last executing test programs: 1m33.806034499s ago: executing program 0 (id=207): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1m18.597627429s ago: executing program 0 (id=207): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1m17.257758691s ago: executing program 1 (id=233): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x68, {0x2, 0xce23, @empty}, 'lo\x00'}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x3, 0x3, 0x40}]}]}, {0x0, [0x0]}}, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xfc000000}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) 1m4.147858207s ago: executing program 0 (id=207): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1m2.489652453s ago: executing program 1 (id=233): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x68, {0x2, 0xce23, @empty}, 'lo\x00'}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x3, 0x3, 0x40}]}]}, {0x0, [0x0]}}, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xfc000000}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) 47.691087768s ago: executing program 0 (id=207): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 45.840525366s ago: executing program 1 (id=233): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x68, {0x2, 0xce23, @empty}, 'lo\x00'}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x3, 0x3, 0x40}]}]}, {0x0, [0x0]}}, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xfc000000}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) 29.407381018s ago: executing program 1 (id=233): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x68, {0x2, 0xce23, @empty}, 'lo\x00'}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x3, 0x3, 0x40}]}]}, {0x0, [0x0]}}, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xfc000000}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) 28.258043479s ago: executing program 0 (id=207): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 15.209192201s ago: executing program 1 (id=233): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x68, {0x2, 0xce23, @empty}, 'lo\x00'}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x3, 0x3, 0x40}]}]}, {0x0, [0x0]}}, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xfc000000}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) 13.413133089s ago: executing program 0 (id=207): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3.462398469s ago: executing program 2 (id=1969): socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080000000", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.253796471s ago: executing program 2 (id=1970): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$x25(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r4, {0x1}, {0x9, 0xc}, {0xfff2, 0x6}}}, 0x24}}, 0x40044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 2.969306014s ago: executing program 2 (id=1972): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x9, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x124}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) 2.772674015s ago: executing program 2 (id=1974): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r1, 0x4) 2.569720823s ago: executing program 2 (id=1975): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000280)={0x1d, r1, 0x0, {0x2, 0x1, 0x6}, 0xff}, 0x18) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x48005) 2.165218595s ago: executing program 3 (id=1977): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) close(0xffffffffffffffff) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$can_j1939(r3, 0x0, 0x20000811) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1", 0x7}}, 0xee) 2.151531294s ago: executing program 2 (id=1978): socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.777210123s ago: executing program 3 (id=1980): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240), 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 1.67204138s ago: executing program 3 (id=1981): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1, 0x4399, 0x3, 0xfff}, &(0x7f00000000c0)=0x10) 1.534542172s ago: executing program 3 (id=1983): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x2400c011}, 0xc000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffe, {0x6, 0x0, 0x8100, 0x0, {0x2}, {0xfff1, 0xc}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x400}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0x38c}}, 0x8001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={0x0, r4, 0x4000, r4}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44805) socket$inet6_udplite(0xa, 0x2, 0x88) 1.483322748s ago: executing program 4 (id=1984): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.221189742s ago: executing program 4 (id=1985): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r1, 0x4) 1.209716453s ago: executing program 3 (id=1986): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) recvfrom$inet(r1, &(0x7f0000000040)=""/65, 0x41, 0x60010000, 0x0, 0x0) 1.105575033s ago: executing program 4 (id=1987): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) 815.124802ms ago: executing program 4 (id=1988): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7010040000000300000006000100050000000800090002"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 557.142275ms ago: executing program 4 (id=1989): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000002c0), 0x82, 0x100, 0x0) 418.716812ms ago: executing program 4 (id=1990): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) close(0xffffffffffffffff) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$can_j1939(r3, 0x0, 0x20000811) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1", 0x7}}, 0xee) 247.843249ms ago: executing program 3 (id=1991): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x34000, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 0s ago: executing program 1 (id=233): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x68, {0x2, 0xce23, @empty}, 'lo\x00'}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x3, 0x3, 0x40}]}]}, {0x0, [0x0]}}, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xfc000000}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) kernel console output (not intermixed with test programs): Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.800550][ T1110] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.993388][ T1110] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.211238][ T1110] bridge_slave_1: left allmulticast mode [ 235.231425][ T1110] bridge_slave_1: left promiscuous mode [ 235.247286][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.267059][ T1110] bridge_slave_0: left allmulticast mode [ 235.272758][ T1110] bridge_slave_0: left promiscuous mode [ 235.286050][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.931569][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.948406][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.960322][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.979637][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.000528][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.135601][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.151682][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.163525][ T1110] bond0 (unregistering): Released all slaves [ 237.394988][T10349] netlink: 'syz.4.1232': attribute type 13 has an invalid length. [ 237.410752][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.415999][ T1110] hsr_slave_0: left promiscuous mode [ 237.426311][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.434353][ T1110] hsr_slave_1: left promiscuous mode [ 237.436876][T10349] netlink: 'syz.4.1232': attribute type 17 has an invalid length. [ 237.447656][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.461291][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.470113][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.470548][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 237.492557][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.525025][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.544914][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.597663][ T1110] veth1_macvtap: left promiscuous mode [ 237.603418][ T1110] veth0_macvtap: left promiscuous mode [ 237.612382][ T1110] veth1_vlan: left promiscuous mode [ 237.620972][ T1110] veth0_vlan: left promiscuous mode [ 238.083865][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 238.095813][ T5846] Bluetooth: hci0: command tx timeout [ 238.131829][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 238.544159][T10349] eql: refused to change device tx_queue_len [ 238.553669][T10349] A link change request failed with some changes committed already. Interface eql may have been left with an inconsistent configuration, please check. [ 239.004220][T10305] chnl_net:caif_netlink_parms(): no params data found [ 239.538517][ T5846] Bluetooth: hci3: command tx timeout [ 239.724682][T10305] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.744114][T10305] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.763120][T10305] bridge_slave_0: entered allmulticast mode [ 239.772449][T10305] bridge_slave_0: entered promiscuous mode [ 239.883021][T10305] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.902331][T10305] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.918822][T10305] bridge_slave_1: entered allmulticast mode [ 239.941027][T10305] bridge_slave_1: entered promiscuous mode [ 240.000687][ T1110] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.141620][T10416] netlink: 'syz.3.1248': attribute type 1 has an invalid length. [ 240.178258][ T5846] Bluetooth: hci0: command tx timeout [ 240.188610][ T1110] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.212901][T10305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.253668][ T1110] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.271603][T10305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.302351][T10416] veth13: entered promiscuous mode [ 240.341885][ T1110] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.475168][T10305] team0: Port device team_slave_0 added [ 240.513285][T10305] team0: Port device team_slave_1 added [ 240.684887][T10305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.703427][T10305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.769344][T10305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.884818][T10305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.892771][T10305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.933700][T10305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.003091][T10440] unknown channel width for channel at 909000KHz? [ 241.010463][T10440] unknown channel width for channel at 909000KHz? [ 241.035840][T10440] unknown channel width for channel at 909000KHz? [ 241.410629][T10305] hsr_slave_0: entered promiscuous mode [ 241.437824][T10305] hsr_slave_1: entered promiscuous mode [ 241.461689][ T1110] bridge_slave_1: left allmulticast mode [ 241.478988][ T1110] bridge_slave_1: left promiscuous mode [ 241.486048][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.564613][ T1110] bridge_slave_0: left allmulticast mode [ 241.581594][ T1110] bridge_slave_0: left promiscuous mode [ 241.601366][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.617379][ T5846] Bluetooth: hci3: command tx timeout [ 241.671091][T10475] netlink: 'syz.3.1261': attribute type 13 has an invalid length. [ 241.679260][T10475] netlink: 'syz.3.1261': attribute type 17 has an invalid length. [ 241.968073][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.979694][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.991549][ T1110] bond0 (unregistering): Released all slaves [ 242.042321][T10475] gretap0: refused to change device tx_queue_len [ 242.083341][T10475] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 242.169682][T10483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1263'. [ 242.256798][ T5846] Bluetooth: hci0: command tx timeout [ 242.262476][T10355] chnl_net:caif_netlink_parms(): no params data found [ 242.554367][T10491] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1267'. [ 243.434305][ T1110] hsr_slave_0: left promiscuous mode [ 243.506316][ T1110] hsr_slave_1: left promiscuous mode [ 243.519888][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.566193][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.643077][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.661724][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.691248][ T1110] veth1_macvtap: left promiscuous mode [ 243.696110][ T5846] Bluetooth: hci3: command tx timeout [ 243.697739][ T1110] veth0_macvtap: left promiscuous mode [ 243.709321][ T1110] veth1_vlan: left promiscuous mode [ 243.717110][ T1110] veth0_vlan: left promiscuous mode [ 244.171809][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 244.219882][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 244.336390][ T5846] Bluetooth: hci0: command tx timeout [ 244.591696][T10355] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.599223][T10355] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.606866][T10355] bridge_slave_0: entered allmulticast mode [ 244.613923][T10355] bridge_slave_0: entered promiscuous mode [ 244.713223][T10355] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.724946][T10355] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.733410][T10355] bridge_slave_1: entered allmulticast mode [ 244.749355][T10355] bridge_slave_1: entered promiscuous mode [ 244.784217][T10355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.919534][T10355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.149079][T10355] team0: Port device team_slave_0 added [ 245.168338][T10355] team0: Port device team_slave_1 added [ 245.386576][T10355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.405382][T10355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.483482][T10355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.497580][T10355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.504965][T10355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.532006][T10355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.599756][T10552] syzkaller1: entered promiscuous mode [ 245.605351][T10552] syzkaller1: entered allmulticast mode [ 245.693097][T10573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1284'. [ 245.782280][ T5846] Bluetooth: hci3: command tx timeout [ 