last executing test programs: 13m9.816259755s ago: executing program 0 (id=21): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000300)={[{@journal_path={'journal_path', 0x3d, './file1'}}, {@nodiscard}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@dax_never}, {@init_itable}], [{@obj_role={'obj_role', 0x3d, 'nodiscard'}}, {@uid_gt}, {@measure}, {@fowner_gt={'fowner>', 0xee00}}, {@obj_type={'obj_type', 0x3d, 'nodiscard'}}]}, 0x5, 0x405, &(0x7f0000000500)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lseek(0xffffffffffffffff, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1ec) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) write$binfmt_script(r3, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '\xbf\x06I\xee_\xe0#\x00\x00\x00\x00\x00\x00\xf4i\x05\xb0\x84D\xc1\vW\xf1C:SEoC\xfd0\xf2\xf1\xeb{\x1fW\r\xce\xba\xab\xba\xe6\x19\xf7\x9f\x02O5\xb9\xaf\xa7z\x00N_\r\xbc\xf6\xab\x03S\xa5|\x86\x14\x05*\x0e\xa9\xcb\x99\x9fB\x7f\xf3\xff\xd44\x89\x15r-!+H\xbfq1\xe4\xe7\xfc\xfa\xf3\xd1\x1aN\xe5\xbfW\xd3\xdb\x8flc|\xa5\xe6\xd0\xeb\xdbLa\xb8\x8ey\xd5\xac{B\x96\xe7[\xf7\xa7\xff\xb2@\xc4\xd9b\x0f\ng\xb2\x8c)\x15MV\x05\"\xcaJ\'q\x93\x1aH=\xd9l\xa5d \xf5%\xe7\x9c\xebv+$\xc1\x8c\xbds\x1f\v\xe6\xc2\xda\xae\x9a\xa7F^\xae\xdd\xaeGV\xfe\xf7ls\t\x89\xa6\xfa\xb0\xaa-\xc1t\xe9\x96\xa9\xec\xbe\xf1_\xa9\x14\x17x\xaeC\xda7@\xa2\x19\x7f\x8f\xacQ.\xc3\xe4\x17i\x1dB\xb9\x06\"\xb5K\xa2\x0e\x14b\xb8K\xe7%\xe7:\xaan\x86P\xa6\xe3 ?U+\xa5\x1ah\x9e\x82\xfaa\xa7\x8er3\xab$\xaa\x00'/334}]}, 0x15a) close(r3) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13m6.956913921s ago: executing program 0 (id=27): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) preadv(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lseek(0xffffffffffffffff, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1ec) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) write$binfmt_script(r3, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '\xbf\x06I\xee_\xe0#\x00\x00\x00\x00\x00\x00\xf4i\x05\xb0\x84D\xc1\vW\xf1C:SEoC\xfd0\xf2\xf1\xeb{\x1fW\r\xce\xba\xab\xba\xe6\x19\xf7\x9f\x02O5\xb9\xaf\xa7z\x00N_\r\xbc\xf6\xab\x03S\xa5|\x86\x14\x05*\x0e\xa9\xcb\x99\x9fB\x7f\xf3\xff\xd44\x89\x15r-!+H\xbfq1\xe4\xe7\xfc\xfa\xf3\xd1\x1aN\xe5\xbfW\xd3\xdb\x8flc|\xa5\xe6\xd0\xeb\xdbLa\xb8\x8ey\xd5\xac{B\x96\xe7[\xf7\xa7\xff\xb2@\xc4\xd9b\x0f\ng\xb2\x8c)\x15MV\x05\"\xcaJ\'q\x93\x1aH=\xd9l\xa5d \xf5%\xe7\x9c\xebv+$\xc1\x8c\xbds\x1f\v\xe6\xc2\xda\xae\x9a\xa7F^\xae\xdd\xaeGV\xfe\xf7ls\t\x89\xa6\xfa\xb0\xaa-\xc1t\xe9\x96\xa9\xec\xbe\xf1_\xa9\x14\x17x\xaeC\xda7@\xa2\x19\x7f\x8f\xacQ.\xc3\xe4\x17i\x1dB\xb9\x06\"\xb5K\xa2\x0e\x14b\xb8K\xe7%\xe7:\xaan\x86P\xa6\xe3 ?U+\xa5\x1ah\x9e\x82\xfaa\xa7\x8er3\xab$\xaa\x00'/334}]}, 0x15a) close(r3) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13m4.378541482s ago: executing program 0 (id=31): ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x222, &(0x7f00000005c0)="$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") r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@dioread_nolock}]}, 0x1, 0x573, &(0x7f0000000ec0)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setitimer(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4004000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioprio_set$pid(0x3, r1, 0x2004) llistxattr(&(0x7f0000000980)='./file0\x00', 0x0, 0x0) 12m59.669950578s ago: executing program 0 (id=38): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x601c2, 0xe6) ftruncate(r3, 0x8800000) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) fcntl$setstatus(r4, 0x4, 0x42800) sendfile(r4, r3, 0x0, 0x578410e9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) 12m57.475768364s ago: executing program 0 (id=41): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae0000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) syslog(0x2, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x19d1, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x8000000, 0x8000000}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000706e703000000000100000000000300050001000700"], 0x1c}}, 0x0) 12m53.935609651s ago: executing program 0 (id=47): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7], 0x18}, 0x8810) sendmsg$unix(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r7], 0x18}, 0x0) close(r7) 12m37.171068171s ago: executing program 32 (id=47): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7], 0x18}, 0x8810) sendmsg$unix(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r7], 0x18}, 0x0) close(r7) 9m17.604499588s ago: executing program 5 (id=479): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006) 9m16.565980195s ago: executing program 5 (id=484): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000200f100850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) 9m16.27594s ago: executing program 5 (id=487): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x48, 0x30, 0x12f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}}, 0x0) 9m16.085631083s ago: executing program 5 (id=489): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 9m15.094390989s ago: executing program 5 (id=492): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc, 0x8, {0x0, 0x8000000}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 9m14.629637566s ago: executing program 5 (id=495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 8m58.815884241s ago: executing program 33 (id=495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 2m42.682067093s ago: executing program 4 (id=822): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r1, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7fffffff}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 2m15.68473185s ago: executing program 4 (id=822): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r1, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7fffffff}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 1m50.214051433s ago: executing program 4 (id=822): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r1, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7fffffff}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 1m31.26632024s ago: executing program 4 (id=822): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r1, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7fffffff}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 1m1.514041133s ago: executing program 4 (id=822): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r1, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7fffffff}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 37.313430145s ago: executing program 4 (id=822): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r1, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7fffffff}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 18.734197456s ago: executing program 1 (id=2028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a500000023"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x101, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffafff, 0x4, 0x0, 0x33d}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x38, 0x7, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x4004014) 17.168610561s ago: executing program 1 (id=2036): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000440)=[@acquire, @decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) 17.165924251s ago: executing program 2 (id=2037): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) sched_setaffinity(0x0, 0x5, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000002340)={'NETMAP\x00'}, &(0x7f0000002380)=0x1e) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800) mount(&(0x7f0000000300), &(0x7f0000002400)='./file0\x00', &(0x7f0000000180)='zonefs\x00', 0x2202092, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 16.988921254s ago: executing program 1 (id=2038): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e4, &(0x7f0000000180)) 16.933266285s ago: executing program 2 (id=2040): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r2) 16.715085419s ago: executing program 2 (id=2041): syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, 0x0) ioctl$sock_netdev_private(r3, 0x8949, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x400000000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}}, 0x20000000) socket$inet(0x2, 0x2, 0x1) 15.555394508s ago: executing program 6 (id=2042): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1bff7f000000009fa4ccdb76c6a1da0fec3f6582", @ANYRES32, @ANYRES32, @ANYRESOCT=r0], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(0x0, 0x47ffffa, 0x1a6c42) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000380), 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x25, 0x20000000000001, 0x0, &(0x7f0000000100)) 15.554787977s ago: executing program 1 (id=2043): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x1ff, 0x40800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000380)={r3, 0x0, 0x1ff, 0x0, 0x0, [0x0], [0x9, 0x0, 0x0, 0x8], [0x3, 0x20000000, 0x100, 0xd], [0x1000010000000, 0x0, 0x7fffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 15.443348869s ago: executing program 1 (id=2045): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x1}) 14.014295762s ago: executing program 1 (id=2046): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) setresuid(0xee01, 0xee00, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x804) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) io_setup(0x30, 0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0xfff, r4}, 0x38) 12.457021668s ago: executing program 6 (id=2050): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310001001000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b60ac5ea9fca11027d19e93adb603deb92de3141e8fd7ac5b87a2070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba5fc4a5a17d103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e603950c6367587e8ece17d5c6e7c7514386f5125c0e2aa441cda5630047b770bc93868c63db6b6c27786aaff609c902fd65b951074957e967a8a3a405eaafbfafacdb7c2f6f32c251fadcd5a2e34b2efc310dae213aaad007975c26f6001f9b9dd2bf699781e0bbff554630fd9f9fff61813814a65b8e3bb2156ea642519206f26eb7359f732d497c0d4fdb4a735b9a7edd66dbed5f9e04c0fd41bd80a60d6b2508d0318bb94edcbda8ecbd30b320f9bab6efc65de00cdeac3c7383a247"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) sched_setaffinity(0x0, 0x5, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000002340)={'NETMAP\x00'}, &(0x7f0000002380)=0x1e) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800) mount(&(0x7f0000000300), &(0x7f0000002400)='./file0\x00', &(0x7f0000000180)='zonefs\x00', 0x2202092, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 12.422042128s ago: executing program 3 (id=2051): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48e02, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pimreg1\x00', 0x42a5e4b325a47b01}) io_setup(0x2, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x2, r0, &(0x7f0000000080)="00000001000000000000", 0xa, 0x8000}]) 12.267123061s ago: executing program 3 (id=2052): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x10000, 0x1cb, 0x12d5e, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x1, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 12.073337594s ago: executing program 6 (id=2053): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x11, 0xffffffffffffffff, 0x55d99000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) 12.061896574s ago: executing program 3 (id=2054): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e4, &(0x7f0000000180)) 11.10900034s ago: executing program 3 (id=2055): socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r0, &(0x7f0000003100)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x28}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 11.09524314s ago: executing program 6 (id=2056): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0x2, 0x0, 0x80}, {}, {}, 0x0, 0x1000000, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8001, 0x400246}, &(0x7f0000000340), &(0x7f00000006c0)) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r3, 0x3) accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) 10.386930521s ago: executing program 2 (id=2057): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x300000e, 0x4010, r0, 0x2771c000) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x86, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a80)={{{@in6=@ipv4={""/10, ""/2, @loopback}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)={[], [{@fsmagic={'fsmagic', 0x3d, 0xe4a3}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_role={'subj_role', 0x3d, '@\\!/./.\xc5:'}}, {@fsname={'fsname', 0x3d, 'nogrpid'}}, {@subj_type={'subj_type', 0x3d, 'discard'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@uid_lt={'uid<', r5}}, {@dont_appraise}, {@smackfsdef={'smackfsdef', 0x3d, 'iso8859-1'}}, {@obj_role={'obj_role', 0x3d, '$!\xf4'}}, {@dont_hash}]}, 0x0, 0x14f5, &(0x7f0000001580)="$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") r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6873f, 0x1}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) 10.265185004s ago: executing program 2 (id=2058): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310001001000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b60ac5ea9fca11027d19e93adb603deb92de3141e8fd7ac5b87a2070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba5fc4a5a17d103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e603950c6367587e8ece17d5c6e7c7514386f5125c0e2aa441cda5630047b770bc93868c63db6b6c27786aaff609c902fd65b951074957e967a8a3a405eaafbfafacdb7c2f6f32c251fadcd5a2e34b2efc310dae213aaad007975c26f6001f9b9dd2bf699781e0bbff554630fd9f9fff61813814a65b8e3bb2156ea642519206f26eb7359f732d497c0d4fdb4a735b9a7edd66dbed5f9e04c0fd41bd80a60d6b2508d0318bb94edcbda8ecbd30b320f9bab6efc65de00cdeac3c7383a247"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 10.235848313s ago: executing program 3 (id=2059): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x7c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x8, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000003c0)=""/4096, 0x1000) vmsplice(r2, 0x0, 0x0, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000001640), 0x0, &(0x7f00000013c0)=ANY=[@ANYRES16, @ANYBLOB, @ANYRESOCT=r4]) chdir(&(0x7f0000000300)='./file0\x00') openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.impure\x00') r5 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r5, 0x0, 0x0) sendto$inet(r5, &(0x7f00000004c0)="ab", 0xff04, 0xc0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c000000bca30000000000002403000020feffff620af8fff8ffffff71a4f8ff000000001f03000000000000e5000200000000002604fdffff02000014010000033800001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) 9.313749999s ago: executing program 6 (id=2060): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1bff7f000000009fa4ccdb76c6a1da0fec3f6582", @ANYRES32, @ANYRES32, @ANYRESOCT=r0], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(0x0, 0x47ffffa, 0x1a6c42) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000380), 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x25, 0x20000000000001, 0x0, &(0x7f0000000100)) 8.232145257s ago: executing program 2 (id=2061): unshare(0x6a040000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, 0x0}) 7.36083ms ago: executing program 6 (id=2062): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48e02, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pimreg1\x00', 0x42a5e4b325a47b01}) io_setup(0x2, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x2, r0, &(0x7f0000000080)="00000001000000000000", 0xa, 0x8000}]) 0s ago: executing program 3 (id=2063): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) sched_setaffinity(0x0, 0x5, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000002340)={'NETMAP\x00'}, &(0x7f0000002380)=0x1e) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800) mount(&(0x7f0000000300), &(0x7f0000002400)='./file0\x00', &(0x7f0000000180)='zonefs\x00', 0x2202092, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x4eb) kernel console output (not intermixed with test programs): T5237] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.059069][T10454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1341'. [ 610.065550][T10453] bond0 speed is unknown, defaulting to 1000 [ 610.416661][T10453] chnl_net:caif_netlink_parms(): no params data found [ 610.815935][T10453] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.818594][ T4318] Bluetooth: hci2: command 0x0409 tx timeout [ 