last executing test programs: 11.250283385s ago: executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0xb, 0x0, &(0x7f0000000080)) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000500)={0x1, &(0x7f0000000480)=[{0x15}]}, 0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x60, 0x12, 0x301, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "0deb0c0024604d5ecf1226af5a"}]}, 0x60}}, 0x0) 10.995293584s ago: executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$phonet(0x23, 0x2, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff000000, 0x0, 0xff, 0xffffff00], [0x0, 0xff, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'macvlan1\x00', {}, {}, 0x33, 0x4, 0x5, 0x23}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xffff, 0x5, 0x9, 'syz0\x00', {0x7fffffff}}}}, {{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0xff000000, 0xff000000, 0xff000000, 0xffffffff], [0xffffff, 0xff000000, 0xff000000, 0xffffff00], 'bridge0\x00', 'veth1\x00', {0xff}, {}, 0x3b, 0xfe, 0x1}, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@icmp6={{0x28}, {0xe, "7edb"}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5285a746e554ccb7}, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000002580)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000000f80)="ea", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="1b", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x400}, 0x8) 10.906591307s ago: executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x6, 0x1, &(0x7f0000000000), 0x4) 1.204768695s ago: executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000780)=@getchain={0x24, 0x66, 0x54344af52948ef07, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xb}}}, 0x24}}, 0x0) 286.644076ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x12, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='sched_switch\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000040), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r4, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000440)={0x0, 0xfffffc01}, 0xc) writev(r4, &(0x7f0000000580)=[{&(0x7f00000003c0)='k', 0x1600}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000016000706000000000000df2502"], 0x44}}, 0x0) recvmmsg(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000180)) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000480)={'virt_wifi0\x00', 0x990, 0x101}) ioctl$PPPIOCSPASS(r3, 0x8010743f, &(0x7f0000000080)={0x0, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'geneve0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="1412e0c84935a9738e0ff2f788a8", 0xe, 0x0, &(0x7f00000007c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x701}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 0s ago: executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) socket(0x2, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000300)="d9", 0x1}], 0x1}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000480)="fe610982195502a6ed8f797ea111bf19e17706e06f9d131075fc48b9ae18f21a20656de425c72c55047b0fec46dbd8243ec76ea07fac8a736269328c1abe9c5fb95a865aa6a2e4af75e31183633e63f2d3d5948f4a315728330b103701c3b2d86e8aa67e19196c64eeedbaeb65da86bfbb332f55be1424959b1d505c81f81414062c96d494b7d452db9e635a8e31891effb8185766e5e9e9d857dd44a666c84265bcc52069c10dfc6f71de46cb33af9d1c724eee3af1e3a4068163a2ca997d75e637c995684a394123a57f8ef5f8ae8595077ef536a93c8a81f821", 0xdb, 0x4, &(0x7f0000000240)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00', 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x100}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b700000014000000b70300000000000085000000b2000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000058008500000000000000b7000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x130}, 0x9c) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$sock(r4, &(0x7f0000008680)=[{{0x0, 0x0, &(0x7f0000007b40)=[{&(0x7f0000007ac0)="0f", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000000)=0xac1, 0x4) recvmmsg(r4, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000002340), 0x0, &(0x7f0000002380)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000600)=""/66, 0x42}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000740)=""/8, 0x8}, {&(0x7f0000000980)=""/180, 0xb4}, {&(0x7f0000000780)=""/64, 0x40}, {&(0x7f0000000a40)=""/149, 0x95}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/13, 0xd}, 0x868}, {{&(0x7f0000000c80)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/32, 0x20}, {&(0x7f0000000d40)=""/236, 0xec}], 0x2, &(0x7f0000000e80)=""/163, 0xa3}, 0x200}, {{&(0x7f0000000f40)=@qipcrtr, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000fc0)=""/217, 0xd9}, {&(0x7f00000010c0)=""/171, 0xab}, {&(0x7f0000001180)=""/201, 0xc9}, {&(0x7f0000001280)=""/70, 0x46}, {&(0x7f0000001300)=""/202, 0xca}, {&(0x7f0000001400)=""/226, 0xe2}, {&(0x7f0000001500)=""/193, 0xc1}, {&(0x7f0000001600)=""/186, 0xba}, {&(0x7f00000016c0)=""/73, 0x49}, {&(0x7f0000001740)=""/117, 0x75}], 0xa}, 0x2}], 0x4, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts. 2024/06/23 02:51:08 fuzzer started 2024/06/23 02:51:08 dialing manager at 10.128.0.163:30034 syzkaller login: [ 55.067740][ T5090] cgroup: Unknown subsys name 'net' [ 55.288840][ T5090] cgroup: Unknown subsys name 'rlimit' 2024/06/23 02:51:10 starting 3 executor processes [ 56.334799][ T5091] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.809401][ T5111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.812429][ T5112] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.825828][ T5112] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.827161][ T5111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.833616][ T5112] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.841110][ T5111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.849805][ T5112] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.854990][ T5111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.861892][ T5112] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.868510][ T5111] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.874993][ T5112] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.882392][ T5111] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.968699][ T4490] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.977009][ T4490] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.984881][ T4490] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.993275][ T4490] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.001577][ T4490] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.009147][ T4490] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.253859][ T5107] chnl_net:caif_netlink_parms(): no params data found [ 57.354542][ T5108] chnl_net:caif_netlink_parms(): no params data found [ 57.441031][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.449190][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.457614][ T5107] bridge_slave_0: entered allmulticast mode [ 57.464447][ T5107] bridge_slave_0: entered promiscuous mode [ 57.477403][ T5115] chnl_net:caif_netlink_parms(): no params data found [ 57.500642][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.508024][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.515156][ T5107] bridge_slave_1: entered allmulticast mode [ 57.522521][ T5107] bridge_slave_1: entered promiscuous mode [ 57.582328][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.589640][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.597938][ T5108] bridge_slave_0: entered allmulticast mode [ 57.604667][ T5108] bridge_slave_0: entered promiscuous mode [ 57.614921][ T5107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.628802][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.641938][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.649566][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.657442][ T5108] bridge_slave_1: entered allmulticast mode [ 57.665040][ T5108] bridge_slave_1: entered promiscuous mode [ 57.731831][ T5107] team0: Port device team_slave_0 added [ 57.749439][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.762825][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.773902][ T5107] team0: Port device team_slave_1 added [ 57.792727][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.799987][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.807334][ T5115] bridge_slave_0: entered allmulticast mode [ 57.814189][ T5115] bridge_slave_0: entered promiscuous mode [ 57.849933][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.857395][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.864695][ T5115] bridge_slave_1: entered allmulticast mode [ 57.872406][ T5115] bridge_slave_1: entered promiscuous mode [ 57.892924][ T5108] team0: Port device team_slave_0 added [ 57.901344][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.908444][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.934586][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.948867][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.955926][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.982065][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.007811][ T5108] team0: Port device team_slave_1 added [ 58.022953][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.059398][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.069943][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.077366][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.103655][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.150329][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.157499][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.183868][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.201572][ T5115] team0: Port device team_slave_0 added [ 58.210745][ T5115] team0: Port device team_slave_1 added [ 58.250590][ T5107] hsr_slave_0: entered promiscuous mode [ 58.257681][ T5107] hsr_slave_1: entered promiscuous mode [ 58.278785][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.285917][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.312087][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.343897][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.350926][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.377104][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.411359][ T5108] hsr_slave_0: entered promiscuous mode [ 58.417887][ T5108] hsr_slave_1: entered promiscuous mode [ 58.423945][ T5108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.431949][ T5108] Cannot create hsr debugfs directory [ 58.520916][ T5115] hsr_slave_0: entered promiscuous mode [ 58.527269][ T5115] hsr_slave_1: entered promiscuous mode [ 58.533483][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.542240][ T5115] Cannot create hsr debugfs directory [ 58.783432][ T5107] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.809643][ T5107] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.823738][ T5107] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.838934][ T5107] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.857493][ T5115] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.871319][ T5115] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.883332][ T5115] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.894374][ T5115] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.936566][ T5111] Bluetooth: hci1: command tx timeout [ 58.942935][ T4490] Bluetooth: hci0: command tx timeout [ 59.000570][ T5108] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.010911][ T5108] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.042473][ T5108] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.053008][ T5108] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.096490][ T4490] Bluetooth: hci2: command tx timeout [ 59.138434][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.159259][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.185381][ T5107] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.212626][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.219974][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.238700][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.247367][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.254525][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.286978][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.294133][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.331026][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.338720][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.409023][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.449327][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.485853][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.493013][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.527345][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.534503][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.703805][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.790204][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.804445][ T5107] veth0_vlan: entered promiscuous mode [ 59.830029][ T5107] veth1_vlan: entered promiscuous mode [ 59.864950][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.905383][ T5115] veth0_vlan: entered promiscuous mode [ 59.936802][ T5107] veth0_macvtap: entered promiscuous mode [ 59.945480][ T5115] veth1_vlan: entered promiscuous mode [ 59.970026][ T5107] veth1_macvtap: entered promiscuous mode [ 60.000672][ T5108] veth0_vlan: entered promiscuous mode [ 60.022807][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.044423][ T5115] veth0_macvtap: entered promiscuous mode [ 60.054723][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.069906][ T5107] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.079287][ T5107] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.088722][ T5107] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.097901][ T5107] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.109898][ T5108] veth1_vlan: entered promiscuous mode [ 60.133592][ T5115] veth1_macvtap: entered promiscuous mode [ 60.184984][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.198158][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.211543][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.227208][ T5108] veth0_macvtap: entered promiscuous mode [ 60.251487][ T5108] veth1_macvtap: entered promiscuous mode [ 60.260929][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.272607][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.284669][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.312151][ T5115] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.321479][ T5115] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.331182][ T5115] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.340255][ T5115] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.371766][ T2882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.393229][ T2882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.414823][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.425826][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.435645][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.447839][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.461650][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.487217][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.498689][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.509128][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.519798][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.530871][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.558626][ T5108] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.571263][ T5108] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.580964][ T5108] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.590654][ T5108] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.606138][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.615338][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.715190][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.740173][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.792898][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.821903][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.822949][ T5153] Zero length message leads to an empty skb [ 60.843930][ T2472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.852406][ T2472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.943873][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.973376][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.016974][ T5111] Bluetooth: hci1: command tx timeout [ 61.022470][ T4490] Bluetooth: hci0: command tx timeout [ 61.177707][ T4490] Bluetooth: hci2: command tx timeout [ 61.518470][ T5111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.527548][ T5111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.535692][ T5111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.544629][ T5111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.553051][ T5111] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.560758][ T5111] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.673161][ T4490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.682195][ T4490] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.690913][ T4490] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.704321][ T4490] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.713085][ T4490] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.720930][ T4490] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.892057][ T5163] chnl_net:caif_netlink_parms(): no