245.880932][T10355] hsr_slave_0: entered promiscuous mode [ 245.899237][T10355] hsr_slave_1: entered promiscuous mode [ 245.909041][T10355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.926086][T10355] Cannot create hsr debugfs directory [ 246.011538][T10576] veth23: entered promiscuous mode [ 246.271835][T10305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 246.360907][T10305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 246.477967][T10305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 246.537167][T10305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 246.691611][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1291'. [ 246.731252][T10596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1291'. [ 247.053013][T10305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.165480][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1295'. [ 247.197757][T10305] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.298733][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.305942][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.346913][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.354091][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.412915][T10355] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 247.443182][T10355] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 247.498330][T10355] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 247.571148][T10355] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 247.999238][T10355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.101067][T10355] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.169070][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.176652][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.208391][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.215612][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.277537][T10657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1304'. [ 248.329051][T10652] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1304'. [ 248.435178][T10305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.680087][T10305] veth0_vlan: entered promiscuous mode [ 248.690378][T10669] netlink: 'syz.4.1307': attribute type 1 has an invalid length. [ 248.721596][T10305] veth1_vlan: entered promiscuous mode [ 248.847960][T10669] 8021q: adding VLAN 0 to HW filter on device bond11 [ 248.856082][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'. [ 249.001371][T10305] veth0_macvtap: entered promiscuous mode [ 249.061280][T10305] veth1_macvtap: entered promiscuous mode [ 249.142117][T10305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.155193][T10684] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1310'. [ 249.194489][T10305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.248468][T10305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.262845][T10305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.294389][T10305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.322595][T10305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.450052][T10355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.694497][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.718402][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.788180][T10355] veth0_vlan: entered promiscuous mode [ 249.816048][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.837465][T10355] veth1_vlan: entered promiscuous mode [ 249.843068][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.964928][T10355] veth0_macvtap: entered promiscuous mode [ 249.985476][T10355] veth1_macvtap: entered promiscuous mode [ 250.029626][T10355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.068276][T10355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.087748][T10355] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.100882][T10355] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.119685][T10355] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.128716][T10355] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.339160][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.369336][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.581425][ T78] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.631328][T10728] bond0: entered promiscuous mode [ 250.680554][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.729651][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.779750][ T78] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.941775][ T78] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.022668][ T78] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.231543][ T78] bridge_slave_1: left allmulticast mode [ 251.245870][ T78] bridge_slave_1: left promiscuous mode [ 251.251696][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.285584][ T78] bridge_slave_0: left allmulticast mode [ 251.301591][ T78] bridge_slave_0: left promiscuous mode [ 251.316129][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.978283][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 251.995155][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.006346][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.027480][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.035236][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.111126][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.129224][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.148486][ T78] bond0 (unregistering): Released all slaves [ 252.622680][T10773] netlink: 'syz.3.1324': attribute type 1 has an invalid length. [ 252.773041][T10773] 8021q: adding VLAN 0 to HW filter on device bond12 [ 253.046541][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 253.061672][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 253.071059][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 253.080484][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 253.096485][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 253.386978][ T78] hsr_slave_0: left promiscuous mode [ 253.393973][ T78] hsr_slave_1: left promiscuous mode [ 253.404991][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.425761][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.458316][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.485470][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.629692][T10814] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1333'. [ 253.646178][ T78] veth1_macvtap: left promiscuous mode [ 253.656605][ T78] veth0_macvtap: left promiscuous mode [ 253.668193][ T78] veth1_vlan: left promiscuous mode [ 253.678090][ T78] veth0_vlan: left promiscuous mode [ 254.102650][ T5846] Bluetooth: hci0: command tx timeout [ 254.274068][T10825] netlink: 'syz.3.1335': attribute type 13 has an invalid length. [ 254.287266][T10825] netlink: 'syz.3.1335': attribute type 17 has an invalid length. [ 254.389272][ T78] team0 (unregistering): Port device team_slave_1 removed [ 254.430125][ T78] team0 (unregistering): Port device team_slave_0 removed [ 254.916097][T10825] gretap0: refused to change device tx_queue_len [ 254.933540][T10825] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 255.137168][ T5846] Bluetooth: hci3: command tx timeout [ 255.201970][T10756] chnl_net:caif_netlink_parms(): no params data found [ 255.669952][T10848] syzkaller1: entered promiscuous mode [ 255.675480][T10848] syzkaller1: entered allmulticast mode [ 255.700899][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.765723][T10785] chnl_net:caif_netlink_parms(): no params data found [ 255.850373][T10756] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.860079][T10756] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.867906][T10756] bridge_slave_0: entered allmulticast mode [ 255.876575][T10756] bridge_slave_0: entered promiscuous mode [ 255.895978][T10756] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.909820][T10756] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.925047][T10756] bridge_slave_1: entered allmulticast mode [ 255.950069][T10756] bridge_slave_1: entered promiscuous mode [ 256.094716][ T78] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.176386][ T5846] Bluetooth: hci0: command tx timeout [ 256.279253][ T78] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.300694][T10756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.330634][T10756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.559314][ T78] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.661954][T10756] team0: Port device team_slave_0 added [ 256.787045][ T78] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.805059][T10756] team0: Port device team_slave_1 added [ 256.813991][T10785] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.821731][T10785] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.831367][T10785] bridge_slave_0: entered allmulticast mode [ 256.841566][T10785] bridge_slave_0: entered promiscuous mode [ 256.891627][T10785] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.899441][T10785] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.907155][T10785] bridge_slave_1: entered allmulticast mode [ 256.921752][T10785] bridge_slave_1: entered promiscuous mode [ 256.958610][T10756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.965580][T10756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.998811][T10756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.063793][T10785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.079155][T10756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.095557][T10756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.123483][T10756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.157006][T10785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.216562][ T5846] Bluetooth: hci3: command tx timeout [ 257.320290][T10785] team0: Port device team_slave_0 added [ 257.441341][T10785] team0: Port device team_slave_1 added [ 257.471236][T10756] hsr_slave_0: entered promiscuous mode [ 257.489881][T10756] hsr_slave_1: entered promiscuous mode [ 257.709226][T10785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.723498][T10785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.803599][T10785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.952728][T10785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.986286][T10785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.023129][T10785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.034834][ T78] bridge_slave_1: left allmulticast mode [ 258.041765][ T78] bridge_slave_1: left promiscuous mode [ 258.048207][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.081255][ T78] bridge_slave_0: left allmulticast mode [ 258.087103][ T78] bridge_slave_0: left promiscuous mode [ 258.108906][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.265974][ T5846] Bluetooth: hci0: command tx timeout [ 258.591382][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.604048][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.614458][ T78] bond0 (unregistering): Released all slaves [ 259.185396][T10785] hsr_slave_0: entered promiscuous mode [ 259.209750][T10785] hsr_slave_1: entered promiscuous mode [ 259.221599][T10985] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1379'. [ 259.237413][T10785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.255201][T10785] Cannot create hsr debugfs directory [ 259.305831][ T5846] Bluetooth: hci3: command tx timeout [ 259.619109][T11003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1384'. [ 259.918472][ T78] hsr_slave_0: left promiscuous mode [ 259.924725][ T78] hsr_slave_1: left promiscuous mode [ 259.945293][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.955790][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.978776][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.995431][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.003710][T11015] netlink: 'syz.4.1388': attribute type 24 has an invalid length. [ 260.094472][ T78] veth1_macvtap: left promiscuous mode [ 260.105806][ T78] veth0_macvtap: left promiscuous mode [ 260.116379][ T78] veth1_vlan: left promiscuous mode [ 260.121772][ T78] veth0_vlan: left promiscuous mode [ 260.337588][ T5846] Bluetooth: hci0: command tx timeout [ 260.790152][ T78] team0 (unregistering): Port device team_slave_1 removed [ 260.840543][ T78] team0 (unregistering): Port device team_slave_0 removed [ 261.386158][ T5846] Bluetooth: hci3: command tx timeout [ 261.721220][T11046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1399'. [ 261.752086][T11046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1399'. [ 261.820350][T11051] netlink: 'syz.3.1401': attribute type 24 has an invalid length. [ 262.216833][T10756] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 262.243562][T10756] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 262.278839][T10756] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 262.372682][T10756] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 262.718293][T10756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.862088][T10756] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.894151][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.901406][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.936215][T10785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 262.984252][T10785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 263.032968][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.040209][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.072724][T10785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 263.176336][T11103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1414'. [ 263.209623][T10785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 263.237232][T11104] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1414'. [ 263.456288][ T5846] Bluetooth: hci3: command tx timeout [ 263.571978][T10785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.621845][T10785] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.658327][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.665505][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.696731][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1419'. [ 263.743190][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.750386][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.810992][T11133] netlink: 'syz.2.1420': attribute type 1 has an invalid length. [ 263.988856][T11133] veth25: entered