610.822632][T10453] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.825579][T10453] device bridge_slave_0 entered promiscuous mode [ 610.838834][T10453] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.838914][T10453] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.841329][T10453] device bridge_slave_1 entered promiscuous mode [ 610.941542][T10453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.013526][T10453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.053373][T10453] team0: Port device team_slave_0 added [ 611.113955][T10453] team0: Port device team_slave_1 added [ 611.131179][T10453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.133253][T10453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.148053][T10453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.154203][T10453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.156650][T10453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.165263][T10453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.232676][T10453] device hsr_slave_0 entered promiscuous mode [ 611.300539][T10453] device hsr_slave_1 entered promiscuous mode [ 611.337650][T10453] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 611.340005][T10453] Cannot create hsr debugfs directory [ 611.552719][T10519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.557011][T10519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.556704][T10536] nvme_fabrics: missing parameter 'transport=%s' [ 612.558673][T10536] nvme_fabrics: missing parameter 'nqn=%s' [ 612.776279][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1352'. [ 612.779414][T10541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1352'. [ 612.781994][T10541] netlink: 'syz.1.1352': attribute type 20 has an invalid length. [ 612.897908][ T4318] Bluetooth: hci2: command 0x041b tx timeout [ 612.930766][T10560] loop6: detected capacity change from 0 to 256 [ 612.950172][T10560] exfat: Unknown parameter 'fsmagic' [ 612.952142][T10551] netlink: 'syz.2.1354': attribute type 10 has an invalid length. [ 612.983478][T10560] xt_hashlimit: max too large, truncated to 1048576 [ 613.172077][T10564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1357'. [ 614.317026][T10453] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 614.363235][T10453] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 614.443548][T10453] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 614.489835][T10453] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 614.565433][ T5237] device hsr_slave_0 left promiscuous mode [ 614.628432][ T5237] device hsr_slave_1 left promiscuous mode [ 614.717743][ T5237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.720068][ T5237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.723026][ T5237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.732567][ T5237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.735314][ T5237] device bridge_slave_1 left promiscuous mode [ 614.788803][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.980240][ T4309] Bluetooth: hci2: command 0x040f tx timeout [ 614.985693][ T5237] device bridge_slave_0 left promiscuous mode [ 614.987505][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.228723][ T5237] device veth1_macvtap left promiscuous mode [ 615.235008][ T5237] device veth0_macvtap left promiscuous mode [ 615.236921][ T5237] device veth1_vlan left promiscuous mode [ 615.238950][ T5237] device veth0_vlan left promiscuous mode [ 616.665190][T10613] nvme_fabrics: missing parameter 'transport=%s' [ 616.667089][T10613] nvme_fabrics: missing parameter 'nqn=%s' [ 617.057685][ T4318] Bluetooth: hci2: command 0x0419 tx timeout [ 617.336136][T10628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.339516][T10628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.459923][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 617.461753][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 618.593891][ T5237] team0 (unregistering): Port device team_slave_1 removed [ 618.810566][ T5237] team0 (unregistering): Port device team_slave_0 removed [ 618.998979][ T5237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.259759][ T5237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.981862][ T5237] bond0 (unregistering): Released all slaves [ 622.446358][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1366'. [ 622.449011][T10619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1366'. [ 622.451539][T10619] netlink: 'syz.3.1366': attribute type 20 has an invalid length. [ 622.604076][T10453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.615484][T10453] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.639565][T10453] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 622.642890][T10453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 622.656656][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 622.665905][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 622.684982][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 622.719641][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 622.744601][ T4836] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.746679][ T4836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.780244][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 622.810684][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 622.830424][ T4836] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.832492][ T4836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.850898][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 622.876391][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 622.919382][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 622.944680][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 622.972493][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 623.005826][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 623.032586][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 623.091176][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 623.094269][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 623.097849][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 623.100972][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 623.103540][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 623.106102][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 623.521776][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 623.524248][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 623.538254][T10453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.706435][T10696] loop6: detected capacity change from 0 to 256 [ 623.724670][T10696] exfat: Unknown parameter 'fsmagic' [ 623.747430][T10696] xt_hashlimit: max too large, truncated to 1048576 [ 624.079822][T10704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.087986][T10704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.221969][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 624.224964][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 624.245929][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 624.252510][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 624.274620][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 624.283124][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 624.299501][T10453] device veth0_vlan entered promiscuous mode [ 624.336237][T10453] device veth1_vlan entered promiscuous mode [ 624.416741][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 624.421710][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 624.424679][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 624.438647][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 624.584641][T10453] device veth0_macvtap entered promiscuous mode [ 624.595213][T10453] device veth1_macvtap entered promiscuous mode [ 625.339615][T10722] nvme_fabrics: missing parameter 'transport=%s' [ 625.341389][T10722] nvme_fabrics: missing parameter 'nqn=%s' [ 625.360094][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1386'. [ 625.362567][T10727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1386'. [ 625.364987][T10727] netlink: 'syz.2.1386': attribute type 20 has an invalid length. [ 625.390858][T10453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.393417][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 625.396442][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 625.415261][T10453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.448423][T10453] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.450838][T10453] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.453274][T10453] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.455632][T10453] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.461625][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 625.464586][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 625.600192][ T4452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.604368][ T4452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.617899][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 625.780297][ T4452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.782999][ T4452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.798757][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 627.282477][T10756] bond0 speed is unknown, defaulting to 1000 [ 628.179566][T10774] netlink: 'syz.2.1399': attribute type 10 has an invalid length. [ 628.339754][T10783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.350467][T10783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.966383][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.360129][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.479730][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.669887][ T4318] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 629.674312][ T4318] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 629.677367][ T4318] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 629.685775][ T4318] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 629.688327][ T4318] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 629.691135][ T4318] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 629.766916][T10812] loop6: detected capacity change from 0 to 256 [ 629.779331][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.789558][T10812] exfat: Unknown parameter 'fsmagic' [ 629.805598][T10812] xt_hashlimit: max too large, truncated to 1048576 [ 630.129372][T10809] bond0 speed is unknown, defaulting to 1000 [ 630.622929][T10809] chnl_net:caif_netlink_parms(): no params data found [ 630.973940][T10809] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.989611][T10809] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.004512][T10809] device bridge_slave_0 entered promiscuous mode [ 631.080632][T10809] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.083124][T10809] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.085920][T10809] device bridge_slave_1 entered promiscuous mode [ 631.206336][T10809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.218268][T10809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.382912][T10809] team0: Port device team_slave_0 added [ 631.388599][T10809] team0: Port device team_slave_1 added [ 631.513578][T10809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.515968][T10809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.527742][T10809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.543081][T10809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.545048][T10809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.579666][T10809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.730015][T10809] device hsr_slave_0 entered promiscuous mode [ 631.758127][T10809] device hsr_slave_1 entered promiscuous mode [ 631.768113][T10809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 631.770219][T10809] Cannot create hsr debugfs directory [ 631.787963][ T4318] Bluetooth: hci2: command 0x0409 tx timeout [ 632.196437][T10862] netlink: 'syz.2.1420': attribute type 10 has an invalid length. [ 633.058746][T10892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.254217][T10892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.787299][T10894] nvme_fabrics: missing parameter 'transport=%s' [ 633.789208][T10894] nvme_fabrics: missing parameter 'nqn=%s' [ 633.857779][ T4318] Bluetooth: hci2: command 0x041b tx timeout [ 633.972317][ T11] device hsr_slave_0 left promiscuous mode [ 633.998186][ T11] device hsr_slave_1 left promiscuous mode [ 634.097773][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.100174][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.103162][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.107535][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.115046][ T11] device bridge_slave_1 left promiscuous mode [ 634.119213][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.178728][ T11] device bridge_slave_0 left promiscuous mode [ 634.180613][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.010644][T10909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1430'. [ 635.060068][ T11] device veth1_macvtap left promiscuous mode [ 635.061899][ T11] device veth0_macvtap left promiscuous mode [ 635.063599][ T11] device veth1_vlan left promiscuous mode [ 635.065310][ T11] device veth0_vlan left promiscuous mode [ 635.938053][ T4309] Bluetooth: hci2: command 0x040f tx timeout [ 638.027735][ T4318] Bluetooth: hci2: command 0x0419 tx timeout [ 638.253149][ T11] team0 (unregistering): Port device team_slave_1 removed [ 638.450831][ T11] team0 (unregistering): Port device team_slave_0 removed [ 638.680865][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.496812][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.887822][T10952] xt_hashlimit: max too large, truncated to 1048576 [ 641.964151][T10954] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1443'. [ 642.077295][T10960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.080630][T10960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.509371][ T11] bond0 (unregistering): Released all slaves [ 642.752007][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1427'. [ 642.754519][T10899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1427'. [ 642.756968][T10899] netlink: 'syz.2.1427': attribute type 20 has an invalid length. [ 642.866636][T10934] netlink: 'syz.6.1437': attribute type 10 has an invalid length. [ 642.902010][T10971] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1447'. [ 645.345185][T11008] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1456'. [ 645.515322][T11012] loop2: detected capacity change from 0 to 256 [ 645.517851][T11012] exfat: Unknown parameter 'fsmagic' [ 646.013587][T11012] xt_hashlimit: max too large, truncated to 1048576 [ 646.480023][T11014] nvme_fabrics: missing parameter 'transport=%s' [ 646.481949][T11014] nvme_fabrics: missing parameter 'nqn=%s' [ 646.484818][T11017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1457'. [ 646.487197][T11017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1457'. [ 646.489824][T11017] netlink: 'syz.3.1457': attribute type 20 has an invalid length. [ 646.963201][T11033] netlink: 'syz.1.1460': attribute type 10 has an invalid length. [ 646.987083][T10809] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 648.728087][T10809] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 649.079821][T10809] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 649.135809][T10809] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 649.241382][T11076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.247281][T11076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.306472][T10809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.321046][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 649.324149][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 649.338476][T10809] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.344571][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 649.353283][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 649.356298][ T4682] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.358458][ T4682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.372131][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 649.375090][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 649.378429][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 649.381304][ T4682] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.383380][ T4682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.385919][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 