot type 0 [ 588.297729][T18393] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5985: Corrupt filesystem [ 588.310288][T18393] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.5261: mark_inode_dirty error [ 588.315375][T18393] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 588.344421][T18393] EXT4-fs (loop1): 1 orphan inode deleted [ 588.345337][T18393] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 588.361802][ T47] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 588.364255][ T47] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 588.364451][ T47] EXT4-fs error (device loop1): ext4_release_dquot:6884: comm kworker/u4:3: Failed to release dquot type 0 [ 588.433106][T13542] EXT4-fs (loop1): unmounting filesystem. [ 588.435059][ T47] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 588.435335][ T47] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 588.435366][ T47] EXT4-fs error (device loop1): ext4_release_dquot:6884: comm kworker/u4:3: Failed to release dquot type 0 [ 588.446474][T13542] EXT4-fs error (device loop1): __ext4_get_inode_loc:4523: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 588.457958][T13542] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5985: Corrupt filesystem [ 588.564561][T13542] EXT4-fs error (device loop1): ext4_quota_off:7142: inode #3: comm syz-executor: mark_inode_dirty error [ 588.880229][T18427] FAULT_INJECTION: forcing a failure. [ 588.880229][T18427] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 588.906635][T18427] CPU: 0 PID: 18427 Comm: syz.1.5273 Not tainted syzkaller #0 [ 588.914161][T18427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 588.924242][T18427] Call Trace: [ 588.927624][T18427] [ 588.930653][T18427] dump_stack_lvl+0x188/0x24e [ 588.935519][T18427] ? show_regs_print_info+0x12/0x12 [ 588.940798][T18427] ? load_image+0x410/0x410 [ 588.945359][T18427] ? __lock_acquire+0x7ea0/0x7ea0 [ 588.950437][T18427] should_fail_ex+0x390/0x4c0 [ 588.955214][T18427] prepare_alloc_pages+0x1e1/0x5b0 [ 588.960431][T18427] __alloc_pages+0x130/0x4f0 [ 588.965154][T18427] ? zone_statistics+0x170/0x170 [ 588.970142][T18427] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 588.976435][T18427] ? alloc_pages+0x4dd/0x740 [ 588.981136][T18427] ? __fget_files+0x28/0x460 [ 588.985822][T18427] __get_free_pages+0x8/0x30 [ 588.990503][T18427] __pollwait+0x116/0x3e0 [ 588.994931][T18427] ? poll_initwait+0x150/0x150 [ 588.999720][T18427] pipe_poll+0x169/0x4a0 [ 589.003981][T18427] ? do_sys_poll+0x7fd/0x12e0 [ 589.008773][T18427] ? pipe_write+0x1b50/0x1b50 [ 589.013492][T18427] do_sys_poll+0x8d3/0x12e0 [ 589.015768][T18434] netlink: 'syz.0.5277': attribute type 39 has an invalid length. [ 589.018014][T18427] ? poll_select_finish+0x640/0x640 [ 589.018043][T18427] ? __schedule+0x1091/0x4140 [ 589.018165][T18427] ? poll_initwait+0x150/0x150 [ 589.018196][T18427] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 589.018217][T18427] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 589.018237][T18427] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 589.059501][T18427] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 589.065772][T18427] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 589.072054][T18427] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 589.078355][T18427] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 589.084657][T18427] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 589.090921][T18427] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 589.097213][T18427] ? set_user_sigmask+0xca/0x1c0 [ 589.102271][T18427] ? sigprocmask+0x190/0x190 [ 589.106886][T18427] __se_sys_ppoll+0x206/0x2a0 [ 589.111585][T18427] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 589.117618][T18427] ? __x64_sys_ppoll+0xc0/0xc0 [ 589.122404][T18427] ? lockdep_hardirqs_on+0x94/0x140 [ 589.127627][T18427] ? __x64_sys_ppoll+0x1c/0xc0 [ 589.132415][T18427] do_syscall_64+0x4c/0xa0 [ 589.136942][T18427] ? clear_bhb_loop+0x60/0xb0 [ 589.141740][T18427] ? clear_bhb_loop+0x60/0xb0 [ 589.146438][T18427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 589.152357][T18427] RIP: 0033:0x7fbb4219f559 [ 589.156887][T18427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.176585][T18427] RSP: 