promiscuous mode [ 264.153094][T10756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.480309][T10756] veth0_vlan: entered promiscuous mode [ 264.532409][T10756] veth1_vlan: entered promiscuous mode [ 264.681302][T10756] veth0_macvtap: entered promiscuous mode [ 264.743925][T10756] veth1_macvtap: entered promiscuous mode [ 264.844499][T10756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.884638][T10756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.015413][T10756] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.054044][T10756] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.075734][T10756] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.084510][T10756] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.139216][T10785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.218165][T11183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1430'. [ 265.453702][T10785] veth0_vlan: entered promiscuous mode [ 265.537313][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.577027][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.586143][T10785] veth1_vlan: entered promiscuous mode [ 265.705806][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.713683][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.752057][T10785] veth0_macvtap: entered promiscuous mode [ 265.804210][T10785] veth1_macvtap: entered promiscuous mode [ 265.892895][T10785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.187422][T10785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.234162][T10785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.276187][T10785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.298101][T10785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.345787][T10785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.569986][ T1153] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.728341][ T1153] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.892723][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.903271][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.945354][ T1153] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.994327][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.009735][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.093614][ T1153] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.307893][ T1153] bridge_slave_1: left allmulticast mode [ 267.313608][ T1153] bridge_slave_1: left promiscuous mode [ 267.350361][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.378936][ T1153] bridge_slave_0: left allmulticast mode [ 267.384629][ T1153] bridge_slave_0: left promiscuous mode [ 267.391777][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.089726][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 268.102895][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 268.127217][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 268.146686][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 268.166276][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 268.238625][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.253331][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.273683][ T1153] bond0 (unregistering): Released all slaves [ 268.994740][T11278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1444'. [ 269.234838][ T1153] hsr_slave_0: left promiscuous mode [ 269.254938][ T1153] hsr_slave_1: left promiscuous mode [ 269.274339][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.291746][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.355937][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.363410][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.446769][ T1153] veth1_macvtap: left promiscuous mode [ 269.467703][ T1153] veth0_macvtap: left promiscuous mode [ 269.473422][ T1153] veth1_vlan: left promiscuous mode [ 269.497604][ T1153] veth0_vlan: left promiscuous mode [ 269.723490][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 269.733443][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 269.758349][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 269.768843][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 269.778115][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 270.221490][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 270.264044][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 270.271352][ T5838] Bluetooth: hci0: command tx timeout [ 270.931028][T11249] chnl_net:caif_netlink_parms(): no params data found [ 271.431586][T11249] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.449201][T11249] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.476438][T11249] bridge_slave_0: entered allmulticast mode [ 271.494477][T11249] bridge_slave_0: entered promiscuous mode [ 271.513864][T11249] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.531581][T11249] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.551865][T11249] bridge_slave_1: entered allmulticast mode [ 271.587484][T11249] bridge_slave_1: entered promiscuous mode [ 271.813891][T11249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.844497][T11249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.860871][ T5838] Bluetooth: hci3: command tx timeout [ 272.041478][T11249] team0: Port device team_slave_0 added [ 272.134802][T11362] veth15: entered promiscuous mode [ 272.160065][T11249] team0: Port device team_slave_1 added [ 272.334174][ T1153] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.344942][ T5838] Bluetooth: hci0: command tx timeout [ 272.373689][T11249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.383430][T11249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.410424][T11249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.422918][T11376] syzkaller1: entered promiscuous mode [ 272.429482][T11376] syzkaller1: entered allmulticast mode [ 272.464182][T11249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.471526][T11249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.499334][T11249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.555080][ T1153] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.668525][T11249] hsr_slave_0: entered promiscuous mode [ 272.674978][T11249] hsr_slave_1: entered promiscuous mode [ 272.700221][ T1153] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.923408][ T1153] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.006463][T11401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1475'. [ 273.529759][T11302] chnl_net:caif_netlink_parms(): no params data found [ 273.659703][T11421] veth27: entered promiscuous mode [ 273.929414][ T1153] bridge_slave_1: left allmulticast mode [ 273.945273][ T1153] bridge_slave_1: left promiscuous mode [ 273.955381][ T5846] Bluetooth: hci3: command tx timeout [ 273.964406][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.973450][T11439] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 273.982512][ T1153] bridge_slave_0: left allmulticast mode [ 273.992223][ T1153] bridge_slave_0: left promiscuous mode [ 273.998932][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.370300][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.381033][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.391342][ T1153] bond0 (unregistering): Released all slaves [ 274.420294][ T5846] Bluetooth: hci0: command tx timeout [ 274.605562][T11302] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.615088][T11302] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.624897][T11302] bridge_slave_0: entered allmulticast mode [ 274.640253][T11302] bridge_slave_0: entered promiscuous mode [ 274.741715][T11457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1490'. [ 274.783352][T11302] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.791852][T11302] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.799415][T11302] bridge_slave_1: entered allmulticast mode [ 274.809628][T11302] bridge_slave_1: entered promiscuous mode [ 274.915524][T11459] netlink: 'syz.3.1491': attribute type 1 has an invalid length. [ 274.961413][T11302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.012655][T11461] bridge_slave_0: default FDB implementation only supports local addresses [ 275.064611][T11459] bond13: entered promiscuous mode [ 275.070511][T11459] 8021q: adding VLAN 0 to HW filter on device bond13 [ 275.102084][T11463] 8021q: adding VLAN 0 to HW filter on device bond13 [ 275.111746][T11463] bond13: (slave wireguard0): The slave device specified does not support setting the MAC address [ 275.122495][T11463] bond13: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 275.140416][T11463] bond13: (slave wireguard0): making interface the new active one [ 275.151507][T11463] wireguard0: entered promiscuous mode [ 275.158350][T11463] bond13: (slave wireguard0): Enslaving as an active interface with an up link [ 275.169754][T11462] bridge_slave_0: default FDB implementation only supports local addresses [ 275.188901][T11302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.299850][T11468] veth23: entered promiscuous mode [ 275.373742][T11302] team0: Port device team_slave_0 added [ 275.436537][T11302] team0: Port device team_slave_1 added [ 275.610513][T11302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.635898][T11302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.698650][T11302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.814866][ T1153] hsr_slave_0: left promiscuous mode [ 275.837088][ T1153] hsr_slave_1: left promiscuous mode [ 275.843340][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.856003][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.886932][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.896931][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.930456][ T1153] veth1_macvtap: left promiscuous mode [ 275.940157][ T1153] veth0_macvtap: left promiscuous mode [ 275.946255][ T1153] veth1_vlan: left promiscuous mode [ 275.951795][ T1153] veth0_vlan: left promiscuous mode [ 276.018802][ T5846] Bluetooth: hci3: command 0x040f tx timeout [ 276.420191][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 276.460581][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 276.506390][ T5838] Bluetooth: hci0: command tx timeout [ 276.853244][T11302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.860567][T11302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.886770][T11302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.034881][T11302] hsr_slave_0: entered promiscuous mode [ 277.058796][T11302] hsr_slave_1: entered promiscuous mode [ 277.065228][T11302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.097780][T11302] Cannot create hsr debugfs directory [ 277.187210][T11249] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 277.282976][T11249] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 277.342271][T11249] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 277.355390][T11249] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 277.543910][T11523] veth27: entered promiscuous mode [ 277.957952][T11249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.023483][T11249] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.058348][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.065597][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.095955][ T5838] Bluetooth: hci3: command 0x040f tx timeout [ 278.125087][ T3448] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.132328][ T3448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.406487][T11302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 278.445614][T11302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 278.507542][T11302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 278.571972][T11302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 278.884553][T11580] syzkaller1: entered promiscuous mode [ 278.917564][T11580] syzkaller1: entered allmulticast mode [ 279.069061][T11302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.178004][T11249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.261086][T11302] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.336075][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.343278][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.408678][T11592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1525'. [ 279.479370][ T3448] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.486622][ T3448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.638506][T11249] veth0_vlan: entered promiscuous mode [ 279.695363][T11302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.770452][T11249] veth1_vlan: entered promiscuous mode [ 279.890116][T11249] veth0_macvtap: entered promiscuous mode [ 279.923041][T11249] veth1_macvtap: entered promiscuous mode [ 280.039365][T11249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.090127][T11249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.154121][T11249] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.175977][ T5838] Bluetooth: hci3: command 0x040f tx timeout [ 280.196153][T11249] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.216793][T11249] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.227307][T11249] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.363360][T11302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.516233][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.524108][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.628331][T11302] veth0_vlan: entered promiscuous mode [ 280.652577][T11302] veth1_vlan: entered promiscuous mode [ 280.709083][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.745423][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.788873][T11640] netlink: 'syz.3.1537': attribute type 25 has an invalid length. [ 280.829047][T11302] veth0_macvtap: entered promiscuous mode [ 280.862661][T11302] veth1_macvtap: entered promiscuous mode [ 280.870375][T11645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1536'. [ 280.951662][T11302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.023948][T11302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.051911][T11302] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.085399][T11302] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.140472][T11302] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.167810][T11302] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.259944][T11658] netlink: 'syz.2.1540': attribute type 39 has an invalid length. [ 