649.402459][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 649.405608][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 649.412197][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 649.415327][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 649.420305][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 649.431332][T10809] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 649.434523][T10809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 649.438934][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 649.441776][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 649.444766][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 649.449747][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 649.452901][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 649.463815][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 649.591405][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 649.594167][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 649.604906][T10809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.607841][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1469'. [ 650.610426][T11118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1469'. [ 650.612880][T11118] netlink: 'syz.1.1469': attribute type 20 has an invalid length. [ 650.618928][T11113] nvme_fabrics: missing parameter 'transport=%s' [ 650.620671][T11113] nvme_fabrics: missing parameter 'nqn=%s' [ 650.731304][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1470'. [ 650.953231][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 650.956371][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 651.000724][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 651.003584][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 651.010388][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 651.106849][T11145] loop6: detected capacity change from 0 to 256 [ 651.112687][T11145] exfat: Unknown parameter 'fsmagic' [ 651.239177][T11145] xt_hashlimit: max too large, truncated to 1048576 [ 651.410846][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 651.742531][T10809] device veth0_vlan entered promiscuous mode [ 651.881548][T10809] device veth1_vlan entered promiscuous mode [ 652.174893][T10809] device veth0_macvtap entered promiscuous mode [ 652.211358][T10809] device veth1_macvtap entered promiscuous mode [ 652.309875][T10809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.345142][T10809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.385302][T10809] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.404371][T10809] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.423382][T10809] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.441080][T10809] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.437931][T11168] nvme_fabrics: missing parameter 'transport=%s' [ 653.439692][T11168] nvme_fabrics: missing parameter 'nqn=%s' [ 653.545832][ T4525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.552022][ T4525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.607890][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 653.610756][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 653.613618][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 653.616086][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 653.624077][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 653.626875][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 653.629689][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 653.632373][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 653.634884][T11154] netlink: 'syz.1.1478': attribute type 10 has an invalid length. [ 653.637299][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 653.856077][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1481'. [ 653.858710][T11171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1481'. [ 653.861080][T11171] netlink: 'syz.2.1481': attribute type 20 has an invalid length. [ 653.960769][ T4836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.963161][ T4836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.988532][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 654.011519][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1483'. [ 654.207492][T11192] 9pnet_fd: Insufficient options for proto=fd [ 654.830046][T11202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.839340][T11202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.038168][T11207] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1491'. [ 655.240546][T11212] xt_hashlimit: max too large, truncated to 1048576 [ 656.032013][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1494'. [ 656.947971][T11219] nvme_fabrics: missing parameter 'transport=%s' [ 656.949735][T11219] nvme_fabrics: missing parameter 'nqn=%s' [ 656.952647][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1493'. [ 656.955268][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1493'. [ 656.957985][T11222] netlink: 'syz.6.1493': attribute type 20 has an invalid length. [ 657.230453][T11232] 9pnet_fd: Insufficient options for proto=fd [ 657.313245][T11237] netlink: 'syz.6.1498': attribute type 10 has an invalid length. [ 657.729644][T11245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1501'. [ 658.927084][T11256] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1503'. [ 659.122542][T11266] 9pnet_fd: Insufficient options for proto=fd [ 659.310323][T11277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.314811][T11277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.027974][T11287] ax25_connect(): syz.6.1515 uses autobind, please contact jreuter@yaina.de [ 660.745563][ T5312] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.190225][ T5312] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.280729][ T5312] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.379414][ T5312] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.851365][ T4309] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 661.856159][ T4309] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 661.866317][ T47] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 661.872358][ T4309] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 661.875086][ T4309] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 661.877682][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 662.054801][T11307] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1519'. [ 662.678084][T11313] 9pnet_fd: Insufficient options for proto=fd [ 663.273471][T11342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.277382][T11342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.362182][T11305] bond0 speed is unknown, defaulting to 1000 [ 663.674305][T11305] chnl_net:caif_netlink_parms(): no params data found [ 663.835364][T11305] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.841150][T11305] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.847314][T11305] device bridge_slave_0 entered promiscuous mode [ 663.861781][T11305] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.866715][T11305] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.875655][T11305] device bridge_slave_1 entered promiscuous mode [ 663.939033][ T4318] Bluetooth: hci2: command 0x0409 tx timeout [ 663.984718][T11305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.042307][T11305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.079781][T11305] team0: Port device team_slave_0 added [ 664.083532][T11305] team0: Port device team_slave_1 added [ 664.099374][T11305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.101477][T11305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.109501][T11305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.114120][T11305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.116179][T11305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.124258][T11305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.281545][T11305] device hsr_slave_0 entered promiscuous mode [ 664.302577][T11384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.308362][T11384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.319114][T11305] device hsr_slave_1 entered promiscuous mode [ 664.358003][T11305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 664.361930][T11305] Cannot create hsr debugfs directory [ 664.363720][T11380] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1532'. [ 664.405665][T11391] 9pnet_fd: Insufficient options for proto=fd [ 666.417695][ T4318] Bluetooth: hci2: command 0x041b tx timeout [ 666.565907][T11446] 9pnet_fd: Insufficient options for proto=fd [ 666.707351][ T5312] device hsr_slave_0 left promiscuous mode [ 666.867975][ T5312] device hsr_slave_1 left promiscuous mode [ 666.947855][ T5312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.953126][ T5312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.956076][ T5312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.959065][ T5312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.963928][ T5312] device bridge_slave_1 left promiscuous mode [ 666.967799][ T5312] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.008956][ T5312] device bridge_slave_0 left promiscuous mode [ 667.014292][ T5312] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.209834][ T5312] device veth1_macvtap left promiscuous mode [ 667.211507][ T5312] device veth0_macvtap left promiscuous mode [ 667.213215][ T5312] device veth1_vlan left promiscuous mode [ 667.214884][ T5312] device veth0_vlan left promiscuous mode [ 668.506978][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 669.634910][ T5312] team0 (unregistering): Port device team_slave_1 removed [ 669.819947][ T5312] team0 (unregistering): Port device team_slave_0 removed [ 670.018506][ T5312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 670.278488][ T5312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 670.578627][ T4318] Bluetooth: hci2: command 0x0419 tx timeout [ 671.064423][T11487] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 671.066169][T11487] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 671.068533][T11487] vhci_hcd vhci_hcd.0: Device attached [ 671.075450][T11488] vhci_hcd: connection closed [ 671.076524][ T11] vhci_hcd: stop threads [ 671.080503][ T11] vhci_hcd: release socket [ 671.081679][ T11] vhci_hcd: disconnect device [ 671.769726][T11494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.772123][T11494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.850229][ T5312] bond0 (unregistering): Released all slaves [ 673.080744][T11451] netlink: 'syz.1.1548': attribute type 10 has an invalid length. [ 673.402308][T11507] input: syz1 as /devices/virtual/input/input7 [ 673.750239][ T27] audit: type=1326 audit(2000000393.241:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.3.1564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd95aba8 code=0x7ffc0000 [ 673.766864][ T27] audit: type=1326 audit(2000000393.251:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.3.1564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbd9590d4 code=0x7ffc0000 [ 673.837166][ T27] audit: type=1326 audit(2000000393.251:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.3.1564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffbd95c70c code=0x7ffc0000 [ 673.883790][ T27] audit: type=1326 audit(2000000393.251:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.3.1564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffbd95aba8 code=0x7ffc0000 [ 673.930846][ T27] audit: type=1326 audit(2000000393.251:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.3.1564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffbd95c70c code=0x7ffc0000 [ 673.965800][ T27] audit: type=1326 audit(2000000393.251:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.3.1564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffbd9594ac code=0x7ffc0000 [ 674.026564][ T27] audit: type=1326 audit(2000000393.251:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.3.1564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd95aba8 code=0x7ffc0000 [ 674.058927][ T27] audit: type=1326 audit(2000000393.251:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.3.1564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=55 compat=0 ip=0xffffbd95aba8 code=0x7ffc0000 [ 674.081419][ T27] audit: type=1326 audit(2000000393.251:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.3.1564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd95aba8 code=0x7ffc0000 [ 674.103374][ T27] audit: type=1326 audit(2000000393.251:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.3.1564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffffbd95aba8 code=0x7ffc0000 [ 674.522564][T11305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 674.591585][T11305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 674.685551][T11305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 674.740047][T11305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 674.926419][T11305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.936627][T11305] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.951336][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 674.954257][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 674.962469][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 674.965907][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 674.970095][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.972127][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.974896][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 674.979252][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 674.982077][ T5156] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.984102][ T5156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.986898][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 674.992336][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 675.022720][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 675.025776][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 675.054470][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 675.061483][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 675.066779][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 675.074482][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 675.080688][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 675.094233][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 675.100718][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 675.103449][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 675.108694][T11305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 675.899380][T11549] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1570'. [ 677.035928][T11569] netlink: 'syz.3.1573': attribute type 1 has an invalid length. [ 677.060076][T11569] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 677.062463][T11569] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 677.065025][T11569] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 677.067400][T11569] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 677.071400][T11569] bond1: (slave geneve2): making interface the new active one [ 677.075286][T11569] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 677.078808][T11570] netlink: 'syz.1.1572': attribute type 10 has an invalid length. [ 677.110197][T11569] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1573'. [ 677.119172][T11569] 8021q: adding VLAN 0 to HW filter on device bond1 [ 677.255776][T11305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.275370][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 677.277562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 677.299675][T11582] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1575'. [ 677.984869][T11601] bond0 speed is unknown, defaulting to 1000 [ 678.041713][T11604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.052723][T11604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.171480][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 678.174422][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 678.222671][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 678.225412][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 678.232159][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 678.236928][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 678.254048][T11305] device veth0_vlan entered promiscuous mode [ 678.261583][T11305] device veth1_vlan entered promiscuous mode [ 678.298590][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 