002b:00007fbb4303a028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 589.185111][T18427] RAX: ffffffffffffffda RBX: 00007fbb42425fa0 RCX: 00007fbb4219f559 [ 589.193123][T18427] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 0000200000000280 [ 589.201133][T18427] RBP: 00007fbb42236b20 R08: 0000000000000030 R09: 0000000000000000 [ 589.209138][T18427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.217134][T18427] R13: 00007fbb42426038 R14: 00007fbb42425fa0 R15: 00007ffe0c6025c8 [ 589.225119][T18427] [ 590.320247][T18496] netlink: 'syz.3.5299': attribute type 39 has an invalid length. [ 591.569523][T18550] netlink: 'syz.2.5318': attribute type 1 has an invalid length. [ 591.652330][T18550] 8021q: adding VLAN 0 to HW filter on device bond9 [ 591.675370][T18552] bond2: (slave veth0_to_bond): Releasing backup interface [ 591.733537][T18552] bond9: (slave veth0_to_bond): making interface the new active one [ 591.780043][T18552] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 591.805077][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready [ 591.842494][T18550] device macvlan2 entered promiscuous mode [ 591.859239][T18550] device bond9 entered promiscuous mode [ 591.864935][T18550] device veth0_to_bond entered promiscuous mode [ 591.883946][T18550] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 591.901333][T18550] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 591.919130][T18550] device bond9 left promiscuous mode [ 591.930149][T18550] device veth0_to_bond left promiscuous mode [ 592.050278][T18559] device syzkaller0 entered promiscuous mode [ 593.144199][T18589] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.151478][T18589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.160530][T18589] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.167714][T18589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.221648][T18591] netlink: 'syz.2.5330': attribute type 39 has an invalid length. [ 593.527465][T18600] netlink: 'syz.3.5334': attribute type 1 has an invalid length. [ 594.201693][T18600] 8021q: adding VLAN 0 to HW filter on device bond10 [ 594.235322][T18603] bond1: (slave veth0_to_bond): Releasing backup interface [ 594.321840][T18603] bond10: (slave veth0_to_bond): making interface the new active one [ 594.335755][T18603] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 594.369468][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 594.388739][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready [ 594.689758][T18634] netlink: 'syz.2.5342': attribute type 1 has an invalid length. [ 594.756146][T18634] bond9: (slave veth0_to_bond): Releasing active interface [ 594.774488][T18634] bond10: (slave veth0_to_bond): making interface the new active one [ 594.784609][T18634] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 595.003125][T18648] netlink: 'syz.2.5348': attribute type 39 has an invalid length. [ 595.067806][T18649] loop0: detected capacity change from 0 to 512 [ 595.110289][T18649] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 595.133941][T18651] netlink: 'syz.4.5349': attribute type 1 has an invalid length. [ 595.151704][T18649] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 595.205936][T18649] EXT4-fs (loop0): 1 truncate cleaned up [ 595.215460][T18651] 8021q: adding VLAN 0 to HW filter on device bond8 [ 595.219285][T18649] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 595.234801][T18658] bond8: (slave veth0_to_bond): making interface the new active one [ 595.299861][T18658] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 595.310704][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready [ 595.327440][T18661] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5351'. [ 595.359532][T18651] device macvlan2 entered promiscuous mode [ 595.373951][T18651] device bond8 entered promiscuous mode [ 595.394632][T18651] device veth0_to_bond entered promiscuous mode [ 595.419012][T18651] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 595.437319][T18651] bond8: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 595.454641][T18651] device bond8 left promiscuous mode [ 595.460150][T18651] device veth0_to_bond