281.731069][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1544'. [ 281.755492][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.785187][T11678] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1544'. [ 281.861303][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.885158][T11676] netlink: 'syz.4.1545': attribute type 11 has an invalid length. [ 281.910468][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.010878][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.104460][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.147170][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.178946][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.334834][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.548015][ T12] bridge_slave_1: left allmulticast mode [ 282.553754][ T12] bridge_slave_1: left promiscuous mode [ 282.570084][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.588129][ T12] bridge_slave_0: left allmulticast mode [ 282.593819][ T12] bridge_slave_0: left promiscuous mode [ 282.616656][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.229160][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.240540][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.264083][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.287999][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.299354][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.301077][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.321027][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.335296][ T12] bond0 (unregistering): Released all slaves [ 283.991194][ T12] hsr_slave_0: left promiscuous mode [ 284.001316][ T12] hsr_slave_1: left promiscuous mode [ 284.018996][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.026536][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.035571][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.046999][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.073592][ T12] veth1_macvtap: left promiscuous mode [ 284.080630][ T12] veth0_macvtap: left promiscuous mode [ 284.090001][ T12] veth1_vlan: left promiscuous mode [ 284.095358][ T12] veth0_vlan: left promiscuous mode [ 284.297305][T11727] netlink: 'syz.4.1548': attribute type 25 has an invalid length. [ 284.819570][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 284.838955][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 284.856040][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 284.869789][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 284.883187][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 285.116684][ T12] team0 (unregistering): Port device team_slave_1 removed [ 285.160388][ T12] team0 (unregistering): Port device team_slave_0 removed [ 285.376420][ T5838] Bluetooth: hci0: command tx timeout [ 285.850990][T11760] veth27: entered promiscuous mode [ 285.904023][T11704] chnl_net:caif_netlink_parms(): no params data found [ 285.940760][T11765] policy can only be matched on NF_INET_PRE_ROUTING [ 285.940783][T11765] unable to load match [ 286.150969][T11769] netlink: 'syz.4.1558': attribute type 1 has an invalid length. [ 286.287896][T11785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1559'. [ 286.413677][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.525060][T11704] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.540521][T11704] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.550094][T11704] bridge_slave_0: entered allmulticast mode [ 286.572047][T11704] bridge_slave_0: entered promiscuous mode [ 286.643154][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.695350][T11704] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.725275][T11704] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.753794][T11704] bridge_slave_1: entered allmulticast mode [ 286.780300][T11704] bridge_slave_1: entered promiscuous mode [ 286.935332][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.979121][ T5838] Bluetooth: hci3: command tx timeout [ 287.062756][T11704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.075316][T11704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.167851][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.281951][T11704] team0: Port device team_slave_0 added [ 287.312782][T11704] team0: Port device team_slave_1 added [ 287.412472][T11704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.421223][T11704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.453011][T11704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.456539][ T5838] Bluetooth: hci0: command tx timeout [ 287.471124][T11704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.481247][T11704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.507753][T11704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.544322][T11829] veth15: entered promiscuous mode [ 287.903003][T11849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1572'. [ 288.087705][T11704] hsr_slave_0: entered promiscuous mode [ 288.114468][T11704] hsr_slave_1: entered promiscuous mode [ 288.424111][T11747] chnl_net:caif_netlink_parms(): no params data found [ 288.464510][ T12] bridge_slave_1: left allmulticast mode [ 288.484756][ T12] bridge_slave_1: left promiscuous mode [ 288.494917][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.517286][ T12] bridge_slave_0: left allmulticast mode [ 288.522964][ T12] bridge_slave_0: left promiscuous mode [ 288.539929][T11875] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1578'. [ 288.545976][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.948592][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.960227][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.971390][ T12] bond0 (unregistering): Released all slaves [ 289.004195][T11881] bridge0: left allmulticast mode [ 289.012315][T11881] bond0: left promiscuous mode [ 289.019493][T11881] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 289.055956][ T5838] Bluetooth: hci3: command tx timeout [ 289.433691][T11894] veth15: entered promiscuous mode [ 289.478317][T11747] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.489655][T11747] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.504352][T11747] bridge_slave_0: entered allmulticast mode [ 289.520867][T11747] bridge_slave_0: entered promiscuous mode [ 289.535823][ T5838] Bluetooth: hci0: command tx timeout [ 289.621144][T11747] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.634456][T11747] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.644156][T11747] bridge_slave_1: entered allmulticast mode [ 289.669335][T11747] bridge_slave_1: entered promiscuous mode [ 289.842020][T11899] team0: Device vlan0 failed to change mtu [ 290.010795][ T12] hsr_slave_0: left promiscuous mode [ 290.042283][ T12] hsr_slave_1: left promiscuous mode [ 290.053994][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.068826][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.077126][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.084562][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.120226][ T12] veth1_macvtap: left promiscuous mode [ 290.126515][ T12] veth0_macvtap: left promiscuous mode [ 290.132316][ T12] veth1_vlan: left promiscuous mode [ 290.138692][ T12] veth0_vlan: left promiscuous mode [ 290.582517][ T12] team0 (unregistering): Port device team_slave_1 removed [ 290.628668][ T12] team0 (unregistering): Port device team_slave_0 removed [ 291.090371][T11747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.118797][T11747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.142171][ T5838] Bluetooth: hci3: command tx timeout [ 291.414454][T11747] team0: Port device team_slave_0 added [ 291.431079][T11747] team0: Port device team_slave_1 added [ 291.557656][T11747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.581281][T11747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.616657][ T5838] Bluetooth: hci0: command tx timeout [ 291.624527][T11747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.649028][T11747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.659054][T11747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.688089][T11747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.721202][T11933] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1594'. [ 291.743799][T11933] netlink: 'syz.4.1594': attribute type 7 has an invalid length. [ 291.775179][T11933] netlink: 'syz.4.1594': attribute type 8 has an invalid length. [ 291.791264][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1594'. [ 291.819529][T11704] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 291.840441][T11704] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 291.927111][T11747] hsr_slave_0: entered promiscuous mode [ 291.938987][T11747] hsr_slave_1: entered promiscuous mode [ 291.949515][T11747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.958131][T11747] Cannot create hsr debugfs directory [ 291.972061][T11704] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 292.057522][T11704] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 292.839220][T11704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.983698][T11704] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.016515][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.023756][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.070564][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.077816][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.218165][ T5838] Bluetooth: hci3: command tx timeout [ 293.304421][T11747] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 293.335275][T11747] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 293.347150][T11965] netlink: 'syz.2.1604': attribute type 10 has an invalid length. [ 293.388799][T11747] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 293.408236][T11747] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 293.540612][T11986] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1609'. [ 293.577416][T11985] trusted_key: syz.2.1608 sent an empty control message without MSG_MORE. [ 293.772978][T11991] veth23: entered promiscuous mode [ 293.779373][T11994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1613'. [ 293.890317][T11747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.969741][T11747] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.991880][T12004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1616'. [ 294.071400][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.078601][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.097842][T12002] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1615'. [ 294.120516][T12002] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1615'. [ 294.153197][T11704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.168816][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.176044][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.245503][T12010] syzkaller1: entered promiscuous mode [ 294.254262][T12010] syzkaller1: entered allmulticast mode [ 294.385198][T11747] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 294.396823][T11747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 294.441266][T12016] syzkaller1: entered promiscuous mode [ 294.453099][T12016] syzkaller1: entered allmulticast mode [ 294.544009][T12021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1624'. [ 294.649510][T11704] veth0_vlan: entered promiscuous mode [ 294.714764][T11704] veth1_vlan: entered promiscuous mode [ 294.838179][T11704] veth0_macvtap: entered promiscuous mode [ 294.854904][T11704] veth1_macvtap: entered promiscuous mode [ 294.908978][T11747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.937692][T11704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.965381][T11704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.999248][T11704] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.025952][T11704] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.034697][T11704] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.059295][T12038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1628'. [ 295.065720][T11704] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.238723][T11747] veth0_vlan: entered promiscuous mode [ 295.314313][T11747] veth1_vlan: entered promiscuous mode [ 295.404820][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.438569][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.512822][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.520654][T11747] veth0_macvtap: entered promiscuous mode [ 295.535111][T11747] veth1_macvtap: entered promiscuous mode [ 295.551287][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.830981][T11747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.853099][T12062] netlink: 'syz.3.1633': attribute type 1 has an invalid length. [ 295.951459][T12062] 8021q: adding VLAN 0 to HW filter on device bond14 [ 296.121825][T11747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.181815][T12065] bond14: (slave geneve2): making interface the new active one [ 296.200988][T12065] bond14: (slave geneve2): Enslaving as an active interface with an up link [ 296.235577][T12069] bond14: entered promiscuous mode [ 296.250444][T12069] geneve2: entered promiscuous mode [ 296.332648][ T1153] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.446632][T11747] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.455383][T11747] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.478501][T11747] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.488591][T11747] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.525006][ T1153] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.625189][ T1153] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.733213][ T1153] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.778192][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.793899][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.853044][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.864116][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.195372][ T1153] bridge_slave_1: left allmulticast mode [ 297.201427][ T1153] bridge_slave_1: left promiscuous mode [ 297.210863][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.221973][ T1153] bridge_slave_0: left allmulticast mode [ 297.229180][ T1153] bridge_slave_0: left promiscuous mode [ 297.234977][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.660672][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.673347][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.684497][ T1153] bond0 (unregistering): Released all slaves [ 298.131075][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.140869][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.155341][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.164339][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.174304][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.435733][ T1153] hsr_slave_0: left promiscuous mode [ 298.445751][ T1153] hsr_slave_1: left promiscuous mode [ 298.451872][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.475953][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.496663][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.504124][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.545219][ T1153] veth1_macvtap: left promiscuous mode [ 298.555630][ T1153] veth0_macvtap: left promiscuous mode [ 298.564290][ T1153] veth1_vlan: left promiscuous mode [ 298.573150][ T1153] veth0_vlan: left promiscuous mode [ 299.022021][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 299.159892][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 299.518548][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.527845][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.540687][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.557205][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.571255][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.959921][T12144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1641'. [ 300.035037][T12144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1641'. [ 300.265393][ T5838] Bluetooth: hci0: command tx timeout [ 300.307040][T12153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1643'. [ 300.689342][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1647'. [ 300.787695][T12109] chnl_net:caif_netlink_parms(): no params data found [ 301.011838][T12179] veth23: entered promiscuous mode [ 301.034005][ T5500] eql: remember to turn off Van-Jacobson compression on your slave devices [ 301.174780][ T1153] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.290232][ T1153] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.291690][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1652'. [ 301.332556][T12109] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.340404][T12109] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.348617][T12109] bridge_slave_0: entered allmulticast mode [ 301.356457][T12109] bridge_slave_0: entered promiscuous mode [ 301.421004][T12109] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.428718][T12109] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.436471][T12109] bridge_slave_1: entered allmulticast mode [ 301.444849][T12109] bridge_slave_1: entered promiscuous mode [ 301.459568][T12195] netlink: 'syz.3.1653': attribute type 10 has an invalid length. [ 301.482783][ T1153] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.579810][T12109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.597000][T12109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.617184][ T5838] Bluetooth: hci3: command tx timeout [ 301.683333][ T1153] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.729258][T12109] team0: Port device team_slave_0 added [ 301.743193][T12139] chnl_net:caif_netlink_parms(): no params data found [ 301.757205][T12109] team0: Port device team_slave_1 added [ 301.789456][T12203] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1654'. [ 301.889958][T12109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.905912][T12109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.932207][T12109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.948181][T12109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.961908][T12109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.990207][T12109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.335878][ T5838] Bluetooth: hci0: command tx timeout [ 302.495418][ T1153] bridge_slave_1: left allmulticast mode [ 302.519823][ T1153] bridge_slave_1: left promiscuous mode [ 302.532032][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.547602][ T1153] bridge_slave_0: left allmulticast mode [ 302.565806][ T1153] bridge_slave_0: left promiscuous mode [ 302.571636][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.995752][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.008044][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.021488][ T1153] bond0 (unregistering): Released all slaves [ 303.045477][T12139] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.053623][T12139] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.061335][T12139] bridge_slave_0: entered allmulticast mode [ 303.068702][T12139] bridge_slave_0: entered promiscuous mode [ 303.083761][T12109] hsr_slave_0: entered promiscuous mode [ 303.091274][T12109] hsr_slave_1: entered promiscuous mode [ 303.133338][T12139] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.141088][T12139] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.150087][T12139] bridge_slave_1: entered allmulticast mode [ 303.159207][T12139] bridge_slave_1: entered promiscuous mode [ 303.390264][T12139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.488340][T12251] xt_CT: No such helper "syz0" [ 303.577234][T12139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.695895][ T5838] Bluetooth: hci3: command tx timeout [ 303.922455][T12139] team0: Port device team_slave_0 added [ 303.975075][T12139] team0: Port device team_slave_1 added [ 304.212484][T12139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.226933][T12139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.253299][T12139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.330733][ T1153] hsr_slave_0: left promiscuous mode [ 304.377171][ T1153] hsr_slave_1: left promiscuous mode [ 304.385789][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.394402][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.403098][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.411257][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.419061][ T5838] Bluetooth: hci0: command tx timeout [ 304.467519][ T1153] veth1_macvtap: left promiscuous mode [ 304.473110][ T1153] veth0_macvtap: left promiscuous mode [ 304.486500][ T1153] veth1_vlan: left promiscuous mode [ 304.502097][ T1153] veth0_vlan: left promiscuous mode [ 305.080618][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 305.125412][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 305.539383][T12139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.548639][T12139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.575513][T12139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.776422][ T5838] Bluetooth: hci3: command tx timeout [ 305.822833][T12139] hsr_slave_0: entered promiscuous mode [ 305.829440][T12139] hsr_slave_1: entered promiscuous mode [ 305.835555][T12139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.844384][T12139] Cannot create hsr debugfs directory [ 306.496910][ T5838] Bluetooth: hci0: command tx timeout [ 306.704842][T12321] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.2.1683:12321 [ 307.188516][T12337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1685'. [ 307.206591][T12109] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 307.233234][T12109] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 307.293424][T12109] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 307.320896][T12109] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 307.513465][T12353] delete_channel: no stack [ 307.799827][T12109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.859778][ T5838] Bluetooth: hci3: command tx timeout [ 307.939902][T12109] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.983015][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.990230][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.158205][T12369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1689'. [ 308.177953][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.185108][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.302165][T12139] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 308.373889][T12139] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 308.410344][T12374] netlink: 'syz.3.1690': attribute type 12 has an invalid length. [ 308.434089][T12139] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 308.482788][T12376] bridge0: port 1(gretap0) entered blocking state [ 308.495975][T12376] bridge0: port 1(gretap0) entered disabled state [ 308.506428][T12376] gretap0: entered allmulticast mode [ 308.519827][T12356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1686'. [ 308.529506][T12376] gretap0: entered promiscuous mode [ 308.564777][T12139] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 308.567289][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1692'. [ 308.626464][T12387] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1692'. [ 308.714795][T12109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 309.099758][T12139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.192236][T12139] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.271115][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.278348][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.293095][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1697'. [ 309.432263][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.439522][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.680636][T12109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.947059][T12109] veth0_vlan: entered promiscuous mode [ 309.984366][T12109] veth1_vlan: entered promiscuous mode [ 310.124279][T12109] veth0_macvtap: entered promiscuous mode [ 310.163492][T12109] veth1_macvtap: entered promiscuous mode [ 310.536614][T12109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.779354][T12109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.845441][T12109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.869210][T12109] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.891286][T12109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.911271][T12109] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.963249][T12139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.158802][T12465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1706'. [ 311.194974][T12463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1705'. [ 311.259093][T12463] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1705'. [ 311.305248][T12139] veth0_vlan: entered promiscuous mode [ 311.338183][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.365623][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.488563][T12139] veth1_vlan: entered promiscuous mode [ 311.634042][T12475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1707'. [ 311.800542][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.826586][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.003258][T12139] veth0_macvtap: entered promiscuous mode [ 312.028949][T12139] veth1_macvtap: entered promiscuous mode [ 312.364413][T12139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.373074][T12499] netlink: 'syz.2.1711': attribute type 4 has an invalid length. [ 312.388373][T12139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.401251][T12139] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.411743][T12139] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.425294][T12500] netlink: 'syz.2.1711': attribute type 4 has an invalid length. [ 312.433922][T12139] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.443071][T12139] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.600125][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.746919][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.879273][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.960561][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.975144][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.010145][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.092738][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.113449][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.270199][ T36] bridge_slave_1: left allmulticast mode [ 313.288825][ T36] bridge_slave_1: left promiscuous mode [ 313.294659][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.314834][ T36] bridge_slave_0: left allmulticast mode [ 313.322363][ T36] bridge_slave_0: left promiscuous mode [ 313.328945][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.693411][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.707212][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.717320][ T36] bond0 (unregistering): Released all slaves [ 314.412593][ T36] hsr_slave_0: left promiscuous mode [ 314.428324][ T36] hsr_slave_1: left promiscuous mode [ 314.444729][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.461172][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.486760][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.504581][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.559203][ T36] veth1_macvtap: left promiscuous mode [ 314.565199][ T36] veth0_macvtap: left promiscuous mode [ 314.577659][ T36] veth1_vlan: left promiscuous mode [ 314.583038][ T36] veth0_vlan: left promiscuous mode [ 314.824792][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.849743][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.858714][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.874928][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.884387][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 315.212978][ T36] team0 (unregistering): Port device team_slave_1 removed [ 315.259248][ T36] team0 (unregistering): Port device team_slave_0 removed [ 316.131682][T12550] tipc: Enabled bearer , priority 0 [ 316.159976][T12553] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 316.180128][T12553] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 316.289189][T12550] syzkaller0: entered promiscuous mode [ 316.300064][T12550] syzkaller0: entered allmulticast mode [ 316.310815][T12550] tipc: Resetting bearer [ 316.462685][T12549] tipc: Resetting bearer [ 316.530509][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 316.546022][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 316.555862][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 