678.301379][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 678.304064][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 678.314445][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 678.323422][T11305] device veth0_macvtap entered promiscuous mode [ 678.344125][T11305] device veth1_macvtap entered promiscuous mode [ 678.393813][T11305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.403612][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 678.411553][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 678.414387][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 678.426570][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 678.442549][T11305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.447383][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 678.450856][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 678.462377][T11305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.468809][T11305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.474813][T11305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.488938][T11305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.650392][ T4812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.657304][ T4812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.676758][ T193] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 678.717156][ T193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.719867][ T193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.726343][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 678.899681][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 678.901615][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 679.835540][T11642] can0: slcan on ttyprintk. [ 680.467801][T11635] can0 (unregistered): slcan off ttyprintk. [ 680.891484][T11662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.900641][T11662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.425987][T11680] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1585'. [ 681.522734][T11680] bond0 speed is unknown, defaulting to 1000 [ 682.302983][T11695] netlink: 'syz.2.1587': attribute type 10 has an invalid length. [ 682.535342][T11716] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1590'. [ 685.054746][T11746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1593'. [ 685.057352][T11746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1593'. [ 685.191916][T11744] nvme_fabrics: missing parameter 'transport=%s' [ 685.193642][T11744] nvme_fabrics: missing parameter 'nqn=%s' [ 685.770722][ T4812] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.159318][ T4812] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.278037][ T4812] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.298824][T11757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1597'. [ 686.304413][T11757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1597'. [ 686.476345][ T4812] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.510384][ T4318] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 686.514496][ T4318] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 686.517978][ T4318] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 686.531509][ T4318] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 686.536179][ T4318] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 686.538734][ T4318] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 687.658321][T11772] bond0 speed is unknown, defaulting to 1000 [ 688.199773][T11772] chnl_net:caif_netlink_parms(): no params data found [ 688.448278][T11772] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.453556][T11772] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.463191][T11772] device bridge_slave_0 entered promiscuous mode [ 688.532771][T11772] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.535008][T11772] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.544204][T11772] device bridge_slave_1 entered promiscuous mode [ 688.577847][ T47] Bluetooth: hci2: command 0x0409 tx timeout [ 688.755319][T11772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.492251][T11772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.660413][T11772] team0: Port device team_slave_0 added [ 689.758810][T11772] team0: Port device team_slave_1 added [ 689.846167][T11772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.858597][T11772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.865557][T11772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.879651][T11772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.881569][T11772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.897718][T11772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.138973][T11855] nvme_fabrics: missing parameter 'transport=%s' [ 690.140898][T11855] nvme_fabrics: missing parameter 'nqn=%s' [ 690.289696][T11855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1607'. [ 690.292185][T11855] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1607'. [ 690.410863][T11772] device hsr_slave_0 entered promiscuous mode [ 690.449052][T11772] device hsr_slave_1 entered promiscuous mode [ 690.489549][T11772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 690.491749][T11772] Cannot create hsr debugfs directory [ 690.657734][ T47] Bluetooth: hci2: command 0x041b tx timeout [ 691.053292][ T4812] device hsr_slave_0 left promiscuous mode [ 691.100090][ T4812] device hsr_slave_1 left promiscuous mode [ 691.277797][ T4812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 691.279903][ T4812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 691.282578][ T4812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 691.284730][ T4812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.298312][ T4812] device bridge_slave_1 left promiscuous mode [ 691.300828][ T4812] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.532083][ T4812] device bridge_slave_0 left promiscuous mode [ 691.603488][ T4812] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.229382][ T4812] device veth1_macvtap left promiscuous mode [ 692.231154][ T4812] device veth0_macvtap left promiscuous mode [ 692.233130][ T4812] device veth1_vlan left promiscuous mode [ 692.244999][ T4812] device veth0_vlan left promiscuous mode [ 692.787835][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 692.916835][T11909] netlink: set zone limit has 8 unknown bytes [ 693.293085][T11907] slcan: can't register candev [ 693.958098][T11927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.960656][T11927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.817671][ T47] Bluetooth: hci2: command 0x0419 tx timeout [ 695.232131][ T4812] team0 (unregistering): Port device team_slave_1 removed [ 695.430977][ T4812] team0 (unregistering): Port device team_slave_0 removed [ 695.628451][ T4812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.870264][ T4812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 698.619474][ T4812] bond0 (unregistering): Released all slaves [ 698.895984][T11924] device bridge_slave_0 left promiscuous mode [ 698.900691][T11924] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.943267][T11924] device bridge_slave_1 left promiscuous mode [ 698.945168][T11924] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.979709][T11924] bond0: (slave bond_slave_0): Releasing backup interface [ 699.026527][T11924] bond0: (slave bond_slave_1): Releasing backup interface [ 699.074440][T11924] team0: Port device team_slave_0 removed [ 699.077312][T11924] team0: Port device team_slave_1 removed [ 699.082656][T11925] netlink: 'syz.1.1626': attribute type 10 has an invalid length. [ 699.090030][T11925] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 700.169669][T11961] nvme_fabrics: missing parameter 'transport=%s' [ 700.171419][T11961] nvme_fabrics: missing parameter 'nqn=%s' [ 700.219484][T11964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1630'. [ 700.221945][T11964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1630'. [ 701.396081][T11989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.400891][T11989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.411548][T11772] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 702.531249][T11772] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 702.592373][T11772] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 702.629846][T11772] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 703.560187][T12028] nvme_fabrics: missing parameter 'transport=%s' [ 703.562443][T12028] nvme_fabrics: missing parameter 'nqn=%s' [ 703.707272][T11772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.739689][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 703.744081][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 703.752494][T11772] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.773145][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 703.776116][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 703.780433][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.782415][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.800984][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 703.809276][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 703.818987][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 703.830183][ T5156] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.832257][ T5156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.838701][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 703.865976][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 703.875783][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 703.898398][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 703.902467][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 703.909929][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 703.924904][T11772] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 703.934295][T11772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 703.939058][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 703.942309][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 703.945137][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 703.955200][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 703.958202][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 703.970945][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 705.212297][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 705.214553][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 705.237848][T11772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.291885][T12076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.319486][T12076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.626336][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 705.631104][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 705.661107][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 705.665142][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 705.672364][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 705.679158][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 705.686217][T11772] device veth0_vlan entered promiscuous mode [ 705.706390][T11772] device veth1_vlan entered promiscuous mode [ 705.745045][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 705.749609][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 705.752521][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 705.759838][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 705.770249][T11772] device veth0_macvtap entered promiscuous mode [ 705.776759][T11772] device veth1_macvtap entered promiscuous mode [ 705.812148][T11772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.822643][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 705.829752][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 705.840266][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 705.849764][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 705.860482][T11772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.862655][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 705.866028][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 705.880584][T11772] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.883015][T11772] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.885374][T11772] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.899834][T11772] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.997251][ T4453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.000313][ T4453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.018282][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 706.056152][ T4453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.060905][ T4453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.081036][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 706.203880][T12110] nvme_fabrics: missing parameter 'transport=%s' [ 706.205808][T12110] nvme_fabrics: missing parameter 'nqn=%s' [ 707.182547][T12144] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1661'. [ 707.186191][T12144] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1661'. [ 708.944344][T12171] lo speed is unknown, defaulting to 1000 [ 708.951940][T12171] lo speed is unknown, defaulting to 1000 [ 708.953761][T12171] lo speed is unknown, defaulting to 1000 [ 708.999264][T12171] infiniband sz1: set down [ 709.000660][ T4847] lo speed is unknown, defaulting to 1000 [ 709.002699][T12171] infiniband sz1: added lo [ 709.031913][T12171] RDS/IB: sz1: added [ 709.033059][T12171] smc: adding ib device sz1 with port count 1 [ 709.034854][T12171] smc: ib device sz1 port 1 has pnetid [ 709.036581][ T4847] lo speed is unknown, defaulting to 1000 [ 709.042301][T12171] lo speed is unknown, defaulting to 1000 [ 709.075841][T12188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.082764][T12188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.113780][T12171] lo speed is unknown, defaulting to 1000 [ 709.150391][T12171] lo speed is unknown, defaulting to 1000 [ 709.205231][T12171] lo speed is unknown, defaulting to 1000 [ 709.244738][T12171] lo speed is unknown, defaulting to 1000 [ 709.564782][T12194] nvme_fabrics: missing parameter 'transport=%s' [ 709.566538][T12194] nvme_fabrics: missing parameter 'nqn=%s' [ 710.273054][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.094016][T12212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.106246][T12212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.143271][ T47] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 711.156263][ T47] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 711.167341][ T47] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 711.170184][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 711.172717][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 711.175129][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 711.272186][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.451989][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.491694][T12215] bond0 speed is unknown, defaulting to 1000 [ 711.504461][T12215] lo speed is unknown, defaulting to 1000 [ 712.312582][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.071417][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1690'. [ 713.074054][T12257] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1690'. [ 713.076675][T12257] netlink: 'syz.6.1690': attribute type 20 has an invalid length. [ 713.273437][T12251] nvme_fabrics: missing parameter 'transport=%s' [ 713.275229][T12251] nvme_fabrics: missing parameter 'nqn=%s' [ 713.277957][ T4309] Bluetooth: hci2: command 0x0409 tx timeout [ 713.458671][T12215] chnl_net:caif_netlink_parms(): no params data found [ 713.611736][T12215] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.623946][T12215] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.626549][T12215] device bridge_slave_0 entered promiscuous mode [ 713.801736][T12215] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.803801][T12215] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.806546][T12215] device bridge_slave_1 entered promiscuous mode [ 714.004575][T12215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.015112][T12215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.113434][T12215] team0: Port device team_slave_0 added [ 714.523716][T12215] team0: Port device team_slave_1 added [ 