params data found [ 62.304748][ T4490] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.317017][ T4490] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.326593][ T4490] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.329479][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.341668][ T5163] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.349954][ T4490] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.350186][ T5163] bridge_slave_0: entered allmulticast mode [ 62.358151][ T4490] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.365573][ T5163] bridge_slave_0: entered promiscuous mode [ 62.370712][ T4490] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.380304][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.390658][ T5163] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.404907][ T5163] bridge_slave_1: entered allmulticast mode [ 62.414690][ T5163] bridge_slave_1: entered promiscuous mode [ 62.475208][ T5163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.491486][ T5165] chnl_net:caif_netlink_parms(): no params data found [ 62.503088][ T5163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.563663][ T5163] team0: Port device team_slave_0 added [ 62.572462][ T5163] team0: Port device team_slave_1 added [ 62.640071][ T5163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.648005][ T5163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.674499][ T5163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.707482][ T5163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.714451][ T5163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.742331][ T5163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.781872][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.789164][ T5165] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.796658][ T5165] bridge_slave_0: entered allmulticast mode [ 62.803494][ T5165] bridge_slave_0: entered promiscuous mode [ 62.813637][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.820874][ T5165] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.829555][ T5165] bridge_slave_1: entered allmulticast mode [ 62.837537][ T5165] bridge_slave_1: entered promiscuous mode [ 62.874437][ T5165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.904282][ T5165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.957439][ T5165] team0: Port device team_slave_0 added [ 62.968634][ T5163] hsr_slave_0: entered promiscuous mode [ 62.975375][ T5163] hsr_slave_1: entered promiscuous mode [ 62.982650][ T5163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.991290][ T5163] Cannot create hsr debugfs directory [ 63.001277][ T5165] team0: Port device team_slave_1 added [ 63.049498][ T5165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.056748][ T5165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.084509][ T5165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.123289][ T5165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.130432][ T5165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.157519][ T5165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.299868][ T5165] hsr_slave_0: entered promiscuous mode [ 63.307794][ T5165] hsr_slave_1: entered promiscuous mode [ 63.314204][ T5165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.323070][ T5165] Cannot create hsr debugfs directory [ 63.399750][ T5163] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.414741][ T5176] chnl_net:caif_netlink_parms(): no params data found [ 63.572159][ T5176] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.579636][ T5111] Bluetooth: hci0: command tx timeout [ 63.583065][ T5176] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.592526][ T5176] bridge_slave_0: entered allmulticast mode [ 63.607386][ T5176] bridge_slave_0: entered promiscuous mode [ 63.615111][ T5176] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.622901][ T5176] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.631062][ T5176] bridge_slave_1: entered allmulticast mode [ 63.638688][ T5176] bridge_slave_1: entered promiscuous mode [ 63.684829][ T5176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.699921][ T5176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.728625][ T5176] team0: Port device team_slave_0 added [ 63.737539][ T5176] team0: Port device team_slave_1 added [ 63.764842][ T5176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.772620][ T5176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.799127][ T5176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.812477][ T5176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.821130][ T5176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.826364][ T5111] Bluetooth: hci1: command tx timeout [ 63.847788][ T5176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.895547][ T5176] hsr_slave_0: entered promiscuous mode [ 63.901973][ T5176] hsr_slave_1: entered promiscuous mode [ 63.908787][ T5176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.917099][ T5176] Cannot create hsr debugfs directory [ 64.457189][ T5111] Bluetooth: hci2: command tx timeout [ 65.191324][ T5163] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.248775][ T5163] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.310173][ T5163] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.397672][ T51] bridge_slave_1: left allmulticast mode [ 65.403499][ T51] bridge_slave_1: left promiscuous mode [ 65.410179][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.432691][ T51] bridge_slave_0: left allmulticast mode [ 65.439334][ T51] bridge_slave_0: left promiscuous mode [ 65.445020][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.657397][ T5111] Bluetooth: hci0: command tx timeout [ 65.715414][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.730371][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.741497][ T51] bond0 (unregistering): Released