316.572773][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 316.581045][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 316.979339][ T5838] Bluetooth: hci0: command tx timeout [ 317.141616][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.359782][T12549] tipc: Disabling bearer [ 318.518727][T12585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1722'. [ 318.530947][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.624086][T12585] macvlan3: entered promiscuous mode [ 318.629629][T12585] macvlan3: entered allmulticast mode [ 318.636380][T12585] batadv0: entered promiscuous mode [ 318.642131][T12585] batadv0: entered allmulticast mode [ 318.652684][T12585] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 318.668753][ T5838] Bluetooth: hci3: command tx timeout [ 318.698763][T12585] bond0: (slave macvlan3): Enslaving as a backup interface with an up link [ 318.889415][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.962984][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1725'. [ 319.056364][ T5838] Bluetooth: hci0: command tx timeout [ 319.159611][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.259205][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.859762][T12537] chnl_net:caif_netlink_parms(): no params data found [ 319.912386][ T36] bridge_slave_1: left allmulticast mode [ 319.919051][ T36] bridge_slave_1: left promiscuous mode [ 319.920283][T12627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.924856][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.958633][ T36] bridge_slave_0: left allmulticast mode [ 319.964329][ T36] bridge_slave_0: left promiscuous mode [ 319.970595][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.068945][T12632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1730'. [ 320.340539][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.352278][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.362440][ T36] bond0 (unregistering): Released all slaves [ 320.735842][ T5838] Bluetooth: hci3: command tx timeout [ 320.890544][T12654] netlink: 'syz.3.1736': attribute type 10 has an invalid length. [ 320.915493][T12654] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1736'. [ 320.953107][T12537] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.961673][T12537] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.971057][T12537] bridge_slave_0: entered allmulticast mode [ 320.979147][T12537] bridge_slave_0: entered promiscuous mode [ 320.993130][T12653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1737'. [ 321.027625][T12657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1738'. [ 321.056198][T12654] team0: Port device geneve0 added [ 321.066569][T12659] netlink: 'syz.4.1739': attribute type 9 has an invalid length. [ 321.070753][T12657] gretap0: left allmulticast mode [ 321.079574][T12657] gretap0: left promiscuous mode [ 321.084785][T12657] bridge0: port 1(gretap0) entered disabled state [ 321.094150][T12659] netlink: 'syz.4.1739': attribute type 9 has an invalid length. [ 321.136493][ T5838] Bluetooth: hci0: command tx timeout [ 321.265136][T12650] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.310836][T12537] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.320426][T12537] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.328283][T12537] bridge_slave_1: entered allmulticast mode [ 321.335600][T12537] bridge_slave_1: entered promiscuous mode [ 321.361373][T12665] tipc: Enabling of bearer rejected, already enabled [ 321.370815][T12565] chnl_net:caif_netlink_parms(): no params data found [ 321.624979][T12650] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.708559][ T36] hsr_slave_0: left promiscuous mode [ 321.718903][ T36] hsr_slave_1: left promiscuous mode [ 321.733368][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.743202][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.752316][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.760170][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.790832][ T36] veth1_macvtap: left promiscuous mode [ 321.796527][ T36] veth0_macvtap: left promiscuous mode [ 321.802162][ T36] veth1_vlan: left promiscuous mode [ 321.811265][ T36] veth0_vlan: left promiscuous mode [ 322.259364][ T36] team0 (unregistering): Port device team_slave_1 removed [ 322.305339][ T36] team0 (unregistering): Port device team_slave_0 removed [ 322.721622][T12537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.771645][T12650] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.798620][T12678] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 322.821552][ T5838] Bluetooth: hci3: command tx timeout [ 322.878886][T12537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.048657][T12650] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.216375][ T5838] Bluetooth: hci0: command tx timeout [ 323.228081][T12537] team0: Port device team_slave_0 added [ 323.248421][T12537] team0: Port device team_slave_1 added [ 323.283768][T12565] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.292449][T12565] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.300973][T12565] bridge_slave_0: entered allmulticast mode [ 323.321663][T12565] bridge_slave_0: entered promiscuous mode [ 323.369449][T12565] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.392187][T12565] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.404308][T12565] bridge_slave_1: entered allmulticast mode [ 323.423554][T12565] bridge_slave_1: entered promiscuous mode [ 323.438938][T12537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.466694][T12537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.533481][T12537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.587706][T12565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.617953][T12537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.631694][T12537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.666897][T12537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.713787][T12650] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.764509][T12650] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.794715][T12565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.928249][T12650] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.973531][T12565] team0: Port device team_slave_0 added [ 324.028159][T12650] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.044985][T12565] team0: Port device team_slave_1 added [ 324.057525][T12537] hsr_slave_0: entered promiscuous mode [ 324.063929][T12537] hsr_slave_1: entered promiscuous mode [ 324.219047][T12565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.229970][T12565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.265004][T12565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.278049][T12565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.285105][T12565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.314389][T12565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.520116][T12565] hsr_slave_0: entered promiscuous mode [ 324.527872][T12565] hsr_slave_1: entered promiscuous mode [ 324.535317][T12565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.567075][T12565] Cannot create hsr debugfs directory [ 324.896109][ T5838] Bluetooth: hci3: command tx timeout [ 325.000772][T12765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1773'. [ 325.553968][T12790] netlink: 'syz.2.1781': attribute type 1 has an invalid length. [ 325.591054][T12793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1783'. [ 325.645531][T12790] 8021q: adding VLAN 0 to HW filter on device bond11 [ 325.697221][T12795] 8021q: adding VLAN 0 to HW filter on device bond11 [ 325.704394][T12795] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 325.718523][T12795] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 325.850864][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1786'. [ 325.902520][T12790] veth27: entered promiscuous mode [ 325.916631][T12790] bond11: (slave veth27): Enslaving as an active interface with a down link [ 325.934537][T12800] vlan3: entered allmulticast mode [ 325.943884][T12800] bond11: entered allmulticast mode [ 326.030187][T12809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1788'. [ 326.689025][T12565] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 326.723653][T12565] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 326.762071][T12565] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 326.851378][T12565] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 326.935127][T12537] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 326.938941][T12856] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1801'. [ 326.979407][T12537] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 327.003025][T12537] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 327.051118][T12537] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 327.314100][T12565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.434830][T12565] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.481530][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.488783][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.564726][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.571952][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.764966][T12537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.959372][T12537] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.051438][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.058666][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.105555][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.112772][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.199756][T12909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1814'. [ 328.658566][T12565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.802902][T12565] veth0_vlan: entered promiscuous mode [ 328.866983][T12565] veth1_vlan: entered promiscuous mode [ 328.997108][T12537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.039794][T12942] syzkaller1: entered promiscuous mode [ 329.055588][T12942] syzkaller1: entered allmulticast mode [ 329.120429][T12565] veth0_macvtap: entered promiscuous mode [ 329.207603][T12565] veth1_macvtap: entered promiscuous mode [ 329.289399][T12565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.342374][T12565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.384289][T12565] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.403881][T12565] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.415432][T12565] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.426805][T12565] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.445411][T12537] veth0_vlan: entered promiscuous mode [ 329.582959][T12537] veth1_vlan: entered promiscuous mode [ 329.676066][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.683938][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.806633][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.839892][T12537] veth0_macvtap: entered promiscuous mode [ 329.862164][T12537] veth1_macvtap: entered promiscuous mode [ 329.869803][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.932060][T12537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.983948][T12537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.048768][T12979] bond0: (slave batadv0): Releasing backup interface [ 330.161022][T12979] team0: Port device geneve0 removed [ 330.175327][T12979] bond1: (slave gretap1): Releasing backup interface [ 330.191002][T12979] bond1: (slave gretap1): the permanent HWaddr of slave - 12:3d:40:d4:8b:cc - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 330.211882][T12979] bond1: (slave bond2): making interface the new active one [ 330.240450][T12979] bond1: (slave bond2): Releasing backup interface [ 330.264758][T12979] bond3: (slave gretap2): Releasing active interface [ 330.290695][T12979] bond4: (slave ip6erspan0): Releasing active interface [ 330.313080][T12979] bond5: (slave ip6gretap1): Releasing backup interface [ 330.326011][T12979] bond5: (slave ip6gretap1): the permanent HWaddr of slave - ea:a6:82:82:68:c6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 330.355281][T12979] bond5: (slave veth3): Releasing backup interface [ 330.377583][T12979] bond6: (slave veth5): Releasing backup interface [ 330.413423][T12979] bond13: (slave wireguard0): Releasing backup interface [ 330.437233][T12979] wireguard0: left promiscuous mode [ 330.465483][T12979] bond14: (slave geneve2): Releasing active interface [ 330.484232][T12979] geneve2: left promiscuous mode [ 330.516379][T12537] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.525129][T12537] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.570620][T12537] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.579810][T12537] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.901993][ T3448] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.065106][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.084221][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.143867][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.160784][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.202661][ T3448] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.364480][ T3448] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.478754][ T3448] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.746770][ T3448] bridge_slave_1: left allmulticast mode [ 331.752481][ T3448] bridge_slave_1: left promiscuous mode [ 331.779138][ T3448] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.828768][ T3448] bridge_slave_0: left allmulticast mode [ 331.834473][ T3448] bridge_slave_0: left promiscuous mode [ 331.866656][ T3448] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.489855][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.515255][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.523939][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.549945][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.565577][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.701928][ T3448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.713392][ T3448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.724286][ T3448] bond0 (unregistering): Released all slaves [ 333.363936][ T3448] hsr_slave_0: left promiscuous mode [ 333.374564][ T3448] hsr_slave_1: left promiscuous mode [ 333.391529][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.399545][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.413026][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.441747][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.538059][T13067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1844'. [ 333.547477][T13068] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 333.571377][ T3448] veth1_macvtap: left promiscuous mode [ 333.603862][ T3448] veth0_macvtap: left promiscuous mode [ 333.626872][ T3448] veth1_vlan: left promiscuous mode [ 333.647466][ T3448] veth0_vlan: left promiscuous mode [ 333.710396][ T10] hid-generic 0005:16C0:0006.0001: unknown main item tag 0x0 [ 333.836308][ T10] hid-generic 0005:16C0:0006.