714.695354][T12215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.697813][T12215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.705558][T12215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.709691][T12300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.718117][T12215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.720250][T12300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.722678][T12215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.733025][T12215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.069965][T12215] device hsr_slave_0 entered promiscuous mode [ 715.168062][T12215] device hsr_slave_1 entered promiscuous mode [ 715.218571][T12215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 715.222676][T12215] Cannot create hsr debugfs directory [ 715.318267][ T4309] Bluetooth: hci2: command 0x041b tx timeout [ 716.831142][T12339] nvme_fabrics: missing parameter 'transport=%s' [ 716.832995][T12339] nvme_fabrics: missing parameter 'nqn=%s' [ 717.465387][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1704'. [ 717.468203][T12342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1704'. [ 717.488146][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 717.522717][T12342] netlink: 'syz.2.1704': attribute type 20 has an invalid length. [ 718.722551][ T11] device hsr_slave_0 left promiscuous mode [ 718.818630][ T11] device hsr_slave_1 left promiscuous mode [ 719.537707][ T4309] Bluetooth: hci2: command 0x0419 tx timeout [ 719.638075][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 719.640367][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.643025][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.645155][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.663869][ T11] device bridge_slave_1 left promiscuous mode [ 719.665781][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.719990][ T11] device bridge_slave_0 left promiscuous mode [ 719.721973][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.877953][ T11] device veth1_macvtap left promiscuous mode [ 719.879717][ T11] device veth0_macvtap left promiscuous mode [ 719.881367][ T11] device veth1_vlan left promiscuous mode [ 719.883075][ T11] device veth0_vlan left promiscuous mode [ 720.388816][T12422] netlink: set zone limit has 8 unknown bytes [ 720.803051][T12420] slcan: can't register candev [ 721.824911][T12428] nvme_fabrics: missing parameter 'transport=%s' [ 721.826879][T12428] nvme_fabrics: missing parameter 'nqn=%s' [ 722.242241][T12438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.245549][T12438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.803477][ T11] team0 (unregistering): Port device team_slave_1 removed [ 724.009184][ T11] team0 (unregistering): Port device team_slave_0 removed [ 724.209620][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.439903][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 727.239402][ T11] bond0 (unregistering): Released all slaves [ 727.584714][T12215] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 727.692812][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1720'. [ 727.695333][T12433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1720'. [ 727.698036][T12433] netlink: 'syz.3.1720': attribute type 20 has an invalid length. [ 727.777065][T12215] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 727.821346][T12215] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 727.851467][T12215] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 728.301130][T12482] can0: slcan on ttyprintk. [ 728.364584][T12482] netlink: set zone limit has 8 unknown bytes [ 728.800226][T12466] can0 (unregistered): slcan off ttyprintk. [ 728.916315][T12215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.943600][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 728.945280][T12489] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 728.946173][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 728.954715][T12215] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.983275][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 728.986244][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 728.989415][ T4451] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.991418][ T4451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.997306][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 729.000458][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 729.007958][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 729.018548][ T4451] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.020609][ T4451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.030305][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 729.038745][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 729.041698][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 729.062412][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 729.087460][T12494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.094753][T12215] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 729.098092][T12215] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 729.104080][T12494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.124593][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 729.127333][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 729.130535][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 729.133296][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 729.135936][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 729.158753][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 729.177959][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 729.189491][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 729.496341][T12215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.509423][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 729.511615][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 729.958021][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 729.961074][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 730.009545][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 730.012550][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 730.015854][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 730.020830][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 730.050367][T12215] device veth0_vlan entered promiscuous mode [ 730.070597][T12215] device veth1_vlan entered promiscuous mode [ 730.122068][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 730.124708][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 730.127285][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 730.149716][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 730.158669][T12215] device veth0_macvtap entered promiscuous mode [ 730.166554][T12215] device veth1_macvtap entered promiscuous mode [ 730.204283][T12215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.204412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 730.204915][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 730.205350][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 730.205769][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 730.217250][T12215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.224131][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 730.230133][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 730.244012][T12215] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.255006][T12215] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.269328][T12215] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.271863][T12215] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.405370][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.405428][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.409030][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 730.456028][ T4668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.456077][ T4668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.459685][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 732.065895][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1740'. [ 732.068608][T12567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1740'. [ 732.071124][T12567] netlink: 'syz.3.1740': attribute type 20 has an invalid length. [ 732.161302][T12561] nvme_fabrics: missing parameter 'transport=%s' [ 732.163171][T12561] nvme_fabrics: missing parameter 'nqn=%s' [ 732.450574][T12576] netlink: 'syz.3.1743': attribute type 10 has an invalid length. [ 732.484632][T12576] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.498106][T12576] bond0: (slave team0): Enslaving as an active interface with an up link [ 732.682192][T12581] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1744'. [ 734.797699][T12619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1753'. [ 734.800561][T12619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1753'. [ 734.803344][T12619] netlink: 'syz.1.1753': attribute type 20 has an invalid length. [ 734.903759][T12613] nvme_fabrics: missing parameter 'transport=%s' [ 734.905704][T12613] nvme_fabrics: missing parameter 'nqn=%s' [ 735.673356][ T4848] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.439472][ T4848] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.531615][ T4848] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.640308][ T4848] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.858694][ T4309] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 736.864527][ T4309] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 736.867786][ T4309] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 736.891419][ T4309] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 736.898724][ T4309] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 736.899171][T12643] xt_hashlimit: max too large, truncated to 1048576 [ 736.902870][ T4318] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 737.356191][T12642] bond0 speed is unknown, defaulting to 1000 [ 737.379406][T12642] lo speed is unknown, defaulting to 1000 [ 737.452375][T12661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1762'. [ 738.075761][T12642] chnl_net:caif_netlink_parms(): no params data found [ 738.348586][T12642] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.367867][T12642] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.378233][T12642] device bridge_slave_0 entered promiscuous mode [ 738.460845][T12642] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.462871][T12642] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.465870][T12642] device bridge_slave_1 entered promiscuous mode [ 738.519865][T12642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.582582][T12642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.717069][T12642] team0: Port device team_slave_0 added [ 738.723719][T12642] team0: Port device team_slave_1 added [ 738.844187][T12642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.846183][T12642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.878111][T12642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.953598][T12642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.955502][T12642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.973120][T12642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.977842][ T4318] Bluetooth: hci2: command 0x0409 tx timeout [ 739.151539][T12642] device hsr_slave_0 entered promiscuous mode [ 739.170030][T12642] device hsr_slave_1 entered promiscuous mode [ 739.218331][T12642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 739.220633][T12642] Cannot create hsr debugfs directory [ 740.338859][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 740.340829][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 740.396658][ T4848] device hsr_slave_0 left promiscuous mode [ 740.458065][ T4848] device hsr_slave_1 left promiscuous mode [ 740.527735][ T4848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.529886][ T4848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.540418][ T4848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.542686][ T4848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.545388][ T4848] device bridge_slave_1 left promiscuous mode [ 740.550760][ T4848] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.608909][ T4848] device bridge_slave_0 left promiscuous mode [ 740.610923][ T4848] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.768361][ T4848] device veth1_macvtap left promiscuous mode [ 740.770125][ T4848] device veth0_macvtap left promiscuous mode [ 740.771915][ T4848] device veth1_vlan left promiscuous mode [ 740.773694][ T4848] device veth0_vlan left promiscuous mode [ 741.057783][ T4318] Bluetooth: hci2: command 0x041b tx timeout [ 743.137747][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 743.633127][ T4848] team0 (unregistering): Port device team_slave_1 removed [ 743.800108][ T4848] team0 (unregistering): Port device team_slave_0 removed [ 743.999110][ T4848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.238531][ T4848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.217751][ T4318] Bluetooth: hci2: command 0x0419 tx timeout [ 747.050204][ T4848] bond0 (unregistering): Released all slaves [ 747.314198][T12761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1775'. [ 747.374140][T12771] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1777'. [ 747.388999][T12771] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1777'. [ 748.232599][T12642] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 748.272259][T12642] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 748.319502][T12642] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 748.364446][T12642] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 748.709416][T12642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.730024][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 748.732858][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 748.751723][T12642] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.770652][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 748.773847][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 748.776688][ T4453] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.779052][ T4453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.794249][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 748.814958][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 748.824047][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 748.834118][ T4453] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.836467][ T4453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.854130][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 748.880213][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 748.890141][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 748.895609][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 748.906430][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 748.925325][T12642] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 748.948150][T12642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 748.952821][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 748.956209][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 748.959812][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 748.978493][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 748.989866][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 748.998510][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 749.013078][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 749.346641][T12642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.354308][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 749.356631][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 749.838179][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 749.842224][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 749.914793][T12642] device veth0_vlan entered promiscuous mode [ 749.921895][T12642] device veth1_vlan entered promiscuous mode [ 749.940018][T12642] device veth0_macvtap entered promiscuous mode [ 749.944842][T12642] device veth1_macvtap entered promiscuous mode [ 749.993506][T12642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.020556][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 750.023708][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 750.033780][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 750.043015][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 750.056098][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 750.067474][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 750.085067][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 750.096004][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 