all slaves [ 65.766696][ T5165] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.851978][ T5165] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.896926][ T5111] Bluetooth: hci1: command tx timeout [ 65.969959][ T5165] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.051799][ T5165] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.135345][ T51] hsr_slave_0: left promiscuous mode [ 66.141730][ T51] hsr_slave_1: left promiscuous mode [ 66.148688][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.159085][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.168151][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.175574][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.195017][ T51] veth1_macvtap: left promiscuous mode [ 66.201646][ T51] veth0_macvtap: left promiscuous mode [ 66.208261][ T51] veth1_vlan: left promiscuous mode [ 66.213831][ T51] veth0_vlan: left promiscuous mode [ 66.520553][ T51] team0 (unregistering): Port device team_slave_1 removed [ 66.546038][ T5111] Bluetooth: hci2: command tx timeout [ 66.554343][ T51] team0 (unregistering): Port device team_slave_0 removed [ 66.861333][ T5165] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.902733][ T5176] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.918940][ T5165] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.931520][ T5165] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.949556][ T5165] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.972493][ T5176] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.057395][ T5176] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.092277][ T5165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.121938][ T5176] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.141451][ T5165] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.168142][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.175264][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.189853][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.197028][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.268696][ T5165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.349600][ T5163] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.368252][ T5163] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.387336][ T5163] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.400190][ T51] bridge_slave_1: left allmulticast mode [ 67.412482][ T51] bridge_slave_1: left promiscuous mode [ 67.418551][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.428689][ T51] bridge_slave_0: left allmulticast mode [ 67.434785][ T51] bridge_slave_0: left promiscuous mode [ 67.440759][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.452295][ T51] bridge_slave_1: left allmulticast mode [ 67.458503][ T51] bridge_slave_1: left promiscuous mode [ 67.464293][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.475262][ T51] bridge_slave_0: left allmulticast mode [ 67.482271][ T51] bridge_slave_0: left promiscuous mode [ 67.488344][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.738142][ T5111] Bluetooth: hci0: command tx timeout [ 67.937999][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.952485][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.963408][ T51] bond0 (unregistering): Released all slaves [ 67.975991][ T5111] Bluetooth: hci1: command tx timeout [ 68.021619][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.036971][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.052410][ T51] bond0 (unregistering): Released all slaves [ 68.085391][ T5163] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.153652][ T5176] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.182434][ T5176] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.199295][ T5176] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.237095][ T5176] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.279919][ T5165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.439387][ T5163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.449374][ T5165] veth0_vlan: entered promiscuous mode [ 68.496682][ T5163] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.530153][ T5165] veth1_vlan: entered promiscuous mode [ 68.544148][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.551299][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.603802][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.611019][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.620575][ T5111] Bluetooth: hci2: command tx timeout [ 68.648567][ T5176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.720260][ T51] hsr_slave_0: left promiscuous mode [ 68.727288][ T51] hsr_slave_1: left promiscuous mode [ 68.733439][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.742646][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.753712][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.761498][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.776505][ T51] hsr_slave_0: left promiscuous mode [ 68.782596][ T51] hsr_slave_1: left promiscuous mode [ 68.790432][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.798035][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.806732][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.814142][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.840203][ T51] veth1_macvtap: left promiscuous mode [ 68.845905][ T51] veth0_macvtap: left promiscuous mode [ 68.851549][ T51] veth1_vlan: left promiscuous mode [ 68.857237][ T51] veth0_vlan: left promiscuous mode [ 68.863464][ T51] veth1_macvtap: left promiscuous mode [ 68.869329][ T51] veth0_macvtap: left promiscuous mode [ 68.874903][ T51] veth1_vlan: left promiscuous mode [ 68.880318][ T51] veth0_vlan: left promiscuous mode [ 69.270753][ T51] team0 (unregistering): Port device team_slave_1 removed [ 69.304416][ T51] team0 (unregistering): Port device team_slave_0 removed [ 69.742543][ T51] team0 (unregistering): Port device team_slave_1 removed [ 69.769552][ T51] team0 (unregistering): Port device team_slave_0 removed [ 69.821432][ T5111] Bluetooth: hci0: command tx timeout [ 70.022913][ T5176] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.051286][ T5192] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.058487][ T5192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.073398][ T5111] Bluetooth: hci1: command tx timeout [ 70.102875][ T5192] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.110021][ T5192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.139758][ T5165] veth0_macvtap: entered promiscuous mode [ 70.171915][ T5165] veth1_macvtap: entered promiscuous mode [ 70.216967][ T5176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.255147][ T5165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.291543][ T5165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.323365][ T5165] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.354393][ T5165] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.363406][ T5165] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.372436][ T5165] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.578370][ T5163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.593311][ T5176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.600825][ T745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.619873][ T745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.688804][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.699144][ T5111] Bluetooth: hci2: command tx timeout [ 70.708006][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.738894][ T5176] veth0_vlan: entered promiscuous mode [ 70.753384][ T5163] veth0_vlan: entered promiscuous mode [ 70.778243][ T5163] veth1_vlan: entered promiscuous mode [ 70.802522][ T5176] veth1_vlan: entered promiscuous mode [ 70.851300][ T5163] veth0_macvtap: entered promiscuous mode [ 70.877944][ T5163] veth1_macvtap: entered promiscuous mode [ 70.920130][ T5176] veth0_macvtap: entered promiscuous mode [ 70.941461][ T5163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.955622][ T5163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.977660][ T5163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.018110][ T5176] veth1_macvtap: entered promiscuous mode [ 71.028601][ T5163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.057511][ T5163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.087916][ T5163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.139340][ T5163] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.158726][ T5163] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.168752][ T5163] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.183714][ T5163] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.272288][ T4490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.277556][ T5176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.290036][ T5176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.298358][ T4490] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.303793][ T5176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.308438][ T4490] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.321680][ T5176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.326503][ T4490] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.337725][ T5176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.346422][ T4490] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.355954][ T4490] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.393766][ T5176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.404394][ T5176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.417758][ T5176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.428564][ T5176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.440231][ T5176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.453151][ T5176] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.462724][ T5176] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.471707][ T5176] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.481048][ T5176] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.557209][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.565074][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.633013][ T745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.652459][ T745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.721597][ T745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.732648][ T745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.753900][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.763734][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.838709][ T5208] sctp: [Deprecated]: syz-executor.0 (pid 5208) Use of int in max_burst socket option deprecated. [ 71.838709][ T5208] Use struct sctp_assoc_value instead [ 71.881694][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.906491][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.918390][ T5208] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 72.025606][ T5205] chnl_net:caif_netlink_parms(): no params data found [ 72.317291][ T5205] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.324672][ T5205] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.332630][ T5205] bridge_slave_0: entered allmulticast mode [ 72.340886][ T5205] bridge_slave_0: entered promiscuous mode [ 72.394123][ T5205] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.401995][ T5205] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.414426][ T5205] bridge_slave_1: entered allmulticast mode [ 72.422864][ T5205] bridge_slave_1: entered promiscuous mode [ 72.431441][ T4490] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.445952][ T4490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.454778][ T4490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.465544][ T4490] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.479805][ T4490] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.489766][ T4490] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.509931][ T5205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.539890][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.561580][ T5205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.610950][ T5205] team0: Port device team_slave_0 added [ 72.622005][ T5205] team0: Port device team_slave_1 added [ 72.667220][ T5205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.674291][ T5205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.702546][ T5205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.714997][ T5205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.722284][ T5205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.748793][ T5205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.821661][ T5205] hsr_slave_0: entered promiscuous mode [ 72.828627][ T5205] hsr_slave_1: entered promiscuous mode [ 72.951935][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.171416][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.244921][ T5111] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.255165][ T5111] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.264962][ T5111] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.276800][ T5111] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.284573][ T5111] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.292424][ T5111] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.306141][ T4490] ================================================================== [ 73.314235][ T4490] BUG: KASAN: double-free in hci_req_sync_complete+0xe8/0x290 [ 73.321724][ T4490] Free of addr ffff888028e27780 by task kworker/u9:1/4490 [ 73.328821][ T4490] [ 73.331144][ T4490] CPU: 0 PID: 4490 Comm: kworker/u9:1 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 73.341370][ T4490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 73.351421][ T4490] Workqueue: hci2 hci_rx_work [ 73.356104][ T4490] Call Trace: [ 73.359375][ T4490] [ 73.362296][ T4490] dump_stack_lvl+0x241/0x360 [ 73.367021][ T4490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.372223][ T4490] ? __pfx__printk+0x10/0x10 [ 73.376812][ T4490] ? _printk+0xd5/0x120 [ 73.381055][ T4490] ? __virt_addr_valid+0x183/0x520 [ 73.386161][ T4490] ? __virt_addr_valid+0x183/0x520 [ 73.391273][ T4490] print_report+0x169/0x550 [ 73.395773][ T4490] ? __virt_addr_valid+0x183/0x520 [ 73.400879][ T4490] ? __virt_addr_valid+0x183/0x520 [ 73.405985][ T4490] ? __virt_addr_valid+0x44e/0x520 [ 73.411091][ T4490] ? __phys_addr+0xba/0x170 [ 73.415589][ T4490] ? hci_req_sync_complete+0xe8/0x290 [ 73.420954][ T4490] kasan_report_invalid_free+0x11a/0x140 [ 73.426588][ T4490] ? hci_req_sync_complete+0xe8/0x290 [ 73.431955][ T4490] ? hci_req_sync_complete+0xe8/0x290 [ 73.437317][ T4490] poison_slab_object+0xf4/0x150 [ 73.442248][ T4490] ? hci_req_sync_complete+0xe8/0x290 [ 73.447612][ T4490] __kasan_slab_free+0x37/0x60 [ 73.452372][ T4490] kmem_cache_free+0x145/0x350 [ 73.457130][ T4490] hci_req_sync_complete+0xe8/0x290 [ 73.462328][ T4490] hci_event_packet+0xc75/0x1540 [ 73.467263][ T4490] ? __pfx_hci_cmd_complete_evt+0x10/0x10 [ 73.472984][ T4490] ? __pfx_hci_event_packet+0x10/0x10 [ 73.478347][ T4490] ? do_raw_spin_unlock+0x13c/0x8b0 [ 73.483547][ T4490] ? __pfx_hci_req_sync_complete+0x10/0x10 [ 73.489347][ T4490] ? hci_send_to_monitor+0xd8/0x7f0 [ 73.494538][ T4490] ? kcov_remote_start+0x9e/0x7e0 [ 73.499559][ T4490] hci_rx_work+0x3e8/0xca0 [ 73.503967][ T4490] ? process_scheduled_works+0x945/0x1830 [ 73.509678][ T4490] process_scheduled_works+0xa2c/0x1830 [ 73.515227][ T4490] ? __pfx_process_scheduled_works+0x10/0x10 [ 73.521201][ T4490] ? assign_work+0x364/0x3d0 [ 73.525786][ T4490] worker_thread+0x86d/0xd70 [ 73.530381][ T4490] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 73.536271][ T4490] ? __kthread_parkme+0x169/0x1d0 [ 73.541286][ T4490] ? __pfx_worker_thread+0x10/0x10 [ 73.546388][ T4490] kthread+0x2f0/0x390 [ 73.550449][ T4490] ? __pfx_worker_thread+0x10/0x10 [ 73.555554][ T4490] ? __pfx_kthread+0x10/0x10 [ 73.560140][ T4490] ret_from_fork+0x4b/0x80 [ 73.564551][ T4490] ? __pfx_kthread+0x10/0x10 [ 73.569137][ T4490] ret_from_fork_asm+0x1a/0x30 [ 73.573901][ T4490] [ 73.576906][ T4490] [ 73.579216][ T4490] Allocated by task 4490: [ 73.583529][ T4490] kasan_save_track+0x3f/0x80 [ 73.588202][ T4490] __kasan_slab_alloc+0x66/0x80 [ 73.593046][ T4490] kmem_cache_alloc_noprof+0x135/0x2a0 [ 73.598511][ T4490] skb_clone+0x20c/0x390 [ 73.602747][ T4490] hci_cmd_work+0x2a2/0x670 [ 73.607240][ T4490] process_scheduled_works+0xa2c/0x1830 [ 73.612774][ T4490] worker_thread+0x86d/0xd70 [ 73.617359][ T4490] kthread+0x2f0/0x390 [ 73.621420][ T4490] ret_from_fork+0x4b/0x80 [ 73.626004][ T4490] ret_from_fork_asm+0x1a/0x30 [ 73.630767][ T4490] [ 73.633079][ T4490] Freed by task 5225: [ 73.637040][ T4490] kasan_save_track+0x3f/0x80 [ 73.641709][ T4490] kasan_save_free_info+0x40/0x50 [ 73.646720][ T4490] poison_slab_object+0xe0/0x150 [ 73.651654][ T4490] __kasan_slab_free+0x37/0x60 [ 73.656409][ T4490] kmem_cache_free+0x145/0x350 [ 73.661163][ T4490] __hci_req_sync+0x631/0x950 [ 73.665834][ T4490] hci_req_sync+0xa9/0xd0 [ 73.670161][ T4490] hci_dev_cmd+0x4c5/0xa50 [ 73.674571][ T4490] sock_do_ioctl+0x158/0x460 [ 73.679156][ T4490] sock_ioctl+0x629/0x8e0 [ 73.683479][ T4490] __se_sys_ioctl+0xfc/0x170 [ 73.688063][ T4490] do_syscall_64+0xf3/0x230 [ 73.692562][ T4490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.698445][ T4490] [ 73.700756][ T4490] The buggy address belongs to the object at ffff888028e27780 [ 73.700756][ T4490] which belongs to the cache skbuff_head_cache of size 240 [ 73.715317][ T4490] The buggy address is located 0 bytes inside