left promiscuous mode [ 595.714448][T10313] EXT4-fs (loop0): unmounting filesystem. [ 595.720644][ T4277] Bluetooth: hci4: unexpected cc 0x2003 length: 8 < 9 [ 595.727527][ T4277] Bluetooth: hci4: unexpected cc 0x2060 length: 3 < 7 [ 595.883664][T18677] loop2: detected capacity change from 0 to 512 [ 595.943759][T18677] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 595.998262][T18677] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 596.018398][T18677] EXT4-fs (loop2): orphan cleanup on readonly fs [ 596.024804][T18677] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.5357: bad orphan inode 267 [ 596.042637][T18677] EXT4-fs (loop2): Remounting filesystem read-only [ 596.050500][T18677] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 596.061733][T18677] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.5357: dx entry: limit 0 != root limit 125 [ 596.084188][T18677] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.5357: Corrupt directory, running e2fsck is recommended [ 596.132349][T18692] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5362'. [ 596.161107][T11828] EXT4-fs (loop2): unmounting filesystem. [ 596.302660][T18697] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5364'. [ 596.349059][T18700] tmpfs: Bad value for 'mpol' [ 596.358743][T18697] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.365934][T18697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.373456][T18697] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.380677][T18697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.488864][ T4277] Bluetooth: hci4: unexpected cc 0x2003 length: 8 < 9 [ 596.495852][ T4277] Bluetooth: hci4: unexpected cc 0x2060 length: 3 < 7 [ 596.568341][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 596.804266][T18717] ip_tables: iptables: counters copy to user failed while replacing table [ 596.994290][T18727] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5375'. [ 597.086561][T18731] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5377'. [ 597.242981][ T4277] Bluetooth: hci4: unexpected cc 0x2003 length: 8 < 9 [ 597.250542][ T4277] Bluetooth: hci4: unexpected cc 0x2060 length: 3 < 7 [ 597.454789][T18747] loop0: detected capacity change from 0 to 512 [ 597.534657][T18747] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 597.603260][T18747] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 597.638376][T18755] netlink: 'syz.2.5388': attribute type 1 has an invalid length. [ 597.679787][T18747] ext4 filesystem being mounted at /587/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 597.705378][T18755] 8021q: adding VLAN 0 to HW filter on device bond11 [ 597.738785][T18763] bond10: (slave veth0_to_bond): Releasing active interface [ 597.814684][T18763] bond11: (slave veth0_to_bond): making interface the new active one [ 597.871196][T18763] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 597.904146][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): bond11: link becomes ready [ 597.935731][T18755] device macvlan2 entered promiscuous mode [ 597.960223][T18755] device bond11 entered promiscuous mode [ 597.972941][T10313] EXT4-fs (loop0): unmounting filesystem. [ 597.986434][T18755] device veth0_to_bond entered promiscuous mode [ 597.998531][T18755] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 598.036057][T18755] bond11: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 598.079052][T18755] device bond11 left promiscuous mode [ 598.097540][T18755] device veth0_to_bond left promiscuous mode [ 598.274156][T18777] loop3: detected capacity change from 0 to 512 [ 598.373015][T18777] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 598.424151][T18777] EXT4-fs (loop3): 1 truncate cleaned up [ 598.442988][T18777] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 598.568508][T18783] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 598.575971][T18783] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 598.662221][T12853] EXT4-fs (loop3): unmounting filesystem. [ 598.788360][T18792] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5399'. [ 598.831409][T18792] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.838875][T18792] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.868036][T18796] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5399'. [ 