750.107274][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 750.136135][T12642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 750.140241][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 750.143037][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 750.146344][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 750.159522][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 750.179091][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 750.205449][T12642] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.210598][T12642] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.216540][T12642] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.227558][T12642] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.327989][T12870] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1790'. [ 750.351167][T12870] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1790'. [ 750.381240][T12859] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1788'. [ 750.392049][ T4848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.394773][ T4848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.403075][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 750.454321][ T4682] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.457007][ T4682] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.467404][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 752.048693][T12911] fuse: Bad value for 'fd' [ 752.599439][T12942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1804'. [ 754.017732][T12979] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1808'. [ 754.020520][T12979] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1808'. [ 754.023371][T12979] netlink: 'syz.6.1808': attribute type 20 has an invalid length. [ 754.753390][ T4451] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.551330][ T4451] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.631635][ T4451] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.729533][ T4451] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.750279][T12986] fuse: Bad value for 'fd' [ 755.882787][ T4318] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 755.887413][ T4318] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 755.891254][ T4318] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 755.893960][ T4318] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 755.899220][ T4318] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 755.901668][ T4318] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 756.309369][T13014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1817'. [ 756.366186][T12994] bond0 speed is unknown, defaulting to 1000 [ 756.375274][T12994] lo speed is unknown, defaulting to 1000 [ 757.174751][T12994] chnl_net:caif_netlink_parms(): no params data found [ 758.060402][ T47] Bluetooth: hci2: command 0x0409 tx timeout [ 758.545339][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1820'. [ 758.547892][T13053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1820'. [ 758.550257][T13053] netlink: 'syz.1.1820': attribute type 20 has an invalid length. [ 758.793521][T13066] fuse: Bad value for 'fd' [ 758.951408][T12994] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.955972][T12994] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.970062][T12994] device bridge_slave_0 entered promiscuous mode [ 759.113530][T12994] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.116276][T12994] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.119934][T12994] device bridge_slave_1 entered promiscuous mode [ 759.302311][T12994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.544834][T12994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.606232][T13097] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1832'. [ 759.754624][T12994] team0: Port device team_slave_0 added [ 759.760812][T12994] team0: Port device team_slave_1 added [ 760.097770][ T4318] Bluetooth: hci2: command 0x041b tx timeout [ 762.233327][ T4318] Bluetooth: hci2: command 0x040f tx timeout [ 762.514698][T12994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.516717][T12994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.537721][T12994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.542478][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1835'. [ 762.545165][T13126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1835'. [ 762.547871][T13126] netlink: 'syz.2.1835': attribute type 20 has an invalid length. [ 762.605597][T12994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.623504][T12994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.674504][T12994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.883990][T13148] netlink: set zone limit has 8 unknown bytes [ 763.214516][T12994] device hsr_slave_0 entered promiscuous mode [ 763.258192][T12994] device hsr_slave_1 entered promiscuous mode [ 763.317771][T12994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 763.322415][T12994] Cannot create hsr debugfs directory [ 763.715289][T13152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1845'. [ 764.033488][ T4451] device hsr_slave_0 left promiscuous mode [ 764.178367][ T4451] device hsr_slave_1 left promiscuous mode [ 764.291191][ T47] Bluetooth: hci2: command 0x0419 tx timeout [ 764.548949][ T4451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 764.553358][ T4451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 764.635003][ T4451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.646611][ T4451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.936425][ T4451] device bridge_slave_1 left promiscuous mode [ 764.945977][ T4451] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.070277][ T4451] device bridge_slave_0 left promiscuous mode [ 765.073605][ T4451] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.248064][ T4451] device veth1_macvtap left promiscuous mode [ 765.249982][ T4451] device veth0_macvtap left promiscuous mode [ 765.251871][ T4451] device veth1_vlan left promiscuous mode [ 765.253640][ T4451] device veth0_vlan left promiscuous mode [ 766.358848][T13213] netlink: set zone limit has 8 unknown bytes [ 768.702306][ T4451] team0 (unregistering): Port device team_slave_1 removed [ 768.901470][ T4451] team0 (unregistering): Port device team_slave_0 removed [ 769.109131][ T4451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 769.348739][ T4451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.062134][ T4451] bond0 (unregistering): Released all slaves [ 772.314243][T13184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1854'. [ 772.316908][T13184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1854'. [ 772.319687][T13184] netlink: 'syz.1.1854': attribute type 20 has an invalid length. [ 772.406833][T13226] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1862'. [ 773.584866][T13256] xt_hashlimit: max too large, truncated to 1048576 [ 774.562062][T12994] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 774.640818][T12994] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 774.686067][T12994] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 774.769588][T12994] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 774.973850][T12994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.002158][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 775.004824][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 775.019166][T12994] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.039753][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 775.042733][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 775.045585][ T4453] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.047465][ T4453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.073766][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 775.076506][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 775.086385][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 775.096519][ T4453] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.098620][ T4453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.116641][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 775.137174][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 775.144742][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 775.173205][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 775.180547][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 775.200298][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 775.213683][T12994] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 775.219115][T12994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 775.233151][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 775.235861][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 775.240196][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 775.253287][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 775.256059][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 775.274114][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 775.646776][T12994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.660836][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 775.663166][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 775.736220][T13298] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1874'. [ 775.750291][T13298] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1874'. [ 775.954885][T13304] netlink: set zone limit has 8 unknown bytes [ 776.952851][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1876'. [ 776.955517][T13320] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1876'. [ 776.958155][T13320] netlink: 'syz.6.1876': attribute type 20 has an invalid length. [ 777.148595][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 777.151555][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 777.160940][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 777.164058][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 777.181151][T13327] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1878'. [ 777.184482][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 777.188735][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 777.193937][T12994] device veth0_vlan entered promiscuous mode [ 777.203402][T12994] device veth1_vlan entered promiscuous mode [ 777.231895][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 777.234760][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 777.239686][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 777.243327][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 777.253405][T12994] device veth0_macvtap entered promiscuous mode [ 777.262636][T12994] device veth1_macvtap entered promiscuous mode [ 777.283019][T12994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 777.286404][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 777.291509][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 777.295621][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 777.303300][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 777.312112][T12994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 777.317267][T12994] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.324350][T12994] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.329153][T12994] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.332710][T12994] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.341106][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 777.345071][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 777.475662][ T4451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.487873][ T4451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.517420][ T193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.524017][ T193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.537427][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 777.561372][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 778.716942][T13350] xt_hashlimit: max too large, truncated to 1048576 [ 780.559663][T13386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1889'. [ 780.562180][T13386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1889'. [ 780.564793][T13386] netlink: 'syz.1.1889': attribute type 20 has an invalid length. [ 780.923603][T13401] fuse: Bad value for 'group_id' [ 781.363145][T13418] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1893'. [ 782.486040][T13463] fuse: Bad value for 'fd' [ 782.540994][T13465] loop2: detected capacity change from 0 to 256 [ 782.548295][T13465] exfat: Unknown parameter 'fsmagic' [ 782.561043][T13465] xt_hashlimit: max too large, truncated to 1048576 [ 783.504768][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1904'. [ 783.507449][T13483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1904'. [ 783.510510][T13483] netlink: 'syz.3.1904': attribute type 20 has an invalid length. [ 783.993339][T13491] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1907'. [ 784.334061][ T4848] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.461273][ T4848] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.581958][ T4848] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.719589][ T4848] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.750194][ T4318] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 785.760056][ T4318] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 785.764373][ T4318] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 785.769159][ T4318] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 785.788598][ T4318] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 785.797087][ T4318] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 786.842059][T13529] bond0 speed is unknown, defaulting to 1000 [ 786.844254][T13529] lo speed is unknown, defaulting to 1000 [ 787.740223][T13587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.745236][T13587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.858880][ T4318] Bluetooth: hci2: command 0x0409 tx timeout [ 787.955444][T13581] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1921'. [ 788.940548][ T4848] device hsr_slave_0 left promiscuous mode [ 788.975623][ T4848] device hsr_slave_1 left promiscuous mode [ 789.057899][ T4848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 789.060090][ T4848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 789.065118][ T4848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 789.067292][ T4848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 789.072039][ T4848] device bridge_slave_1 left promiscuous mode [ 789.074080][ T4848] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.110613][ T4848] device bridge_slave_0 left promiscuous mode [ 789.112834][ T4848] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.257957][ T4848] device veth1_macvtap left promiscuous mode [ 789.259862][ T4848] device veth0_macvtap left promiscuous mode [ 789.261908][ T4848] device veth1_vlan left promiscuous mode [ 789.264183][ T4848] device veth0_vlan left promiscuous mode [ 789.937976][ T4318] Bluetooth: hci2: command 0x041b tx timeout [ 791.352524][ T4848] team0 (unregistering): Port device team_slave_1 removed [ 791.553195][ T4848] team0 (unregistering): Port device team_slave_0 removed [ 791.738691][ T4848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 791.989362][ T4848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 792.017756][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 794.097771][ T4318] Bluetooth: hci2: command 0x0419 tx timeout [ 794.772949][ T4848] bond0 (unregistering): Released all slaves [ 795.054893][T13612] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 795.101764][T13529] chnl_net:caif_netlink_parms(): no params data found [ 795.630676][T13651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1933'. [ 795.633261][T13651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1933'. [ 795.635936][T13651] netlink: 'syz.2.1933': attribute type 20 has an invalid length. [ 795.641593][T13529] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.644221][T13529] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.647167][T13529] device bridge_slave_0 entered promiscuous mode [ 795.654463][T13529] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.663497][T13529] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.693125][T13529] device bridge_slave_1 entered promiscuous mode [ 795.752971][T13529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.771045][T13529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.821293][T13529] team0: Port device team_slave_0 added [ 