of [ 73.715317][ T4490] 240-byte region [ffff888028e27780, ffff888028e27870) [ 73.728494][ T4490] [ 73.730802][ T4490] The buggy address belongs to the physical page: [ 73.737203][ T4490] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28e27 [ 73.745952][ T4490] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 73.753494][ T4490] page_type: 0xffffefff(slab) [ 73.758162][ T4490] raw: 00fff00000000000 ffff888018ea1780 0000000000000000 dead000000000001 [ 73.766739][ T4490] raw: 0000000000000000 00000000000c000c 00000001ffffefff 0000000000000000 [ 73.775305][ T4490] page dumped because: kasan: bad access detected [ 73.781704][ T4490] page_owner tracks the page as allocated [ 73.787408][ T4490] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5135, tgid 5135 (kworker/1:4), ts 59395203448, free_ts 59277758954 [ 73.806674][ T4490] post_alloc_hook+0x1f3/0x230 [ 73.811436][ T4490] get_page_from_freelist+0x2e43/0x2f00 [ 73.816970][ T4490] __alloc_pages_noprof+0x256/0x6c0 [ 73.822162][ T4490] alloc_slab_page+0x5f/0x120 [ 73.826834][ T4490] allocate_slab+0x5a/0x2f0 [ 73.831329][ T4490] ___slab_alloc+0xcd1/0x14b0 [ 73.835998][ T4490] __slab_alloc+0x58/0xa0 [ 73.840315][ T4490] kmem_cache_alloc_node_noprof+0x1fe/0x320 [ 73.846198][ T4490] __alloc_skb+0x1c3/0x440 [ 73.850605][ T4490] inet6_rt_notify+0xdf/0x290 [ 73.855271][ T4490] fib6_add+0x1e33/0x4430 [ 73.859585][ T4490] ip6_route_add+0x8b/0x160 [ 73.864077][ T4490] addrconf_add_dev+0x35b/0x540 [ 73.868916][ T4490] addrconf_init_auto_addrs+0x85f/0xeb0 [ 73.874454][ T4490] addrconf_notify+0xaff/0x1020 [ 73.879302][ T4490] notifier_call_chain+0x19f/0x3e0 [ 73.884401][ T4490] page last free pid 61 tgid 61 stack trace: [ 73.890369][ T4490] free_unref_page+0xd22/0xea0 [ 73.895131][ T4490] __put_partials+0xeb/0x130 [ 73.899713][ T4490] put_cpu_partial+0x17c/0x250 [ 73.904471][ T4490] __slab_free+0x2ea/0x3d0 [ 73.908876][ T4490] qlist_free_all+0x9e/0x140 [ 73.913463][ T4490] kasan_quarantine_reduce+0x14f/0x170 [ 73.918915][ T4490] __kasan_slab_alloc+0x23/0x80 [ 73.923760][ T4490] kmalloc_trace_noprof+0x132/0x2c0 [ 73.928950][ T4490] __ipv6_dev_mc_inc+0x426/0xa90 [ 73.933889][ T4490] addrconf_dad_work+0x448/0x16f0 [ 73.938907][ T4490] process_scheduled_works+0xa2c/0x1830 [ 73.944441][ T4490] worker_thread+0x86d/0xd70 [ 73.949019][ T4490] kthread+0x2f0/0x390 [ 73.953077][ T4490] ret_from_fork+0x4b/0x80 [ 73.957486][ T4490] ret_from_fork_asm+0x1a/0x30 [ 73.962241][ T4490] [ 73.964549][ T4490] Memory state around the buggy address: [ 73.970164][ T4490] ffff888028e27680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 73.978211][ T4490] ffff888028e27700: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 73.986257][ T4490] >ffff888028e27780: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 73.994389][ T4490] ^ [ 73.998444][ T4490] ffff888028e27800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 74.006495][ T4490] ffff888028e27880: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 74.014542][ T4490] ================================================================== [ 74.036321][ T4490] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 74.043648][ T4490] CPU: 0 PID: 4490 Comm: kworker/u9:1 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 74.053908][ T4490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 74.063983][ T4490] Workqueue: hci2 hci_rx_work [ 74.068769][ T4490] Call Trace: [ 74.072057][ T4490] [ 74.074990][ T4490] dump_stack_lvl+0x241/0x360 [ 74.079676][ T4490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.084873][ T4490] ? __pfx__printk+0x10/0x10 [ 74.089459][ T4490] ? preempt_schedule+0xe1/0xf0 [ 74.094316][ T4490] ? vscnprintf+0x5d/0x90 [ 74.098669][ T4490] panic+0x349/0x860 [ 74.102564][ T4490] ? check_panic_on_warn+0x21/0xb0 [ 74.107674][ T4490] ? __pfx_panic+0x10/0x10 [ 74.112089][ T4490] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 74.118064][ T4490] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 74.124387][ T4490] ? print_report+0x502/0x550 [ 74.129061][ T4490] check_panic_on_warn+0x86/0xb0 [ 74.134427][ T4490] ? hci_req_sync_complete+0xe8/0x290 [ 74.139789][ T4490] end_report+0x77/0x160 [ 74.144022][ T4490] kasan_report_invalid_free+0x12a/0x140 [ 74.149652][ T4490] ? hci_req_sync_complete+0xe8/0x290 [ 74.155018][ T4490] ? hci_req_sync_complete+0xe8/0x290 [ 74.160380][ T4490] poison_slab_object+0xf4/0x150 [ 74.165311][ T4490] ? hci_req_sync_complete+0xe8/0x290 [ 74.170672][ T4490] __kasan_slab_free+0x37/0x60 [ 74.175429][ T4490] kmem_cache_free+0x145/0x350 [ 74.180190][ T4490] hci_req_sync_complete+0xe8/0x290 [ 74.185386][ T4490] hci_event_packet+0xc75/0x1540 [ 74.190317][ T4490] ? __pfx_hci_cmd_complete_evt+0x10/0x10 [ 74.196048][ T4490] ? __pfx_hci_event_packet+0x10/0x10 [ 74.201427][ T4490] ? do_raw_spin_unlock+0x13c/0x8b0 [ 74.206625][ T4490] ? __pfx_hci_req_sync_complete+0x10/0x10 [ 74.212423][ T4490] ? hci_send_to_monitor+0xd8/0x7f0 [ 74.217614][ T4490] ? kcov_remote_start+0x9e/0x7e0 [ 74.222635][ T4490] hci_rx_work+0x3e8/0xca0 [ 74.227050][ T4490] ? process_scheduled_works+0x945/0x1830 [ 74.232759][ T4490] process_scheduled_works+0xa2c/0x1830 [ 74.238306][ T4490] ? __pfx_process_scheduled_works+0x10/0x10 [ 74.244296][ T4490] ? assign_work+0x364/0x3d0 [ 74.248902][ T4490] worker_thread+0x86d/0xd70 [ 74.253512][ T4490] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 74.259421][ T4490] ? __kthread_parkme+0x169/0x1d0 [ 74.264551][ T4490] ? __pfx_worker_thread+0x10/0x10 [ 74.269665][ T4490] kthread+0x2f0/0x390 [ 74.273734][ T4490] ? __pfx_worker_thread+0x10/0x10 [ 74.278836][ T4490] ? __pfx_kthread+0x10/0x10 [ 74.283416][ T4490] ret_from_fork+0x4b/0x80 [ 74.287826][ T4490] ? __pfx_kthread+0x10/0x10 [ 74.292407][ T4490] ret_from_fork_asm+0x1a/0x30 [ 74.297179][ T4490] [ 74.300613][ T4490] Kernel Offset: disabled [ 74.304928][ T4490] Rebooting in 86400 seconds..