598.881191][T18796] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.888435][T18796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.896148][T18796] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.903836][T18796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.922133][T18796] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5399'. [ 598.941803][T18796] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.949103][T18796] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.114973][ T4277] Bluetooth: hci1: unexpected cc 0x2003 length: 8 < 9 [ 599.124110][ T4277] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 599.210673][T18809] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5406'. [ 599.657108][T18825] loop2: detected capacity change from 0 to 512 [ 599.981028][T18832] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5414'. [ 600.030093][T18832] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.037480][T18832] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.084691][T18840] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.091989][T18840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.099479][T18840] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.106674][T18840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.122691][T18840] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.130066][T18840] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.522866][T18856] loop0: detected capacity change from 0 to 8192 [ 600.739979][T18867] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 600.773991][T18867] FAT-fs (loop0): Filesystem has been set read-only [ 600.918923][T18877] netlink: 'syz.1.5431': attribute type 1 has an invalid length. [ 601.085553][T18884] bond5: (slave veth0_to_bond): making interface the new active one [ 601.100244][T18884] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 601.112708][T18889] netlink: 'syz.4.5433': attribute type 1 has an invalid length. [ 601.164820][T18889] 8021q: adding VLAN 0 to HW filter on device bond9 [ 601.196643][T18885] bond8: (slave veth0_to_bond): Releasing active interface [ 601.282407][T18885] bond9: (slave veth0_to_bond): making interface the new active one [ 601.320185][T18885] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 601.328214][T18898] FAULT_INJECTION: forcing a failure. [ 601.328214][T18898] name failslab, interval 1, probability 0, space 0, times 0 [ 601.342729][T18898] CPU: 0 PID: 18898 Comm: syz.0.5438 Not tainted syzkaller #0 [ 601.350214][T18898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 601.360289][T18898] Call Trace: [ 601.363568][T18898] [ 601.366499][T18898] dump_stack_lvl+0x188/0x24e [ 601.371188][T18898] ? show_regs_print_info+0x12/0x12 [ 601.376388][T18898] ? load_image+0x410/0x410 [ 601.380888][T18898] ? __might_sleep+0xd0/0xd0 [ 601.385557][T18898] ? __lock_acquire+0x7ea0/0x7ea0 [ 601.390584][T18898] should_fail_ex+0x390/0x4c0 [ 601.395266][T18898] should_failslab+0x5/0x20 [ 601.399828][T18898] slab_pre_alloc_hook+0x59/0x300 [ 601.404915][T18898] ? security_sk_alloc+0x47/0x130 [ 601.409991][T18898] __kmem_cache_alloc_node+0x4f/0x270 [ 601.415372][T18898] ? security_sk_alloc+0x47/0x130 [ 601.420394][T18898] __kmalloc+0xa3/0x240 [ 601.424547][T18898] ? sk_prot_alloc+0xe7/0x210 [ 601.429300][T18898] security_sk_alloc+0x47/0x130 [ 601.434154][T18898] sk_prot_alloc+0x101/0x210 [ 601.438738][T18898] ? sk_alloc+0x20/0x330 [ 601.442978][T18898] sk_alloc+0x36/0x330 [ 601.447045][T18898] __netlink_create+0x6b/0x2d0 [ 601.451909][T18898] __netlink_kernel_create+0x144/0x7b0 [ 601.457373][T18898] ? netlink_set_err+0x3b0/0x3b0 [ 601.462313][T18898] ? diag_net_init+0xa4/0x140 [ 601.467067][T18898] diag_net_init+0xb9/0x140 [ 601.471591][T18898] ? sock_diag_lock_handler+0x280/0x280 [ 601.477141][T18898] ? diag_net_exit+0x60/0x60 [ 601.481731][T18898] ? sock_diag_rcv+0x40/0x40 [ 601.486317][T18898] ? cma_pernet+0x23/0x230 [ 601.490813][T18898] ? __raw_spin_lock_init+0x41/0x100 [ 601.496107][T18898] ops_init+0x360/0x5e0 [ 601.500303][T18898] setup_net+0x4f2/0xbd0 [ 601.504551][T18898] ? copy_net_ns+0x5b0/0x5b0 [ 601.509142][T18898] ? copy_net_ns+0x324/0x5b0 [ 601.513728][T18898] ? down_read_killable+0x1cc/0x340 [ 601.518931][T18898] copy_net_ns+0x33e/0x5b0 [ 601.523349][T18898] create_new_namespaces+0x3ce/0x700 [ 601.528729][T18898] unshare_nsproxy_namespaces+0x116/0x160 [ 601.534536][T18898] ksys_unshare+0x4f6/0x8e0 [ 601.539102][T18898] ? sighand_ctor+0x40/0x40 [ 601.543611][T18898] ? lock_chain_count+0x20/0x20 [ 601.548503][T18898] ? syscall_enter_from_user_mode+0x21/0x80 [ 601.554403][T18898] __x64_sys_unshare+0x34/0x40 [ 601.559166][T18898] do_syscall_64+0x4c/0xa0 [ 601.563611][T18898] ? clear_bhb_loop+0x60/0xb0 [ 601.568291][T18898] ? clear_bhb_loop+0x60/0xb0 [ 601.573057][T18898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 601.578955][T18898] RIP: 0033:0x7f6598b9f559 [ 601.583370][T18898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.602984][T18898] RSP: 002b:00007f6599a57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 601.611432][T18898] RAX: ffffffffffffffda RBX: 00007f6598e25fa0 RCX: 00007f6598b9f559 [ 601.620098][T18898] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 601.628066][T18898] RBP: 00007f6598c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 601.636036][T18898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.644007][T18898] R13: 00007f6598e26038 R14: 00007f6598e25fa0 R15: 00007ffe2fd3c8f8 [ 601.651994][T18898] [ 601.701534][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready [ 601.741927][T18893] device macvlan2 entered promiscuous mode [ 601.771016][T18893] device bond9 entered promiscuous mode [ 601.789914][T18893] device veth0_to_bond entered promiscuous mode [ 601.805066][T18893] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 601.830281][T18893] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 601.858054][T18893] device bond9 left promiscuous mode [ 601.863858][T18893] device veth0_to_bond left promiscuous mode [ 602.078678][T18922] FAULT_INJECTION: forcing a failure. [ 602.078678][T18922] name failslab, interval 1, probability 0, space 0, times 0 [ 602.128651][T18922] CPU: 1 PID: 18922 Comm: syz.3.5445 Not tainted syzkaller #0 [ 602.136196][T18922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 602.146368][T18922] Call Trace: [ 602.149671][T18922] [ 602.152661][T18922] dump_stack_lvl+0x188/0x24e [ 602.157382][T18922] ? show_regs_print_info+0x12/0x12 [ 602.162625][T18922] ? load_image+0x410/0x410 [ 602.167170][T18922] ? __might_sleep+0xd0/0xd0 [ 602.171795][T18922] ? __lock_acquire+0x7ea0/0x7ea0 [ 602.176878][T18922] should_fail_ex+0x390/0x4c0 [ 602.181592][T18922] should_failslab+0x5/0x20 [ 602.186134][T18922] slab_pre_alloc_hook+0x59/0x300 [ 602.191211][T18922] kmem_cache_alloc+0x56/0x2f0 [ 602.196001][T18922] ? fcntl_setlk+0xa5/0x10e0 [ 602.200715][T18922] fcntl_setlk+0xa5/0x10e0 [ 602.205170][T18922] ? __might_fault+0xa6/0x120 [ 602.209995][T18922] ? __lock_acquire+0x7ea0/0x7ea0 [ 602.215052][T18922] ? vfs_lock_file+0xd0/0xd0 [ 602.219673][T18922] ? __might_fault+0xa6/0x120 [ 602.224374][T18922] ? __might_fault+0xc2/0x120 [ 602.229070][T18922] ? __might_fault+0xa6/0x120 [ 602.233779][T18922] do_fcntl+0x543/0x12f0 [ 602.238053][T18922] ? __ia32_sys_get_robust_list+0x100/0x100 [ 602.244133][T18922] ? kill_fasync+0x4b0/0x4b0 [ 602.248769][T18922] ? __fget_files+0x28/0x460 [ 602.253404][T18922] ? __fget_files+0x3fc/0x460 [ 602.258121][T18922] ? tomoyo_file_fcntl+0x74/0x210 [ 602.263329][T18922] ? bpf_lsm_file_fcntl+0x5/0x10 [ 602.268397][T18922] ? security_file_fcntl+0x7c/0xa0 [ 602.273627][T18922] __se_sys_fcntl+0xc9/0x190 [ 602.278271][T18922] do_syscall_64+0x4c/0xa0 [ 602.282807][T18922] ? clear_bhb_loop+0x60/0xb0 [ 602.287516][T18922] ? clear_bhb_loop+0x60/0xb0 [ 602.292223][T18922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 602.298154][T18922] RIP: 0033:0x7f81e679f559 [ 602.302605][T18922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.322333][T18922] RSP: 002b:00007f81e49f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 602.330857][T18922] RAX: ffffffffffffffda RBX: 00007f81e6a25fa0 RCX: 00007f81e679f559 [ 602.338893][T18922] RDX: 0000200000000d80 RSI: 0000000000000026 RDI: 0000000000000003 [ 602.346892][T18922] RBP: 00007f81e6836b20 R08: 0000000000000000 R09: 0000000000000000 [ 602.354896][T18922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.362892][T18922] R13: 00007f81e6a26038 R14: 00007f81e6a25fa0 R15: 00007fffaf8c6c48 [ 602.370905][T18922] [ 602.413011][T18932] netlink: 'syz.0.5448': attribute type 1 has an invalid length. [ 602.474189][T18932] bond10: (slave veth0_to_bond): making interface the new active one [ 602.484935][T18932] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 603.434642][ T47] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.527440][ T47] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.600078][ T47] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.674399][ T47] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.712361][ T47] device hsr_slave_0 left promiscuous mode [ 604.718953][ T47] device hsr_slave_1 left promiscuous mode [ 604.725239][ T47] device bridge_slave_1 left promiscuous mode [ 604.731572][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.739631][ T47] device bridge_slave_0 left promiscuous mode [ 604.745793][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.772781][ T47] device veth1_macvtap left promiscuous mode [ 604.779221][ T47] device veth0_macvtap left promiscuous mode [ 604.785315][ T47] device veth1_vlan left promiscuous mode [ 604.791580][ T47] device veth0_vlan left promiscuous mode [ 604.870716][ T47] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 604.881756][ T47] bond5 (unregistering): Released all slaves [ 605.013760][ T47] bond4 (unregistering): Released all slaves [ 605.146386][ T47] bond3 (unregistering): Released all slaves [ 605.327061][ T47] bond2 (unregistering): Released all slaves [ 605.451936][ T47] bond1 (unregistering): Released all slaves [ 605.886698][ T47] team0 (unregistering): Port device team_slave_1 removed [ 605.933188][ T47] team0 (unregistering): Port device team_slave_0 removed [ 605.975124][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.020430][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.316042][ T47] bond0 (unregistering): Released all slaves [ 606.374763][ T4364] smc: removing ib device syz0 [ 606.889062][ T47] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.957067][ T47] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.044993][ T47] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.133665][ T47] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.248368][ T47] tipc: Left network mode [ 608.113103][ T47] device hsr_slave_0 left promiscuous mode [ 608.119520][ T47] device hsr_slave_1 left promiscuous mode [ 608.126370][ T47] device bridge_slave_1 left promiscuous mode [ 608.134519][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.146724][ T47] device bridge_slave_0 left promiscuous mode [ 608.153830][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.194688][ T47] device veth1_macvtap left promiscuous mode [ 608.200907][ T47] device veth0_macvtap left promiscuous mode [ 608.206957][ T47] device veth1_vlan left promiscuous mode [ 608.212889][ T47] device veth0_vlan left promiscuous mode [ 608.439333][ T47] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 608.448924][ T47] bond9 (unregistering): Released all slaves [ 608.575449][ T47] bond8 (unregistering): Released all slaves [ 608.698364][ T47] bond7 (unregistering): Released all slaves [ 608.823753][ T47] bond6 (unregistering): Released all slaves [ 608.982098][ T47] bond5 (unregistering): Released all slaves [ 609.133301][ T47] bond4 (unregistering): Released all slaves [ 609.301266][ T47] bond3 (unregistering): Released all slaves [ 609.461942][ T47] bond2 (unregistering): Released all slaves [ 609.490243][ T47] bond1 (unregistering): (slave geneve2): Releasing active interface [ 609.618302][ T47] bond1 (unregistering): Released all slaves [ 610.050895][ T47] team0 (unregistering): Port device team_slave_1 removed [ 610.103401][ T47] team0 (unregistering): Port device team_slave_0 removed [ 610.145198][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.197498][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.444381][ T47] team0 (unregistering): Port device dummy0 removed [ 610.492568][ T47] bond0 (unregistering): Released all slaves