795.833529][T13529] team0: Port device team_slave_1 added [ 795.890559][T13529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.894940][T13529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.913403][T13529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.925742][T13529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.953791][T13529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.970015][T13529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.051086][T13529] device hsr_slave_0 entered promiscuous mode [ 796.134190][T13529] device hsr_slave_1 entered promiscuous mode [ 796.170811][T13529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 796.173159][T13529] Cannot create hsr debugfs directory [ 796.183498][T13673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.187552][T13673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.693741][T13683] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1938'. [ 797.913056][ T47] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 797.916390][ T47] CPU: 0 PID: 47 Comm: kworker/u5:0 Not tainted 6.1.145-syzkaller #0 [ 797.918641][ T47] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 797.921729][ T47] Workqueue: hci3 hci_rx_work [ 797.923322][ T47] Call trace: [ 797.924274][ T47] dump_backtrace+0x1c8/0x1f4 [ 797.925672][ T47] show_stack+0x2c/0x3c [ 797.927028][ T47] __dump_stack+0x30/0x40 [ 797.928260][ T47] dump_stack_lvl+0xf8/0x160 [ 797.929489][ T47] dump_stack+0x1c/0x5c [ 797.930691][ T47] sysfs_create_dir_ns+0x22c/0x24c [ 797.932157][ T47] kobject_add_internal+0x5a8/0xb30 [ 797.933658][ T47] kobject_add+0x134/0x1f8 [ 797.935049][ T47] device_add+0x3f0/0xf94 [ 797.936237][ T47] hci_conn_add_sysfs+0xbc/0x1cc [ 797.937604][ T47] le_conn_complete_evt+0xa24/0xf8c [ 797.939143][ T47] hci_le_conn_complete_evt+0x114/0x3f8 [ 797.940798][ T47] hci_le_meta_evt+0x2c0/0x4a4 [ 797.942173][ T47] hci_event_packet+0x6ac/0xf08 [ 797.943598][ T47] hci_rx_work+0x324/0xaa0 [ 797.944891][ T47] process_one_work+0x7f4/0x13a8 [ 797.946303][ T47] worker_thread+0x8c8/0xfbc [ 797.947625][ T47] kthread+0x250/0x2d8 [ 797.948763][ T47] ret_from_fork+0x10/0x20 [ 797.952317][ T47] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 797.956206][ T47] Bluetooth: hci3: failed to register connection device [ 798.599045][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1947'. [ 798.601553][T13730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1947'. [ 798.604116][T13730] netlink: 'syz.3.1947': attribute type 20 has an invalid length. [ 798.824291][T13529] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 798.861560][T13529] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 798.903223][T13529] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 798.949542][T13529] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 799.104922][T13529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 799.191027][T13529] 8021q: adding VLAN 0 to HW filter on device team0 [ 799.225825][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 799.228679][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 799.231367][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 799.258368][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 799.261462][ T4848] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.263568][ T4848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 799.266101][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 799.272204][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 799.278014][ T4848] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.280046][ T4848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 799.283034][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 799.306532][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 799.317534][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 799.337166][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 799.343343][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 799.369569][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 799.372591][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 799.379625][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 799.401716][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 799.404819][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 799.410906][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 799.481551][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 799.490235][T13529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 799.657472][T13768] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1952'. [ 799.844623][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 799.848136][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 799.855722][T13529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.449489][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 802.451409][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 802.597793][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 802.602555][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 802.708936][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 802.712406][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 802.717107][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 802.734705][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 802.756685][T13529] device veth0_vlan entered promiscuous mode [ 802.804816][T13529] device veth1_vlan entered promiscuous mode [ 803.455015][T13834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.466341][T13834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.494212][T13822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1960'. [ 803.496879][T13822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1960'. [ 803.499505][T13822] netlink: 'syz.3.1960': attribute type 20 has an invalid length. [ 803.518619][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 803.521557][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 803.527272][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 803.552310][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 803.561967][T13529] device veth0_macvtap entered promiscuous mode [ 803.575689][T13529] device veth1_macvtap entered promiscuous mode [ 803.620955][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 803.623911][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 803.641319][T13529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 803.662184][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 803.665632][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 803.699210][T13529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 803.711653][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 803.714906][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 803.728995][T13529] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.736105][T13529] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.741157][T13529] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.747451][T13529] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.967867][ T4453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.970492][ T4453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.984890][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 804.001982][ T4453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.004629][ T4453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.042158][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 804.161687][T13853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1965'. [ 804.417977][ T47] Bluetooth: hci3: command 0x0406 tx timeout [ 806.598412][T13887] sctp: failed to load transform for md5: -2 [ 807.090799][T13908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1972'. [ 807.093642][T13908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1972'. [ 807.096483][T13908] netlink: 'syz.2.1972': attribute type 20 has an invalid length. [ 807.340843][T13920] netlink: 'syz.6.1973': attribute type 10 has an invalid length. [ 808.314493][T13930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.327987][T13930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.665922][ T4682] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.811475][ T4682] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.929708][ T4682] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.039570][ T4682] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.926020][T13997] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1981'. [ 810.112658][ T47] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 810.119035][ T47] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 810.123998][ T47] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 810.131743][T14010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.134632][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 810.137286][T14010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.139714][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 810.142430][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 810.163979][T14011] netlink: set zone limit has 8 unknown bytes [ 810.888726][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1984'. [ 810.891320][T14014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1984'. [ 810.893972][T14014] netlink: 'syz.1.1984': attribute type 20 has an invalid length. [ 811.045482][T14006] bond0 speed is unknown, defaulting to 1000 [ 811.066143][T14006] lo speed is unknown, defaulting to 1000 [ 812.177779][ T47] Bluetooth: hci2: command 0x0409 tx timeout [ 813.003634][T14065] netlink: 'syz.6.1989': attribute type 10 has an invalid length. [ 814.666901][ T47] Bluetooth: hci2: command 0x041b tx timeout [ 815.027188][T14006] chnl_net:caif_netlink_parms(): no params data found [ 815.043869][T14088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 815.046546][T14088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1996'. [ 815.049324][T14088] netlink: 'syz.3.1996': attribute type 20 has an invalid length. [ 815.350962][ T4318] Bluetooth: hci0: Invalid handle: 0x10c9 > 0x0eff [ 815.451693][T14006] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.456581][T14006] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.472307][T14099] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 815.475224][T14006] device bridge_slave_0 entered promiscuous mode [ 815.490230][T14099] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 815.504454][T14099] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 815.510529][ T4682] device hsr_slave_0 left promiscuous mode [ 815.514823][T14099] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 815.517036][ T4682] device hsr_slave_1 left promiscuous mode [ 815.524956][T14099] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 815.526858][T14099] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 815.533662][ T4682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 815.536332][ T4682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.539642][T14099] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 815.542376][T14099] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 815.544195][T14099] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 815.546559][ T4682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 815.551516][ T4682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 815.553776][T14099] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 815.556324][ T4682] device bridge_slave_1 left promiscuous mode [ 815.558587][T14099] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 815.560407][T14099] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 815.564040][ T4682] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.571835][ T4682] device bridge_slave_0 left promiscuous mode [ 815.573877][ T4682] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.576912][T14099] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 815.579306][T14099] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 815.581059][T14099] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 815.727970][ T4682] device veth1_macvtap left promiscuous mode [ 815.729814][ T4682] device veth0_macvtap left promiscuous mode [ 815.734044][ T4682] device veth1_vlan left promiscuous mode [ 815.735703][ T4682] device veth0_vlan left promiscuous mode [ 815.960680][T14127] hub 1-0:1.0: USB hub found [ 815.967978][T14127] hub 1-0:1.0: 1 port detected [ 817.297669][ T47] Bluetooth: hci0: command 0x0c1a tx timeout [ 817.537684][ T47] Bluetooth: hci3: command 0x0c1a tx timeout [ 817.647706][ T4318] Bluetooth: hci2: command 0x0419 tx timeout [ 817.649833][ T4318] Bluetooth: hci1: command 0x0c1a tx timeout [ 817.653355][ T4318] Bluetooth: hci4: command 0x0c1a tx timeout [ 818.404664][ T47] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 818.408865][ T47] CPU: 1 PID: 47 Comm: kworker/u5:0 Not tainted 6.1.145-syzkaller #0 [ 818.411338][ T47] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 818.414685][ T47] Workqueue: hci4 hci_rx_work [ 818.416011][ T47] Call trace: [ 818.416962][ T47] dump_backtrace+0x1c8/0x1f4 [ 818.418372][ T47] show_stack+0x2c/0x3c [ 818.419571][ T47] __dump_stack+0x30/0x40 [ 818.420732][ T47] dump_stack_lvl+0xf8/0x160 [ 818.421969][ T47] dump_stack+0x1c/0x5c [ 818.423230][ T47] sysfs_create_dir_ns+0x22c/0x24c [ 818.424724][ T47] kobject_add_internal+0x5a8/0xb30 [ 818.426364][ T47] kobject_add+0x134/0x1f8 [ 818.427842][ T47] device_add+0x3f0/0xf94 [ 818.429196][ T47] hci_conn_add_sysfs+0xbc/0x1cc [ 818.430593][ T47] le_conn_complete_evt+0xa24/0xf8c [ 818.432198][ T47] hci_le_conn_complete_evt+0x114/0x3f8 [ 818.433821][ T47] hci_le_meta_evt+0x2c0/0x4a4 [ 818.435167][ T47] hci_event_packet+0x6ac/0xf08 [ 818.436704][ T47] hci_rx_work+0x324/0xaa0 [ 818.437954][ T47] process_one_work+0x7f4/0x13a8 [ 818.439312][ T47] worker_thread+0x8c8/0xfbc [ 818.440662][ T47] kthread+0x250/0x2d8 [ 818.441921][ T47] ret_from_fork+0x10/0x20 [ 818.464979][ T47] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 818.469316][ T47] Bluetooth: hci4: failed to register connection device [ 818.780625][T14152] ax25_connect(): syz.1.2008 uses autobind, please contact jreuter@yaina.de [ 819.398379][ T47] Bluetooth: hci0: command 0x0406 tx timeout [ 819.617793][ T4318] Bluetooth: hci3: command 0x0406 tx timeout [ 819.697890][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 819.700036][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 819.701834][ T47] Bluetooth: hci2: command 0x0c1a tx timeout [ 819.903575][ T4682] team0 (unregistering): Port device team_slave_1 removed [ 820.110430][ T4682] team0 (unregistering): Port device team_slave_0 removed [ 820.319413][ T4682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 820.568483][ T4682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 821.777874][ T4318] Bluetooth: hci2: command 0x0406 tx timeout [ 823.441021][ T4682] bond0 (unregistering): Released all slaves [ 823.701234][T14006] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.703402][T14006] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.706206][T14006] device bridge_slave_1 entered promiscuous mode [ 823.782684][T14006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.797194][T14006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 823.830800][T14150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2009'. [ 823.834430][T14150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2009'. [ 823.842775][T14150] netlink: 'syz.2.2009': attribute type 20 has an invalid length. [ 823.933498][T14006] team0: Port device team_slave_0 added [ 823.981276][T14006] team0: Port device team_slave_1 added [ 824.024240][T14006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.026359][T14006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.038887][T14006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.049836][T14006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.053746][T14006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.061598][T14006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.157239][T14185] xt_hashlimit: max too large, truncated to 1048576 [ 824.169652][T14006] device hsr_slave_0 entered promiscuous mode [ 824.195848][T14006] device hsr_slave_1 entered promiscuous mode [ 824.247820][T14006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 824.251461][T14006] Cannot create hsr debugfs directory [ 825.310379][ T47] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 825.775396][T14221] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2024'. [ 825.778267][T14221] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2024'. [ 