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz1] on aa:aa:aa:aa:aa:aa [ 334.105112][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.118162][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.128086][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.142677][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.150444][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.614809][ T3448] team0 (unregistering): Port device team_slave_1 removed [ 334.656285][ T5838] Bluetooth: hci0: command tx timeout [ 334.663531][ T3448] team0 (unregistering): Port device team_slave_0 removed [ 335.175895][T13074] veth29: entered promiscuous mode [ 335.719641][T13041] chnl_net:caif_netlink_parms(): no params data found [ 335.889307][T13117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1853'. [ 336.050784][ T3448] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.201055][ T3448] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.230371][T13041] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.238864][T13041] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.247304][T13041] bridge_slave_0: entered allmulticast mode [ 336.258396][ T5838] Bluetooth: hci3: command tx timeout [ 336.277475][T13041] bridge_slave_0: entered promiscuous mode [ 336.315515][T13041] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.323097][T13041] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.330498][T13041] bridge_slave_1: entered allmulticast mode [ 336.342627][T13041] bridge_slave_1: entered promiscuous mode [ 336.436741][ T3448] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.538962][T13131] syzkaller1: entered promiscuous mode [ 336.544657][T13131] syzkaller1: entered allmulticast mode [ 336.589017][ T3448] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.615618][T13041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.699537][T13041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.739787][ T5838] Bluetooth: hci0: command tx timeout [ 336.817997][T13041] team0: Port device team_slave_0 added [ 336.854349][T13041] team0: Port device team_slave_1 added [ 337.011237][T13041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.032307][T13041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.105485][T13041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.125627][T13041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.133060][T13041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.180997][T13041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.279971][ T3448] bridge_slave_1: left allmulticast mode [ 337.303425][ T3448] bridge_slave_1: left promiscuous mode [ 337.311734][ T3448] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.344445][ T3448] bridge_slave_0: left allmulticast mode [ 337.355001][ T3448] bridge_slave_0: left promiscuous mode [ 337.363852][ T3448] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.811421][ T3448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.822563][ T3448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.833318][ T3448] bond0 (unregistering): Released all slaves [ 337.949870][T13087] chnl_net:caif_netlink_parms(): no params data found [ 338.042848][T13041] hsr_slave_0: entered promiscuous mode [ 338.050337][T13041] hsr_slave_1: entered promiscuous mode [ 338.056853][T13041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.064478][T13041] Cannot create hsr debugfs directory [ 338.130998][T13180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1866'. [ 338.339197][ T5838] Bluetooth: hci3: command tx timeout [ 338.478205][T13198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1867'. [ 338.562066][T13087] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.583354][T13087] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.599591][T13087] bridge_slave_0: entered allmulticast mode [ 338.621447][T13087] bridge_slave_0: entered promiscuous mode [ 338.681517][T13087] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.692835][T13087] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.706419][T13087] bridge_slave_1: entered allmulticast mode [ 338.715247][T13087] bridge_slave_1: entered promiscuous mode [ 338.815928][ T5838] Bluetooth: hci0: command tx timeout [ 339.172312][T13087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.195317][T13087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.218495][ T3448] hsr_slave_0: left promiscuous mode [ 339.240813][ T3448] hsr_slave_1: left promiscuous mode [ 339.254747][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.268230][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.279115][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.290203][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.311782][ T3448] veth1_macvtap: left promiscuous mode [ 339.319962][ T3448] veth0_macvtap: left promiscuous mode [ 339.329684][ T3448] veth1_vlan: left promiscuous mode [ 339.335532][ T3448] veth0_vlan: left promiscuous mode [ 339.824078][ T3448] team0 (unregistering): Port device team_slave_1 removed [ 339.870999][ T3448] team0 (unregistering): Port device team_slave_0 removed [ 340.420381][ T5838] Bluetooth: hci3: command tx timeout [ 340.604530][T13087] team0: Port device team_slave_0 added [ 340.669971][T13242] team0: No ports can be present during mode change [ 340.865270][T13087] team0: Port device team_slave_1 added [ 340.895972][ T5838] Bluetooth: hci0: command tx timeout [ 341.076181][T13087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.083163][T13087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.110314][T13087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.162281][T13087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.172611][T13087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.207845][T13087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.430186][T13275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1887'. [ 341.490937][T13041] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 341.525449][T13278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1889'. [ 341.590512][T13087] hsr_slave_0: entered promiscuous mode [ 341.600936][T13282] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1891'. [ 341.601471][T13087] hsr_slave_1: entered promiscuous mode [ 341.659654][T13041] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 341.709289][T13041] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 341.732778][T13041] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 342.032010][T13300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1896'. [ 342.088495][T13300] veth15: entered promiscuous mode [ 342.140447][T13041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.165532][T13041] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.180951][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.188162][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.219068][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.226332][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.463506][T13087] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 342.496219][ T5838] Bluetooth: hci3: command tx timeout [ 342.502128][T13087] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 342.528465][T13087] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 342.543018][T13087] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 342.595479][T13305] veth23: entered promiscuous mode [ 342.736418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.868160][T13324] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1903'. [ 342.951970][T13087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.004354][T13087] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.030936][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.038157][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.060882][T13041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.080100][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.087322][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.161887][T13334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1907'. [ 343.231720][T13334] veth29: entered promiscuous mode [ 343.377587][T13041] veth0_vlan: entered promiscuous mode [ 343.422412][T13041] veth1_vlan: entered promiscuous mode [ 343.453109][T13339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1909'. [ 343.478333][T13339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1909'. [ 343.554697][T13041] veth0_macvtap: entered promiscuous mode [ 343.576605][T13342] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 343.607396][T13041] veth1_macvtap: entered promiscuous mode [ 343.670716][T13041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.719029][T13041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.800430][T13041] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.830159][T13041] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.856503][T13041] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.859615][T13355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1914'. [ 343.865248][T13041] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.990234][T13352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1913'. [ 344.054039][T13087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.222065][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.248024][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.351400][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.359925][T13087] veth0_vlan: entered promiscuous mode [ 344.375569][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.464178][T13087] veth1_vlan: entered promiscuous mode [ 344.550587][T13087] veth0_macvtap: entered promiscuous mode [ 344.596235][T13087] veth1_macvtap: entered promiscuous mode [ 344.764381][T13087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.797931][T13087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.834436][T13087] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.844619][T13087] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.854701][T13087] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.869367][T13087] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.057421][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.273960][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.440894][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.475820][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.530108][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.701680][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.735510][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.754855][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.183574][ T36] bridge_slave_1: left allmulticast mode [ 346.207216][ T36] bridge_slave_1: left promiscuous mode [ 346.213036][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.228440][ T36] bridge_slave_0: left allmulticast mode [ 346.234172][ T36] bridge_slave_0: left promiscuous mode [ 346.244597][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.043428][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.062213][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.081880][ T36] bond0 (unregistering): Released all slaves [ 347.131238][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.142160][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.167255][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.176518][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.184635][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 348.006480][ T36] hsr_slave_0: left promiscuous mode [ 348.012787][ T36] hsr_slave_1: left promiscuous mode [ 348.024075][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.031861][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.040337][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.048616][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.089924][ T36] veth1_macvtap: left promiscuous mode [ 348.095507][ T36] veth0_macvtap: left promiscuous mode [ 348.101933][ T36] veth1_vlan: left promiscuous mode [ 348.107441][ T36] veth0_vlan: left promiscuous mode [ 348.480988][T13450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1925'. [ 348.877550][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 348.887863][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 348.898634][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 348.910129][ T36] team0 (unregistering): Port device team_slave_1 removed [ 348.918150][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 348.929251][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 348.987576][ T36] team0 (unregistering): Port device team_slave_0 removed [ 349.296279][ T5838] Bluetooth: hci0: command tx timeout [ 349.497506][T13455] veth23: entered promiscuous mode [ 349.546927][T13425] chnl_net:caif_netlink_parms(): no params data found [ 349.917480][T13425] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.929313][T13425] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.945907][T13425] bridge_slave_0: entered allmulticast mode [ 349.954503][T13425] bridge_slave_0: entered promiscuous mode [ 349.973738][T13478] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1930'. [ 350.045028][T13425] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.060394][T13425] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.076087][T13425] bridge_slave_1: entered allmulticast mode [ 350.083198][T13425] bridge_slave_1: entered promiscuous mode [ 350.149270][T13425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.162406][T13475] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1930'. [ 350.202522][T13425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.365343][T13501] netlink: 'syz.2.1937': attribute type 1 has an invalid length. [ 350.378845][T13425] team0: Port device team_slave_0 added [ 350.481407][T13425] team0: Port device team_slave_1 added [ 350.491760][T13507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1938'. [ 350.585143][T13501] veth29: entered promiscuous mode [ 350.608490][T13513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1939'. [ 350.632382][T13501] bond12: (slave veth29): Enslaving as a backup interface with a down link [ 350.725475][T13425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.741430][T13425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.813078][T13425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.874174][T13425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.890184][T13425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.959957][T13425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.986534][ T5838] Bluetooth: hci3: command tx timeout [ 351.203436][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.326395][T13425] hsr_slave_0: entered promiscuous mode [ 351.333187][T13425] hsr_slave_1: entered promiscuous mode [ 351.344841][T13425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.361996][T13425] Cannot create hsr debugfs directory [ 351.375841][ T5838] Bluetooth: hci0: command tx timeout [ 351.469689][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.519401][T13547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1948'. [ 351.695179][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.859716][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.886111][T13466] chnl_net:caif_netlink_parms(): no params data found [ 352.274757][T13567] veth23: entered promiscuous mode [ 352.753508][T13466] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.764228][T13466] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.806943][T13466] bridge_slave_0: entered allmulticast mode [ 352.830898][T13466] bridge_slave_0: entered promiscuous mode [ 352.850295][T13466] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.863926][T13466] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.873659][T13466] bridge_slave_1: entered allmulticast mode [ 352.884127][T13466] bridge_slave_1: entered promiscuous mode [ 353.051366][T13597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1958'. [ 353.061837][T13597] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1958'. [ 353.066472][ T5838] Bluetooth: hci3: command tx timeout [ 353.153952][T13466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.179012][T13466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.222224][T13602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1959'. [ 353.454210][T13466] team0: Port device team_slave_0 added [ 353.477292][ T5838] Bluetooth: hci0: command tx timeout [ 353.527466][T13466] team0: Port device team_slave_1 added [ 353.535157][ T36] bridge_slave_1: left allmulticast mode [ 353.548823][ T36] bridge_slave_1: left promiscuous mode [ 353.554651][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.600828][ T36] bridge_slave_0: left allmulticast mode [ 353.615999][ T36] bridge_slave_0: left promiscuous mode [ 353.627721][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.200201][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.212122][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.224049][ T36] bond0 (unregistering): Released all slaves [ 354.340366][T13466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.350542][T13466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.378441][T13466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.466545][T13466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.473559][T13466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.500749][T13466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.674760][T13466] hsr_slave_0: entered promiscuous mode [ 354.686943][T13466] hsr_slave_1: entered promiscuous mode [ 354.693041][T13466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.707521][T13466] Cannot create hsr debugfs directory [ 354.775910][T13425] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 354.923130][T13425] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 354.979360][T13425] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 355.000877][T13425] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 355.098030][ T36] hsr_slave_0: left promiscuous mode [ 355.104540][ T36] hsr_slave_1: left promiscuous mode [ 355.115071][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.122962][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.132916][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.141098][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.148713][ T5838] Bluetooth: hci3: command tx timeout [ 355.174880][ T36] veth1_macvtap: left promiscuous mode [ 355.186107][ T36] veth0_macvtap: left promiscuous mode [ 355.191813][ T36] veth1_vlan: left promiscuous mode [ 355.208536][ T36] veth0_vlan: left promiscuous mode [ 355.536229][ T5838] Bluetooth: hci0: command tx timeout [ 355.837773][ T36] team0 (unregistering): Port device team_slave_1 removed [ 355.897030][ T36] team0 (unregistering): Port device team_slave_0 removed [ 356.769584][T13673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1969'. [ 356.931488][T13425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.054042][T13680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1970'. [ 357.168834][T13425] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.215815][ T5838] Bluetooth: hci3: command tx timeout [ 357.244345][T13683] tipc: Started in network mode [ 357.261464][T13683] tipc: Node identity , cluster identity 4711 [ 357.322917][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.330165][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.345080][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.352305][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.701931][T13466] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 357.735404][T13466] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 357.790871][T13466] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 357.860525][T13466] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 358.259965][T13466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.483462][T13466] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.536501][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.543739][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.564661][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.571924][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.609350][T13425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.726203][T13747] netlink: 'syz.3.1983': attribute type 13 has an invalid length. [ 358.760898][T13747] netlink: 'syz.3.1983': attribute type 17 has an invalid length. [ 358.815193][T13747] erspan0: refused to change device tx_queue_len [ 358.841094][T13747] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 358.893457][T13425] veth0_vlan: entered promiscuous mode [ 358.932567][T13425] veth1_vlan: entered promiscuous mode [ 359.053935][T13425] veth0_macvtap: entered promiscuous mode [ 359.101352][T13425] veth1_macvtap: entered promiscuous mode [ 359.149124][T13425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.191918][T13765] syzkaller1: entered promiscuous mode [ 359.201345][T13765] syzkaller1: entered allmulticast mode [ 359.257251][T13425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.306119][T13466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.314122][T13425] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.342488][T13425] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.353841][T13425] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.366916][T13425] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.467712][T13772] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1988'. [ 359.532647][T13466] veth0_vlan: entered promiscuous mode [ 359.578639][ T3448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.589965][T13466] veth1_vlan: entered promiscuous mode [ 359.600925][ T3448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.672463][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.683129][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.728901][T13466] veth0_macvtap: entered promiscuous mode [ 359.772654][T13466] veth1_macvtap: entered promiscuous mode [ 359.862107][T13466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.896922][T13466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.006260][T13466] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.015005][T13466] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.071033][T13466] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.090213][T13466] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.292784][ T44] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.419476][ T44] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.513709][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.534239][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.607291][ T44] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.650916][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.672278][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.702777][ T44] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.792922][T13466] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 360.804853][T13466] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 360.813292][T13466] CPU: 0 UID: 0 PID: 13466 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00167-g7544f3f5b0b5 #0 PREEMPT(full) [ 360.825544][T13466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 360.835617][T13466] RIP: 0010:klist_remove+0x14a/0x340 [ 360.840958][T13466] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 d9 41 c7 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ba 41 c7 f6 49 8b 44 24 58 48 89 44 24 08 [ 360.860585][T13466] RSP: 0018:ffffc90003957840 EFLAGS: 00010202 [ 360.866690][T13466] RAX: 000000000000000b RBX: ffff88802552da00 RCX: 0000000000000000 [ 360.874686][T13466] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 360.882676][T13466] RBP: ffffc90003957928 R08: ffffffff8f879843 R09: 1ffffffff1f0f308 [ 360.890667][T13466] R10: dffffc0000000000 R11: fffffbfff1f0f309 R12: 0000000000000000 [ 360.898659][T13466] R13: 1ffff1100adc690c R14: ffff888056e34860 R15: dffffc0000000000 [ 360.906651][T13466] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 360.915604][T13466] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.922206][T13466] CR2: 00007ffe6d62ad50 CR3: 000000003383e000 CR4: 00000000003526f0 [ 360.930201][T13466] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 360.938187][T13466] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 360.946177][T13466] Call Trace: [ 360.949487][T13466] [ 360.952447][T13466] ? __pfx_klist_remove+0x10/0x10 [ 360.957506][T13466] ? __pfx_kobject_move+0x10/0x10 [ 360.962556][T13466] ? get_device_parent+0x366/0x3a0 [ 360.967692][T13466] device_move+0x193/0x700 [ 360.972133][T13466] hci_conn_del_sysfs+0xb8/0x170 [ 360.977096][T13466] hci_conn_del+0x8ff/0xcb0 [ 360.981623][T13466] hci_conn_hash_flush+0x191/0x230 [ 360.986771][T13466] hci_dev_close_sync+0xaef/0x1330 [ 360.991911][T13466] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 360.997476][T13466] ? up_write+0x1c4/0x420 [ 361.001824][T13466] hci_unregister_dev+0x206/0x500 [ 361.006871][T13466] vhci_release+0x80/0xd0 [ 361.011216][T13466] ? __pfx_vhci_release+0x10/0x10 [ 361.016262][T13466] __fput+0x44c/0xa70 [ 361.020264][T13466] task_work_run+0x1d1/0x260 [ 361.024875][T13466] ? __pfx_task_work_run+0x10/0x10 [ 361.029999][T13466] ? kmem_cache_free+0x18f/0x400 [ 361.034953][T13466] do_exit+0x6ad/0x22e0 [ 361.039093][T13466] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 361.044461][T13466] ? __pfx_do_exit+0x10/0x10 [ 361.049041][T13466] ? _raw_spin_unlock_irq+0x23/0x50 [ 361.054232][T13466] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.059428][T13466] do_group_exit+0x21c/0x2d0 [ 361.064008][T13466] __x64_sys_exit_group+0x3f/0x40 [ 361.069023][T13466] x64_sys_call+0x21ba/0x21c0 [ 361.073678][T13466] do_syscall_64+0xfa/0x3b0 [ 361.078162][T13466] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.083342][T13466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.089405][T13466] ? clear_bhb_loop+0x60/0xb0 [ 361.094068][T13466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.099943][T13466] RIP: 0033:0x7f742418e929 [ 361.104362][T13466] Code: Unable to access opcode bytes at 0x7f742418e8ff. [ 361.111371][T13466] RSP: 002b:00007ffe6d62cf28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 361.119766][T13466] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f742418e929 [ 361.127723][T13466] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 361.135682][T13466] RBP: 00007f74241ee8f0 R08: 00007ffe6d62acc7 R09: 0000000000000003 [ 361.143652][T13466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.151607][T13466] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffe6d62d0e0 [ 361.159579][T13466] [ 361.162582][T13466] Modules linked in: [ 361.169171][T13466] ---[ end trace 0000000000000000 ]--- [ 361.179961][T13466] RIP: 0010:klist_remove+0x14a/0x340 [ 361.185405][T13466] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 d9 41 c7 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ba 41 c7 f6 49 8b 44 24 58 48 89 44 24 08 [ 361.205953][T13466] RSP: 0018:ffffc90003957840 EFLAGS: 00010202 [ 361.212076][T13466] RAX: 000000000000000b RBX: ffff88802552da00 RCX: 0000000000000000 [ 361.220135][T13466] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 361.228286][T13466] RBP: ffffc90003957928 R08: ffffffff8f879843 R09: 1ffffffff1f0f308 [ 361.236447][T13466] R10: dffffc0000000000 R11: fffffbfff1f0f309 R12: 0000000000000000 [ 361.244445][T13466] R13: 1ffff1100adc690c R14: ffff888056e34860 R15: dffffc0000000000 [ 361.253013][T13466] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 361.262469][T13466] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 361.269217][T13466] CR2: 00007ffe6d62ad50 CR3: 0000000033704000 CR4: 00000000003526f0 [ 361.278491][T13466] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 361.286603][T13466] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 361.294610][T13466] Kernel panic - not syncing: Fatal exception [ 361.300908][T13466] Kernel Offset: disabled [ 361.305219][T13466] Rebooting in 86400 seconds..