825.780776][T14221] netlink: 'syz.6.2024': attribute type 20 has an invalid length. [ 825.985185][T14238] loop6: detected capacity change from 0 to 256 [ 826.032175][T14238] exfat: Unknown parameter 'fsmagic' [ 826.052840][T14235] xt_hashlimit: max too large, truncated to 1048576 [ 827.239220][T14006] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 827.972101][T14006] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 828.063706][T14006] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 828.109833][T14006] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 828.207069][ T47] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 828.210335][ T47] CPU: 1 PID: 47 Comm: kworker/u5:0 Not tainted 6.1.145-syzkaller #0 [ 828.212586][ T47] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 828.215302][ T47] Workqueue: hci1 hci_rx_work [ 828.216597][ T47] Call trace: [ 828.217524][ T47] dump_backtrace+0x1c8/0x1f4 [ 828.218842][ T47] show_stack+0x2c/0x3c [ 828.220000][ T47] __dump_stack+0x30/0x40 [ 828.221203][ T47] dump_stack_lvl+0xf8/0x160 [ 828.222620][ T47] dump_stack+0x1c/0x5c [ 828.223851][ T47] sysfs_create_dir_ns+0x22c/0x24c [ 828.225288][ T47] kobject_add_internal+0x5a8/0xb30 [ 828.226708][ T47] kobject_add+0x134/0x1f8 [ 828.227993][ T47] device_add+0x3f0/0xf94 [ 828.229325][ T47] hci_conn_add_sysfs+0xbc/0x1cc [ 828.230739][ T47] le_conn_complete_evt+0xa24/0xf8c [ 828.232242][ T47] hci_le_conn_complete_evt+0x114/0x3f8 [ 828.233876][ T47] hci_le_meta_evt+0x2c0/0x4a4 [ 828.235341][ T47] hci_event_packet+0x6ac/0xf08 [ 828.236690][ T47] hci_rx_work+0x324/0xaa0 [ 828.237960][ T47] process_one_work+0x7f4/0x13a8 [ 828.239264][ T47] worker_thread+0x8c8/0xfbc [ 828.240509][ T47] kthread+0x250/0x2d8 [ 828.241622][ T47] ret_from_fork+0x10/0x20 [ 828.246449][ T47] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 828.250816][ T47] Bluetooth: hci1: failed to register connection device [ 828.277194][T14006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.285963][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 828.296865][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 828.304518][T14006] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.314075][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 828.317329][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 828.323843][ T4668] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.325904][ T4668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 828.344864][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 828.351054][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 828.375552][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 828.385438][ T4668] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.387631][ T4668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.410107][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 828.422008][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 828.435783][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 828.450969][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 828.454902][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 828.477479][T14006] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 828.481983][T14281] binder: 14280:14281 tried to acquire reference to desc 0, got 1 instead [ 828.484592][T14281] binder: 14280 invalid dec weak, ref 22 desc 1 s 1 w 0 [ 828.487517][T14006] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 828.499201][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 828.502397][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 828.505755][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 828.510852][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 828.515699][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 828.525980][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 828.545045][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 828.548474][T14287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2037'. [ 828.550995][T14287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2037'. [ 828.859376][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 828.862089][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 829.973738][T14006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 830.037766][T14318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.042173][T14318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.951192][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 831.954526][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 832.127199][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 832.131926][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 832.135780][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 832.144772][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 832.153649][T14006] device veth0_vlan entered promiscuous mode [ 832.914142][T14006] device veth1_vlan entered promiscuous mode [ 832.951823][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 832.955194][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 832.958242][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 832.970426][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 832.982516][T14006] device veth0_macvtap entered promiscuous mode [ 832.987162][T14006] device veth1_macvtap entered promiscuous mode [ 833.025315][T14006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 833.027516][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 833.032955][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 833.036093][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 833.050114][T14006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 833.054896][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 833.059684][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 833.074978][T14006] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.086028][T14006] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.114374][T14006] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.116862][T14006] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.281789][T14363] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2050'. [ 833.284378][T14363] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2050'. [ 833.312478][ T4668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.315962][ T4668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.325766][ T4836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.331483][ T4836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.357050][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 833.363944][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 835.194685][T14425] loop2: detected capacity change from 0 to 256 [ 835.216273][T14425] exfat: Unknown parameter 'fsmagic' [ 835.228146][T14425] xt_hashlimit: max too large, truncated to 1048576 [ 836.276338][T14435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.288024][T14435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.563589][T14006] unregister_netdevice: waiting for syz_tun to become free. Usage count = 10 [ 845.566228][T14006] leaked reference. [ 845.567711][T14006] dst_init+0xc8/0x3c4 [ 845.568904][T14006] dst_alloc+0x120/0x170 [ 845.570224][T14006] ip_route_output_key_hash_rcu+0x1024/0x1e34 [ 845.571931][T14006] ip_route_output_key_hash+0x1a8/0x2ec [ 845.573525][T14006] ip_route_output_flow+0x3c/0x160 [ 845.574930][T14006] geneve_link_config+0x15c/0x518 [ 845.576375][T14006] geneve_newlink+0x124/0x17c [ 845.577722][T14006] rtnl_newlink+0x102c/0x1a1c [ 845.579024][T14006] rtnetlink_rcv_msg+0x734/0xce4 [ 845.580516][T14006] netlink_rcv_skb+0x208/0x3c4 [ 845.581817][T14006] rtnetlink_rcv+0x28/0x38 [ 845.583081][T14006] netlink_unicast+0x600/0x818 [ 845.584439][T14006] netlink_sendmsg+0x6e8/0x9b0 [ 845.585792][T14006] __sys_sendto+0x304/0x3fc [ 845.587037][T14006] __arm64_sys_sendto+0xd8/0xf8 [ 845.588482][T14006] invoke_syscall+0x98/0x2bc [ 845.589859][T14006] leaked reference. [ 845.591313][T14006] fib6_nh_init+0x620/0x19cc [ 845.592743][T14006] ip6_route_info_create+0x7b0/0xf7c [ 845.594197][T14006] ip6_route_add+0x34/0x158 [ 845.595641][T14006] addrconf_add_linklocal+0x38c/0x5d0 [ 845.597202][T14006] addrconf_addr_gen+0x3b4/0x4a8 [ 845.598671][T14006] addrconf_init_auto_addrs+0x5a8/0x994 [ 845.600528][T14006] addrconf_notify+0x8dc/0xca8 [ 845.601952][T14006] raw_notifier_call_chain+0xd4/0x164 [ 845.603561][T14006] __dev_notify_flags+0x250/0x46c [ 845.605001][T14006] dev_change_flags+0xc8/0x154 [ 845.606383][T14006] do_setlink+0xa24/0x32c4 [ 845.607662][T14006] rtnl_newlink+0x12d0/0x1a1c [ 845.609099][T14006] rtnetlink_rcv_msg+0x734/0xce4 [ 845.610624][T14006] netlink_rcv_skb+0x208/0x3c4 [ 845.612040][T14006] rtnetlink_rcv+0x28/0x38 [ 845.613294][T14006] netlink_unicast+0x600/0x818 [ 845.614686][T14006] leaked reference. [ 845.615953][T14006] fib6_nh_init+0x620/0x19cc [ 845.617409][T14006] ip6_route_info_create+0x7b0/0xf7c [ 845.618966][T14006] addrconf_f6i_alloc+0x188/0x330 [ 845.620429][T14006] ipv6_add_addr+0x3b4/0xccc [ 845.621785][T14006] addrconf_add_linklocal+0x22c/0x5d0 [ 845.623341][T14006] addrconf_addr_gen+0x3b4/0x4a8 [ 845.624743][T14006] addrconf_init_auto_addrs+0x5a8/0x994 [ 845.626282][T14006] addrconf_notify+0x8dc/0xca8 [ 845.627659][T14006] raw_notifier_call_chain+0xd4/0x164 [ 845.629214][T14006] __dev_notify_flags+0x250/0x46c [ 845.630607][T14006] dev_change_flags+0xc8/0x154 [ 845.632033][T14006] do_setlink+0xa24/0x32c4 [ 845.633358][T14006] rtnl_newlink+0x12d0/0x1a1c [ 845.634680][T14006] rtnetlink_rcv_msg+0x734/0xce4 [ 845.636154][T14006] netlink_rcv_skb+0x208/0x3c4 [ 845.637562][T14006] rtnetlink_rcv+0x28/0x38 [ 845.638836][T14006] leaked reference. [ 845.639878][T14006] fib6_nh_init+0x620/0x19cc [ 845.641177][T14006] ip6_route_info_create+0x7b0/0xf7c [ 845.642683][T14006] ip6_route_add+0x34/0x158 [ 845.644010][T14006] addrconf_add_dev+0x208/0x2e8 [ 845.645395][T14006] addrconf_init_auto_addrs+0x4d8/0x994 [ 845.647123][T14006] addrconf_notify+0x8dc/0xca8 [ 845.648504][T14006] raw_notifier_call_chain+0xd4/0x164 [ 845.650108][T14006] __dev_notify_flags+0x250/0x46c [ 845.651602][T14006] dev_change_flags+0xc8/0x154 [ 845.653100][T14006] do_setlink+0xa24/0x32c4 [ 845.654396][T14006] rtnl_newlink+0x12d0/0x1a1c [ 845.655795][T14006] rtnetlink_rcv_msg+0x734/0xce4 [ 845.657140][T14006] netlink_rcv_skb+0x208/0x3c4 [ 845.658428][T14006] rtnetlink_rcv+0x28/0x38 [ 845.659772][T14006] netlink_unicast+0x600/0x818 [ 845.661199][T14006] netlink_sendmsg+0x6e8/0x9b0 [ 845.662578][T14006] leaked reference. [ 845.663624][T14006] fib6_nh_init+0x620/0x19cc [ 845.664923][T14006] ip6_route_info_create+0x7b0/0xf7c [ 845.666456][T14006] ip6_route_add+0x34/0x158 [ 845.667713][T14006] addrconf_permanent_addr+0x518/0x864 [ 845.669260][T14006] addrconf_notify+0x7c8/0xca8 [ 845.670554][T14006] raw_notifier_call_chain+0xd4/0x164 [ 845.672085][T14006] __dev_notify_flags+0x250/0x46c [ 845.673451][T14006] dev_change_flags+0xc8/0x154 [ 845.674823][T14006] do_setlink+0xa24/0x32c4 [ 845.676090][T14006] rtnl_newlink+0x12d0/0x1a1c [ 845.677399][T14006] rtnetlink_rcv_msg+0x734/0xce4 [ 845.678796][T14006] netlink_rcv_skb+0x208/0x3c4 [ 845.680119][T14006] rtnetlink_rcv+0x28/0x38 [ 845.681406][T14006] netlink_unicast+0x600/0x818 [ 845.682641][T14006] netlink_sendmsg+0x6e8/0x9b0 [ 845.683877][T14006] __sys_sendto+0x304/0x3fc [ 845.685091][T14006] leaked reference. [ 845.686307][T14006] fib_check_nh+0x974/0x1510 [ 845.687690][T14006] fib_create_info+0x1090/0x1e58 [ 845.689107][T14006] fib_table_insert+0xac/0x1368 [ 845.690503][T14006] fib_magic+0x250/0x31c [ 845.691696][T14006] fib_add_ifaddr+0x33c/0x4f8 [ 845.692990][T14006] fib_netdev_event+0x360/0x4a4 [ 845.694391][T14006] raw_notifier_call_chain+0xd4/0x164 [ 845.695926][T14006] __dev_notify_flags+0x250/0x46c [ 845.697328][T14006] dev_change_flags+0xc8/0x154 [ 845.698796][T14006] do_setlink+0xa24/0x32c4 [ 845.700138][T14006] rtnl_newlink+0x12d0/0x1a1c [ 845.701432][T14006] rtnetlink_rcv_msg+0x734/0xce4 [ 845.702875][T14006] netlink_rcv_skb+0x208/0x3c4 [ 845.704196][T14006] rtnetlink_rcv+0x28/0x38 [ 845.705425][T14006] netlink_unicast+0x600/0x818 [ 845.706805][T14006] netlink_sendmsg+0x6e8/0x9b0 [ 845.708185][T14006] leaked reference. [ 845.709287][T14006] fib_check_nh+0x974/0x1510 [ 845.710638][T14006] fib_create_info+0x1090/0x1e58 [ 845.712100][T14006] fib_table_insert+0xac/0x1368 [ 845.713479][T14006] fib_magic+0x250/0x31c [ 845.714673][T14006] fib_add_ifaddr+0x2ec/0x4f8 [ 845.715948][T14006] fib_netdev_event+0x360/0x4a4 [ 845.717310][T14006] raw_notifier_call_chain+0xd4/0x164 [ 845.718791][T14006] __dev_notify_flags+0x250/0x46c [ 845.720338][T14006] dev_change_flags+0xc8/0x154 [ 845.721606][T14006] do_setlink+0xa24/0x32c4 [ 845.722821][T14006] rtnl_newlink+0x12d0/0x1a1c [ 845.724112][T14006] rtnetlink_rcv_msg+0x734/0xce4 [ 845.725477][T14006] netlink_rcv_skb+0x208/0x3c4 [ 845.726865][T14006] rtnetlink_rcv+0x28/0x38 [ 845.728038][T14006] netlink_unicast+0x600/0x818 [ 845.729336][T14006] netlink_sendmsg+0x6e8/0x9b0 [ 845.730763][T14006] leaked reference. [ 845.731879][T14006] fib6_nh_init+0x620/0x19cc [ 845.733098][T14006] ip6_route_info_create+0x7b0/0xf7c [ 845.734617][T14006] addrconf_f6i_alloc+0x188/0x330 [ 845.735989][T14006] ipv6_add_addr+0x3b4/0xccc [ 845.737198][T14006] inet6_addr_add+0x388/0x820 [ 845.738457][T14006] inet6_rtm_newaddr+0x534/0x74c [ 845.739792][T14006] rtnetlink_rcv_msg+0x734/0xce4 [ 845.741294][T14006] netlink_rcv_skb+0x208/0x3c4 [ 845.742669][T14006] rtnetlink_rcv+0x28/0x38 [ 845.743897][T14006] netlink_unicast+0x600/0x818 [ 845.745262][T14006] netlink_sendmsg+0x6e8/0x9b0 [ 845.746546][T14006] __sys_sendto+0x304/0x3fc [ 845.748064][T14006] __arm64_sys_sendto+0xd8/0xf8 [ 845.749584][T14006] invoke_syscall+0x98/0x2bc [ 845.750930][T14006] el0_svc_common+0x138/0x258 [ 845.752253][T14006] do_el0_svc+0x58/0x13c [ 845.753405][T14006] leaked reference. [ 845.754443][T14006] netdev_tracker_alloc+0x68/0xb4 [ 845.755928][T14006] fib_create_info+0x1990/0x1e58 [ 845.757336][T14006] fib_table_insert+0xac/0x1368 [ 845.758731][T14006] fib_magic+0x250/0x31c [ 845.759997][T14006] fib_add_ifaddr+0x118/0x4f8 [ 845.761389][T14006] fib_inetaddr_event+0x12c/0x200 [ 845.762865][T14006] blocking_notifier_call_chain+0xf0/0x198 [ 845.764546][T14006] __inet_insert_ifa+0x858/0x9fc [ 845.765947][T14006] inet_rtm_newaddr+0xd74/0x1590 [ 845.767355][T14006] rtnetlink_rcv_msg+0x734/0xce4 [ 845.769031][T14006] netlink_rcv_skb+0x208/0x3c4 [ 845.770415][T14006] rtnetlink_rcv+0x28/0x38 [ 845.771654][T14006] netlink_unicast+0x600/0x818 [ 845.773020][T14006] netlink_sendmsg+0x6e8/0x9b0 [ 845.774469][T14006] __sys_sendto+0x304/0x3fc [ 845.775693][T14006] __arm64_sys_sendto+0xd8/0xf8 [ 845.807981][T14443] bond0 speed is unknown, defaulting to 1000 [ 845.810485][T14443] lo speed is unknown, defaulting to 1000 [ 845.874557][T14441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2063'. [ 845.877075][T14441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2063'. [ 846.433145][ T4453] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.539465][ T4453] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.639444][ T4453] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.759409][ T4453] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.394239][ T4453] device hsr_slave_0 left promiscuous mode [ 849.428305][ T4453] device hsr_slave_1 left promiscuous mode [ 849.509266][ T4453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 849.511710][ T4453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 849.514379][ T4453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 849.516608][ T4453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 849.529704][ T4453] device bridge_slave_1 left promiscuous mode [ 849.531631][ T4453] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.570192][ T4453] device bridge_slave_0 left promiscuous mode [ 849.572325][ T4453] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.738019][ T4453] device veth1_macvtap left promiscuous mode [ 849.739674][ T4453] device veth0_macvtap left promiscuous mode [ 849.741448][ T4453] device veth1_vlan left promiscuous mode [ 849.743174][ T4453] device veth0_vlan left promiscuous mode [ 852.201643][ T4453] team0 (unregistering): Port device team_slave_1 removed [ 852.440584][ T4453] team0 (unregistering): Port device team_slave_0 removed [ 852.639625][ T4453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 852.879519][ T4453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface