last executing test programs: 1m42.640686063s ago: executing program 1 (id=889): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000b00)=0x10001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000380)=0x3f, 0x4) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186}, {0xffffffffffffffff}], 0x0, &(0x7f0000000280)=""/239, 0x13}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18}, {&(0x7f0000000440)=""/110}, {&(0x7f00000004c0)=""/165}, {&(0x7f0000001540)=""/4096}, {&(0x7f0000000580)=""/245}], 0x0, &(0x7f0000000700)=""/27}}, {{&(0x7f0000000740)=@nfc, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180}}], 0x4000000000001f1, 0x10162, 0x0) 1m41.350610343s ago: executing program 2 (id=876): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x0, 0xe21, 0x8}}}}}, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) openat$cgroup_ro(r1, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x1}, 0x10) write(r2, &(0x7f0000000100)="240000001a00030000000000001503000a00000000000000000000000400000000000000", 0x24) r3 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110, 0xd, 0x4000000}}], 0x18, 0x4c00}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000015f3fb36000000bf7a9b74ae0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000000000008500000021000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x90) unshare(0x0) r5 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000005400)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff], 0x0, 0x0, 0x0}, &(0x7f0000005480)=0x78) 1m25.9794768s ago: executing program 1 (id=889): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000b00)=0x10001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000380)=0x3f, 0x4) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186}, {0xffffffffffffffff}], 0x0, &(0x7f0000000280)=""/239, 0x13}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18}, {&(0x7f0000000440)=""/110}, {&(0x7f00000004c0)=""/165}, {&(0x7f0000001540)=""/4096}, {&(0x7f0000000580)=""/245}], 0x0, &(0x7f0000000700)=""/27}}, {{&(0x7f0000000740)=@nfc, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180}}], 0x4000000000001f1, 0x10162, 0x0) 1m24.455130852s ago: executing program 2 (id=876): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x0, 0xe21, 0x8}}}}}, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) openat$cgroup_ro(r1, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x1}, 0x10) write(r2, &(0x7f0000000100)="240000001a00030000000000001503000a00000000000000000000000400000000000000", 0x24) r3 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110, 0xd, 0x4000000}}], 0x18, 0x4c00}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000015f3fb36000000bf7a9b74ae0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000000000008500000021000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x90) unshare(0x0) r5 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000005400)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff], 0x0, 0x0, 0x0}, &(0x7f0000005480)=0x78) 1m10.113632806s ago: executing program 1 (id=889): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000b00)=0x10001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000380)=0x3f, 0x4) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186}, {0xffffffffffffffff}], 0x0, &(0x7f0000000280)=""/239, 0x13}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18}, {&(0x7f0000000440)=""/110}, {&(0x7f00000004c0)=""/165}, {&(0x7f0000001540)=""/4096}, {&(0x7f0000000580)=""/245}], 0x0, &(0x7f0000000700)=""/27}}, {{&(0x7f0000000740)=@nfc, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180}}], 0x4000000000001f1, 0x10162, 0x0) 1m9.055660224s ago: executing program 2 (id=876): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x0, 0xe21, 0x8}}}}}, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) openat$cgroup_ro(r1, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x1}, 0x10) write(r2, &(0x7f0000000100)="240000001a00030000000000001503000a00000000000000000000000400000000000000", 0x24) r3 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110, 0xd, 0x4000000}}], 0x18, 0x4c00}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000015f3fb36000000bf7a9b74ae0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000000000008500000021000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x90) unshare(0x0) r5 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000005400)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff], 0x0, 0x0, 0x0}, &(0x7f0000005480)=0x78) 53.425423191s ago: executing program 1 (id=889): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000b00)=0x10001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000380)=0x3f, 0x4) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186}, {0xffffffffffffffff}], 0x0, &(0x7f0000000280)=""/239, 0x13}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18}, {&(0x7f0000000440)=""/110}, {&(0x7f00000004c0)=""/165}, {&(0x7f0000001540)=""/4096}, {&(0x7f0000000580)=""/245}], 0x0, &(0x7f0000000700)=""/27}}, {{&(0x7f0000000740)=@nfc, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180}}], 0x4000000000001f1, 0x10162, 0x0) 52.031976717s ago: executing program 2 (id=876): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x0, 0xe21, 0x8}}}}}, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) openat$cgroup_ro(r1, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x1}, 0x10) write(r2, &(0x7f0000000100)="240000001a00030000000000001503000a00000000000000000000000400000000000000", 0x24) r3 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110, 0xd, 0x4000000}}], 0x18, 0x4c00}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000015f3fb36000000bf7a9b74ae0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000000000008500000021000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x90) unshare(0x0) r5 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000005400)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff], 0x0, 0x0, 0x0}, &(0x7f0000005480)=0x78) 29.037105239s ago: executing program 1 (id=889): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000b00)=0x10001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000380)=0x3f, 0x4) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186}, {0xffffffffffffffff}], 0x0, &(0x7f0000000280)=""/239, 0x13}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18}, {&(0x7f0000000440)=""/110}, {&(0x7f00000004c0)=""/165}, {&(0x7f0000001540)=""/4096}, {&(0x7f0000000580)=""/245}], 0x0, &(0x7f0000000700)=""/27}}, {{&(0x7f0000000740)=@nfc, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180}}], 0x4000000000001f1, 0x10162, 0x0) 26.14163969s ago: executing program 2 (id=876): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x0, 0xe21, 0x8}}}}}, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) openat$cgroup_ro(r1, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x1}, 0x10) write(r2, &(0x7f0000000100)="240000001a00030000000000001503000a00000000000000000000000400000000000000", 0x24) r3 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110, 0xd, 0x4000000}}], 0x18, 0x4c00}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000015f3fb36000000bf7a9b74ae0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000000000008500000021000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x90) unshare(0x0) r5 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000005400)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff], 0x0, 0x0, 0x0}, &(0x7f0000005480)=0x78) 11.601117966s ago: executing program 1 (id=889): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000b00)=0x10001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000380)=0x3f, 0x4) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186}, {0xffffffffffffffff}], 0x0, &(0x7f0000000280)=""/239, 0x13}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18}, {&(0x7f0000000440)=""/110}, {&(0x7f00000004c0)=""/165}, {&(0x7f0000001540)=""/4096}, {&(0x7f0000000580)=""/245}], 0x0, &(0x7f0000000700)=""/27}}, {{&(0x7f0000000740)=@nfc, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180}}], 0x4000000000001f1, 0x10162, 0x0) 10.15203817s ago: executing program 2 (id=876): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x0, 0xe21, 0x8}}}}}, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) openat$cgroup_ro(r1, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x1}, 0x10) write(r2, &(0x7f0000000100)="240000001a00030000000000001503000a00000000000000000000000400000000000000", 0x24) r3 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110, 0xd, 0x4000000}}], 0x18, 0x4c00}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000015f3fb36000000bf7a9b74ae0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000000000008500000021000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x90) unshare(0x0) r5 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000005400)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff], 0x0, 0x0, 0x0}, &(0x7f0000005480)=0x78) 1.313977709s ago: executing program 3 (id=3104): r0 = socket(0x10, 0x803, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000140)) 1.160987825s ago: executing program 3 (id=3107): syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}}, 0x0) 1.001160695s ago: executing program 3 (id=3110): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r0, 0x0, 0x0) 916.908607ms ago: executing program 4 (id=3111): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) 842.435355ms ago: executing program 0 (id=3112): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200001a00000000000000000000008500000036000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 841.604354ms ago: executing program 3 (id=3113): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@bloom_filter={0x1e, 0x0, 0xedb2, 0x5, 0x4c}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 780.114105ms ago: executing program 4 (id=3114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4, 0xf}]}, 0x68}}, 0x0) 779.797268ms ago: executing program 3 (id=3115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_HANDLE={0xc}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3}, @end, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010100}, {@remote}, {@multicast1}, {@dev}, {@empty}, {}, {}]}]}}}}}}}, 0x0) 661.839159ms ago: executing program 0 (id=3116): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 638.596479ms ago: executing program 4 (id=3117): r0 = socket(0x10, 0x803, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000140)) 571.6959ms ago: executing program 0 (id=3118): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x24, 0x3a, 0xb, 0x0, 0x0, {0x4}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @u64=0xf0ffffff}]}]}, 0x24}}, 0x0) 477.781509ms ago: executing program 4 (id=3119): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x100, 0x0, 0x102, 0xb}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x100, 0x0, 0x2}, 0x20) 404.865256ms ago: executing program 0 (id=3120): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000001800010000000000000000000a0000000000000000000000180016000d0001000000000000000000000010000000000008000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x44}}, 0x0) 338.263712ms ago: executing program 3 (id=3121): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4d7e00000000000000002a00000008002f00000000000c0005000000000000000000050037000000000008000200", @ANYRES32=r4, @ANYBLOB="0500360000000400"], 0x40}, 0x4, 0x700000000000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x90) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="c58e00000000000000001a00000008000300", @ANYRES32=r7, @ANYBLOB="0c002e8006"], 0x28}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r8, 0x0, 0x80000000000008, &(0x7f0000000180)='{', 0x1) getsockopt$inet_opts(r8, 0x0, 0x9, &(0x7f0000000680)=""/23, &(0x7f00000000c0)=0x17) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffffffff00000003}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r9) sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ec0)={0x114, r10, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) 290.509258ms ago: executing program 4 (id=3122): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x31}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r2, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x1, 0x2}}, 0x26) getsockopt$bt_BT_SECURITY(r2, 0x111, 0x5, 0x0, 0x20001f00) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b0f, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x200000100000011, 0x803, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r5, &(0x7f00000000c0)="4dcdc7d96a760000002f00050000000000060000450b21e9e89291df563213e9152234f5623c526156de8ae4ae9150d3d2dd194a", 0x34, 0x0, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) 240.492832ms ago: executing program 0 (id=3123): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_remove_blocks\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00`', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 95.92526ms ago: executing program 0 (id=3124): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) 0s ago: executing program 4 (id=3125): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) kernel console output (not intermixed with test programs): _slave_1) entered blocking state [ 406.642350][ T5173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.791757][T13314] veth0_vlan: entered promiscuous mode [ 406.806653][T13334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 406.866755][T13314] veth1_vlan: entered promiscuous mode [ 406.977161][T13582] tipc: Failed to remove unknown binding: 66,1,1/10922666:986074534/986074536 [ 407.014222][T13314] veth0_macvtap: entered promiscuous mode [ 407.057143][T13314] veth1_macvtap: entered promiscuous mode [ 407.123973][T13314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.147288][T13314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.185507][T13314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.222365][T13314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.253001][T13314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.291117][T13314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.328675][T13314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.343554][T13314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.370100][T13314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.442224][T13314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.465706][T13314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.489022][T13314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.510440][T13314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.551934][T13314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.578862][T13314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.600902][T13314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.623291][T13314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.640669][T13314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.686007][T13314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.703573][T13314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.716257][T13314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.731663][T13314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.755678][T13334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.958316][T13604] netlink: 'syz.4.2537': attribute type 3 has an invalid length. [ 407.984510][T13604] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2537'. [ 408.020481][T13334] veth0_vlan: entered promiscuous mode [ 408.030385][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.046245][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.089647][T13334] veth1_vlan: entered promiscuous mode [ 408.163441][ T7439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.184823][ T7439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.229714][T13334] veth0_macvtap: entered promiscuous mode [ 408.262690][T13334] veth1_macvtap: entered promiscuous mode [ 408.273896][T13611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2541'. [ 408.303186][T13334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.314067][T13334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.327016][T13334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.337547][T13334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.349398][T13334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.369262][T13334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.389825][T13334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.411379][T13334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.429641][T13334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.454154][T13334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.479468][T13334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.584487][T13618] netlink: 'syz.3.2543': attribute type 21 has an invalid length. [ 408.592359][T13619] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 408.608918][T13618] netlink: 'syz.3.2543': attribute type 1 has an invalid length. [ 408.640733][T13334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.653073][T13334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.665252][T13334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.676480][T13334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.688209][T13334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.699575][T13334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.709517][T13334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.721203][T13334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.731454][T13334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.743361][T13334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.763680][T13334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.807117][T13619] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2542'. [ 408.825313][T13625] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2545'. [ 408.841558][T13334] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.850586][T13334] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.862405][T13334] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.871339][T13334] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.032138][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.059115][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.122751][ T2908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.134801][ T2908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.429289][T13636] netlink: 'syz.0.2545': attribute type 3 has an invalid length. [ 409.742878][T13643] netlink: 'syz.4.2549': attribute type 3 has an invalid length. [ 409.778827][T13643] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2549'. [ 409.998294][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.676354][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.778099][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.841429][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.949854][ T11] bridge_slave_1: left allmulticast mode [ 410.955568][ T11] bridge_slave_1: left promiscuous mode [ 410.961633][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.971636][ T11] bridge_slave_0: left allmulticast mode [ 410.977328][ T11] bridge_slave_0: left promiscuous mode [ 410.983870][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.564254][ T29] audit: type=1804 audit(1719619603.590:33): pid=13652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2552" name="/root/syzkaller.qKIh7p/670/cgroup.controllers" dev="sda1" ino=1983 res=1 errno=0 [ 411.615782][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.637809][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.667782][ T11] bond0 (unregistering): Released all slaves [ 411.737868][T13654] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.756032][T13654] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.762289][ T5106] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 411.767037][T13654] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.784642][ T5106] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 411.795822][ T5106] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 411.802152][T13654] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.808521][ T5106] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 411.819363][ T5106] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 411.828441][T13654] geneve3: entered promiscuous mode [ 411.834277][ T5106] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 411.834627][T13654] geneve3: entered allmulticast mode [ 411.873725][T13654] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.882583][T13654] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.891466][T13654] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.900109][T13654] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.467583][ T11] hsr_slave_0: left promiscuous mode [ 412.480424][ T11] hsr_slave_1: left promiscuous mode [ 412.486749][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.495129][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.504957][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.512699][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.537422][ T11] veth1_macvtap: left promiscuous mode [ 412.543841][ T11] veth0_macvtap: left promiscuous mode [ 412.549947][ T11] veth1_vlan: left promiscuous mode [ 412.555477][ T11] veth0_vlan: left promiscuous mode [ 413.159742][ T5107] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 413.174982][ T5107] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 413.199197][ T5107] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 413.211846][ T5107] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 413.222469][ T5107] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 413.233512][ T5107] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 413.522174][ T11] team0 (unregistering): Port device team_slave_1 removed [ 413.605841][ T11] team0 (unregistering): Port device team_slave_0 removed [ 413.939597][ T5107] Bluetooth: hci1: command tx timeout [ 414.299265][T13655] chnl_net:caif_netlink_parms(): no params data found [ 414.674478][T13693] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2563'. [ 414.745454][T13698] netlink: 'syz.0.2564': attribute type 3 has an invalid length. [ 414.753730][T13698] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2564'. [ 414.777107][T13655] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.808733][T13655] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.833050][T13655] bridge_slave_0: entered allmulticast mode [ 414.853952][T13655] bridge_slave_0: entered promiscuous mode [ 414.887439][T13655] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.896185][T13655] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.905926][T13655] bridge_slave_1: entered allmulticast mode [ 414.920278][T13702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2565'. [ 414.935629][T13655] bridge_slave_1: entered promiscuous mode [ 415.038916][T13707] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 415.155400][T13655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.181024][T13655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.299725][ T5107] Bluetooth: hci2: command tx timeout [ 415.367955][T13655] team0: Port device team_slave_0 added [ 415.399634][T13655] team0: Port device team_slave_1 added [ 415.464435][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.526949][T13726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2573'. [ 415.558163][T13726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2573'. [ 415.569863][T13726] netlink: 'syz.3.2573': attribute type 29 has an invalid length. [ 415.571044][T13655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.577713][T13726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2573'. [ 415.594149][T13655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.622013][T13655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.660912][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.696077][T13726] netlink: 'syz.3.2573': attribute type 29 has an invalid length. [ 415.706191][T13726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2573'. [ 415.723487][T13655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.733542][T13655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.772195][T13655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.861073][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.884622][T13734] netlink: 'syz.3.2575': attribute type 3 has an invalid length. [ 415.908691][T13734] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2575'. [ 415.969887][T13672] chnl_net:caif_netlink_parms(): no params data found [ 416.021028][ T5107] Bluetooth: hci1: command tx timeout [ 416.066606][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.188249][T13655] hsr_slave_0: entered promiscuous mode [ 416.195757][T13655] hsr_slave_1: entered promiscuous mode [ 416.202947][T13655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.212660][T13655] Cannot create hsr debugfs directory [ 416.272123][T13744] IPv6: NLM_F_CREATE should be specified when creating new route [ 416.280361][T13744] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2579'. [ 416.537224][T13672] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.556947][T13672] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.570070][T13672] bridge_slave_0: entered allmulticast mode [ 416.587979][T13672] bridge_slave_0: entered promiscuous mode [ 416.608853][T13672] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.616058][T13672] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.638217][T13672] bridge_slave_1: entered allmulticast mode [ 416.647801][T13672] bridge_slave_1: entered promiscuous mode [ 416.816695][T13672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.907114][T13672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.950454][ T11] bridge_slave_1: left allmulticast mode [ 416.956458][ T11] bridge_slave_1: left promiscuous mode [ 416.962505][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.976446][ T11] bridge_slave_0: left allmulticast mode [ 416.983084][ T11] bridge_slave_0: left promiscuous mode [ 416.989447][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.378852][ T5107] Bluetooth: hci2: command tx timeout [ 417.472907][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.485269][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.496846][ T11] bond0 (unregistering): Released all slaves [ 417.510531][T13774] IPv6: NLM_F_CREATE should be specified when creating new route [ 417.520277][T13774] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2591'. [ 417.749522][T13672] team0: Port device team_slave_0 added [ 417.768326][T13784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.805072][T13784] syz.0.2595[13784] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.805255][T13784] syz.0.2595[13784] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.833654][T13672] team0: Port device team_slave_1 added [ 417.995976][T13672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.004845][T13672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.033493][T13672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.106535][ T5107] Bluetooth: hci1: command tx timeout [ 418.153655][T13672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.175808][T13672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.205288][T13672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.547131][T13672] hsr_slave_0: entered promiscuous mode [ 418.586705][T13672] hsr_slave_1: entered promiscuous mode [ 418.600049][T13672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.613244][T13672] Cannot create hsr debugfs directory [ 418.645253][ T11] hsr_slave_0: left promiscuous mode [ 418.662436][ T11] hsr_slave_1: left promiscuous mode [ 418.673265][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.689569][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.707495][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.725490][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.776851][ T11] veth1_macvtap: left promiscuous mode [ 418.782748][ T11] veth0_macvtap: left promiscuous mode [ 418.790839][ T11] veth1_vlan: left promiscuous mode [ 418.796411][ T11] veth0_vlan: left promiscuous mode [ 419.444831][ T11] team0 (unregistering): Port device team_slave_1 removed [ 419.462820][ T5107] Bluetooth: hci2: command tx timeout [ 419.509783][ T11] team0 (unregistering): Port device team_slave_0 removed [ 420.182687][ T5107] Bluetooth: hci1: command tx timeout [ 420.585606][T13655] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 420.617111][T13655] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 420.646533][T13833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.717618][T13833] syz.4.2615[13833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 420.717797][T13833] syz.4.2615[13833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 420.735534][T13831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2614'. [ 420.780001][T13655] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 420.803444][T13827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2614'. [ 420.844971][T13655] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 420.869841][T13827] netlink: 'syz.0.2614': attribute type 29 has an invalid length. [ 420.887149][T13827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2614'. [ 420.915416][T13827] netlink: 'syz.0.2614': attribute type 29 has an invalid length. [ 420.930057][T13827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2614'. [ 421.173005][T13655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.226615][T13655] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.266202][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.273554][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.328848][T13672] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 421.344716][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.351987][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.366814][T13672] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 421.387540][T13672] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 421.444568][T13672] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 421.475495][T13655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.538946][ T5107] Bluetooth: hci2: command tx timeout [ 421.777824][T13672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.871981][T13672] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.910573][T13655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.960272][T12866] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.967450][T12866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.995249][T12866] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.002529][T12866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.242525][T13655] veth0_vlan: entered promiscuous mode [ 422.277534][T13655] veth1_vlan: entered promiscuous mode [ 422.402890][T13655] veth0_macvtap: entered promiscuous mode [ 422.438428][T13655] veth1_macvtap: entered promiscuous mode [ 422.488322][T13655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.541973][T13655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.562650][T13655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.595233][T13655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.615928][T13655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.630521][T13655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.641166][T13655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.652223][T13655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.668269][T13655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.682125][T13655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.694825][T13655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.704870][T13655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.719085][T13655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.729320][T13655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.740229][T13655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.750570][T13655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.764009][T13655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.775553][T13655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.783904][T13882] batadv_slave_0: entered allmulticast mode [ 422.820595][T13891] pim6reg: left allmulticast mode [ 422.839569][T13891] batadv_slave_0: left allmulticast mode [ 422.886088][T13655] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.907087][T13655] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.927857][T13655] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.936979][T13655] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.999248][T13672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.063702][T13899] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2638'. [ 423.243644][ T29] audit: type=1804 audit(1719619615.280:34): pid=13904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2640" name="/root/syzkaller.qKIh7p/698/cgroup.controllers" dev="sda1" ino=1996 res=1 errno=0 [ 423.377203][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.397214][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.417290][T13908] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.426729][T13908] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.436543][T13908] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.446625][T13908] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.465861][T13908] geneve3: entered promiscuous mode [ 423.473938][T13908] geneve3: entered allmulticast mode [ 423.482014][T13908] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.498414][T13908] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.510353][T13908] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.528863][T13908] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.586880][T13910] vlan3: entered promiscuous mode [ 423.592569][T13910] gretap0: entered promiscuous mode [ 423.608144][T13910] gretap0: left promiscuous mode [ 423.673876][T13672] veth0_vlan: entered promiscuous mode [ 423.698726][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.716916][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.750270][T13672] veth1_vlan: entered promiscuous mode [ 423.871992][T13672] veth0_macvtap: entered promiscuous mode [ 423.992943][T13672] veth1_macvtap: entered promiscuous mode [ 424.035438][T13672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.047927][T13672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.058962][T13672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.070225][T13672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.080533][T13672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.092894][T13672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.106743][T13672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.121893][T13672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.136262][T13672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.147177][T13672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.170779][T13672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.211093][T13672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.259469][T13672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.275463][T13672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.296386][T13672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.316687][T13672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.331988][T13672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.357176][T13932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2653'. [ 424.358770][T13672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.379066][T13672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.389091][T13672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.399827][T13672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.420586][T13672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.490884][T13672] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.511172][T13672] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.530936][T13672] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.552880][T13672] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.739822][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.747716][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.818063][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.830574][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.090516][T13959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2666'. [ 425.179847][T13963] vlan2: entered promiscuous mode [ 425.185192][T13963] gretap0: entered promiscuous mode [ 425.194515][T13963] gretap0: left promiscuous mode [ 425.877783][ T7432] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.200917][ T5106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 426.210043][ T5106] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 426.218374][ T5106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 426.237152][ T5106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 426.247519][ T5106] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 426.255091][ T5106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 426.679265][ T7432] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.703406][T13992] chnl_net:caif_netlink_parms(): no params data found [ 426.798001][ T7432] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.930131][ T7432] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.010310][T13992] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.019404][T13992] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.037024][T13992] bridge_slave_0: entered allmulticast mode [ 427.037893][ T5106] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 427.046118][T13992] bridge_slave_0: entered promiscuous mode [ 427.059733][ T5106] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 427.060832][T13992] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.074112][ T5106] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 427.075348][T13992] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.090489][T13992] bridge_slave_1: entered allmulticast mode [ 427.095696][ T5106] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 427.098116][T13992] bridge_slave_1: entered promiscuous mode [ 427.106074][ T5106] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 427.118306][ T5106] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 427.176127][T13992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.206755][T13992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.287181][ T7432] bridge_slave_1: left allmulticast mode [ 427.294426][ T7432] bridge_slave_1: left promiscuous mode [ 427.319038][ T7432] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.340760][ T7432] bridge_slave_0: left allmulticast mode [ 427.346482][ T7432] bridge_slave_0: left promiscuous mode [ 427.363007][ T7432] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.840649][ T7432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.852529][ T7432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.864528][ T7432] bond0 (unregistering): Released all slaves [ 427.885480][T13992] team0: Port device team_slave_0 added [ 427.938346][T13992] team0: Port device team_slave_1 added [ 428.023939][T13992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.034230][T13992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.060539][T13992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.075038][T13992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.082339][T13992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.110677][T13992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.340633][ T5107] Bluetooth: hci0: command tx timeout [ 428.371461][T14007] vlan3: entered promiscuous mode [ 428.390408][T14007] gretap0: entered promiscuous mode [ 428.408691][T14007] gretap0: left promiscuous mode [ 428.467125][T13992] hsr_slave_0: entered promiscuous mode [ 428.487980][T13992] hsr_slave_1: entered promiscuous mode [ 428.505712][T13992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.515726][T13992] Cannot create hsr debugfs directory [ 428.733818][ T5106] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 428.766088][ T5106] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 428.784176][ T5106] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 428.802806][ T5106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 428.824644][ T5106] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 428.835371][ T5106] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 428.888892][ T7432] hsr_slave_0: left promiscuous mode [ 428.903874][ T7432] hsr_slave_1: left promiscuous mode [ 428.924280][ T7432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.948741][ T7432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.959800][T14020] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 428.971842][ T7432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.008731][ T7432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.089228][ T7432] veth1_macvtap: left promiscuous mode [ 429.094943][ T7432] veth0_macvtap: left promiscuous mode [ 429.101109][ T7432] veth1_vlan: left promiscuous mode [ 429.106506][ T7432] veth0_vlan: left promiscuous mode [ 429.219698][ T5107] Bluetooth: hci1: command tx timeout [ 429.869557][ T7432] team0 (unregistering): Port device team_slave_1 removed [ 429.953177][ T7432] team0 (unregistering): Port device team_slave_0 removed [ 430.419487][ T5107] Bluetooth: hci0: command tx timeout [ 430.749304][T14044] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2697'. [ 430.899239][ T5107] Bluetooth: hci2: command tx timeout [ 431.025929][T14001] chnl_net:caif_netlink_parms(): no params data found [ 431.271161][T14001] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.280020][T14001] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.287363][T14001] bridge_slave_0: entered allmulticast mode [ 431.294872][T14001] bridge_slave_0: entered promiscuous mode [ 431.301259][ T5107] Bluetooth: hci1: command tx timeout [ 431.367757][ T7432] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.392325][T14001] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.399760][T14001] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.407142][T14001] bridge_slave_1: entered allmulticast mode [ 431.416315][T14001] bridge_slave_1: entered promiscuous mode [ 431.521485][ T7432] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.563131][T14001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.591773][T14052] xt_cgroup: xt_cgroup: no path or classid specified [ 431.687287][ T7432] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.727038][T14001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.781981][T14060] batman_adv: batadv0: adding TT local entry 4a:c8:93:75:00:00 to non-existent VLAN 2358 [ 431.938024][ T7432] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.026497][T14001] team0: Port device team_slave_0 added [ 432.043246][T14068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2705'. [ 432.062597][T14068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2705'. [ 432.077684][T14001] team0: Port device team_slave_1 added [ 432.085794][T13992] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 432.216630][T13992] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 432.231034][T13992] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 432.249646][T14001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.256671][T14001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.286173][T14001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.309968][T14011] chnl_net:caif_netlink_parms(): no params data found [ 432.333323][T13992] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 432.357908][T14001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.367592][T14001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.384601][T14078] xt_cgroup: xt_cgroup: no path or classid specified [ 432.407245][T14001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.500402][ T5107] Bluetooth: hci0: command tx timeout [ 432.600458][T14001] hsr_slave_0: entered promiscuous mode [ 432.617729][T14001] hsr_slave_1: entered promiscuous mode [ 432.625249][T14001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.633566][T14001] Cannot create hsr debugfs directory [ 432.761660][ T7432] bridge_slave_1: left allmulticast mode [ 432.767790][ T7432] bridge_slave_1: left promiscuous mode [ 432.774908][ T7432] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.798237][ T7432] bridge_slave_0: left allmulticast mode [ 432.808685][ T7432] bridge_slave_0: left promiscuous mode [ 432.819936][ T7432] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.979713][ T5107] Bluetooth: hci2: command tx timeout [ 433.389155][ T5107] Bluetooth: hci1: command tx timeout [ 433.396689][ T7432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.409502][ T7432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.424802][ T7432] bond0 (unregistering): Released all slaves [ 433.578013][T14011] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.606079][T14011] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.623167][ T29] audit: type=1804 audit(1719619625.660:35): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2717" name="/root/syzkaller.D1wqkq/151/cgroup.controllers" dev="sda1" ino=1995 res=1 errno=0 [ 433.626364][T14011] bridge_slave_0: entered allmulticast mode [ 433.685610][T14011] bridge_slave_0: entered promiscuous mode [ 433.706094][T14011] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.714466][T14011] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.723607][T14011] bridge_slave_1: entered allmulticast mode [ 433.731811][T14011] bridge_slave_1: entered promiscuous mode [ 433.800921][T14103] xt_cgroup: xt_cgroup: no path or classid specified [ 433.986211][T14011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.011215][T14011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.245162][ T29] audit: type=1804 audit(1719619626.280:36): pid=14119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2728" name="/root/syzkaller.D1wqkq/157/cgroup.controllers" dev="sda1" ino=1991 res=1 errno=0 [ 434.292191][T14011] team0: Port device team_slave_0 added [ 434.343515][T14124] netlink: 'syz.4.2729': attribute type 1 has an invalid length. [ 434.352968][T14124] netlink: 616 bytes leftover after parsing attributes in process `syz.4.2729'. [ 434.373086][T14011] team0: Port device team_slave_1 added [ 434.579329][ T5107] Bluetooth: hci0: command tx timeout [ 434.692675][ T7432] hsr_slave_0: left promiscuous mode [ 434.708655][ T7432] hsr_slave_1: left promiscuous mode [ 434.719444][ T7432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.726956][ T7432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.735432][ T7432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.744114][ T7432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.794267][ T7432] veth1_macvtap: left promiscuous mode [ 434.801338][ T7432] veth0_macvtap: left promiscuous mode [ 434.807053][ T7432] veth1_vlan: left promiscuous mode [ 434.821839][ T7432] veth0_vlan: left promiscuous mode [ 434.831368][T14134] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2734'. [ 435.058958][ T5107] Bluetooth: hci2: command tx timeout [ 435.460404][ T5107] Bluetooth: hci1: command tx timeout [ 435.544945][ T7432] team0 (unregistering): Port device team_slave_1 removed [ 435.601647][ T7432] team0 (unregistering): Port device team_slave_0 removed [ 436.180569][T14011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.187578][T14011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.216738][T14011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.254833][T14011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.269197][T14011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.328652][T14011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.503327][T14011] hsr_slave_0: entered promiscuous mode [ 436.523784][T14011] hsr_slave_1: entered promiscuous mode [ 436.535076][T14011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.550350][T14011] Cannot create hsr debugfs directory [ 436.762511][T14149] IPv6: sit1: Disabled Multicast RS [ 436.855019][T13992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.974136][T14001] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 437.000086][T14001] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 437.062372][T14001] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 437.083839][T13992] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.149386][ T5107] Bluetooth: hci2: command tx timeout [ 437.167867][T14001] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 437.236146][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.243410][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.363315][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.370583][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.775472][T14001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.861326][T14001] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.985123][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.992535][ T5173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.020085][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.027367][ T5173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.091349][T14011] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 438.112304][T14011] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 438.168835][T14011] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 438.190359][T14011] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 438.252079][T13992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.370473][T14001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 438.429022][T14183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2754'. [ 438.584859][T13992] veth0_vlan: entered promiscuous mode [ 438.643061][T13992] veth1_vlan: entered promiscuous mode [ 438.761365][ T29] audit: type=1804 audit(1719619630.800:37): pid=14191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2756" name="/root/syzkaller.D1wqkq/171/cgroup.controllers" dev="sda1" ino=1995 res=1 errno=0 [ 438.903818][T13992] veth0_macvtap: entered promiscuous mode [ 438.930602][T14001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.941784][T13992] veth1_macvtap: entered promiscuous mode [ 438.956669][T14011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.033408][T14011] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.066186][T13992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.079429][T13992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.089473][T13992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.100201][T13992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.112708][T13992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.124248][T13992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.136485][T13992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.150481][T13992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.164546][T13992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.199906][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.207140][ T5173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.229732][T13992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.240387][T13992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.250528][T13992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.262962][T13992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.280938][T13992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.292298][T13992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.310764][T13992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.328903][T13992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.345134][T13992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.396757][T13992] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.417167][T13992] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.431950][T13992] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.461611][T13992] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.511864][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.519213][ T5173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.567650][T14001] veth0_vlan: entered promiscuous mode [ 439.635440][T14001] veth1_vlan: entered promiscuous mode [ 439.853150][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.861594][T14001] veth0_macvtap: entered promiscuous mode [ 439.866670][T14001] veth1_macvtap: entered promiscuous mode [ 439.888904][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.051988][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.078637][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.104114][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.123548][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.133968][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.145292][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.155903][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.166844][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.177978][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.189878][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.205247][T14001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.252982][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.286812][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.307726][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.328929][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.352157][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.363679][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.374351][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.403744][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.428366][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.440408][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.453437][T14001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.463328][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.468350][T14001] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.485200][T14001] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.496615][T14001] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.502585][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.512950][T14001] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.527138][T14241] netlink: 'syz.4.2776': attribute type 10 has an invalid length. [ 440.535969][T14241] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2776'. [ 440.558425][T14241] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 440.763008][T14011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.876028][ T7432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.890689][ T7432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.040660][T14011] veth0_vlan: entered promiscuous mode [ 441.091974][ T7432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.092704][T14011] veth1_vlan: entered promiscuous mode [ 441.109958][ T7432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.236028][T14011] veth0_macvtap: entered promiscuous mode [ 441.262306][T14011] veth1_macvtap: entered promiscuous mode [ 441.456702][T14011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.498717][T14011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.518632][T14011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.539770][T14011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.561695][T14011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.583350][T14011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.593578][T14011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.616889][T14011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.638901][T14011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.660834][T14011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.682102][T14011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.692898][T14011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.706281][T14285] xt_CT: You must specify a L4 protocol and not use inversions on it [ 441.724242][T14011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.780638][T14011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.798525][T14011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.819278][T14011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.844249][T14011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.854429][T14011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.867817][T14011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.890614][T14011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.908630][T14011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.918781][T14011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.930392][T14011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.945166][T14011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.959822][T14011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.972731][T14011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.010714][T14011] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.031653][T14011] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.041031][T14011] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.049944][T14011] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.109105][T14294] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 442.279892][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.287776][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.526563][ T7432] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.602130][ T2908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.612719][ T2908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.123156][ T7432] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.286654][ T7432] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.371916][ T7432] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.515403][ T7432] bridge_slave_1: left allmulticast mode [ 443.521607][ T7432] bridge_slave_1: left promiscuous mode [ 443.527372][ T7432] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.538983][ T7432] bridge_slave_0: left allmulticast mode [ 443.545165][ T7432] bridge_slave_0: left promiscuous mode [ 443.551516][ T7432] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.131400][ T5106] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 444.141493][ T5106] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 444.160386][ T5106] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 444.170635][ T5106] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 444.179037][ T5106] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 444.187971][ T5106] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 444.316995][ T7432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.329721][ T7432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.347422][ T7432] bond0 (unregistering): Released all slaves [ 444.854313][ T7432] hsr_slave_0: left promiscuous mode [ 444.868367][ T7432] hsr_slave_1: left promiscuous mode [ 444.876870][ T7432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.884572][ T7432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.893614][ T7432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.902318][ T7432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.930497][ T7432] veth1_macvtap: left promiscuous mode [ 444.936117][ T7432] veth0_macvtap: left promiscuous mode [ 444.941907][ T7432] veth1_vlan: left promiscuous mode [ 444.947212][ T7432] veth0_vlan: left promiscuous mode [ 445.808253][ T5106] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 445.834130][ T5106] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 445.843303][ T5106] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 445.853425][ T5106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 445.864667][ T5106] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 445.878913][ T5106] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 445.968241][ T7432] team0 (unregistering): Port device team_slave_1 removed [ 446.025122][ T7432] team0 (unregistering): Port device team_slave_0 removed [ 446.265555][ T5107] Bluetooth: hci1: command tx timeout [ 446.590554][T14319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2806'. [ 446.607608][T14323] netlink: 'syz.0.2808': attribute type 8 has an invalid length. [ 446.629325][T14323] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 446.768103][T14311] chnl_net:caif_netlink_parms(): no params data found [ 447.130645][T14350] netlink: 'syz.4.2816': attribute type 3 has an invalid length. [ 447.216527][T14311] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.237077][T14311] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.252029][T14311] bridge_slave_0: entered allmulticast mode [ 447.270575][T14311] bridge_slave_0: entered promiscuous mode [ 447.321331][T14311] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.336500][T14311] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.346852][T14311] bridge_slave_1: entered allmulticast mode [ 447.356657][T14311] bridge_slave_1: entered promiscuous mode [ 447.489786][T14311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.513088][T14311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.644183][T14340] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 447.654055][T14311] team0: Port device team_slave_0 added [ 447.724693][T14311] team0: Port device team_slave_1 added [ 447.787164][ T29] audit: type=1804 audit(1719619639.820:38): pid=14373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2825" name="/root/syzkaller.cXxoCe/9/cgroup.controllers" dev="sda1" ino=2002 res=1 errno=0 [ 447.819022][T14370] netlink: 'syz.4.2823': attribute type 8 has an invalid length. [ 447.873813][T14311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.893414][T14311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.939284][ T5107] Bluetooth: hci2: command tx timeout [ 447.948533][T14311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.057503][ T7432] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.114500][T14311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.125967][T14311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.160779][T14311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.294465][ T7432] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.339821][ T5107] Bluetooth: hci1: command tx timeout [ 448.417612][T14397] netlink: 'syz.3.2835': attribute type 48 has an invalid length. [ 448.531312][ T7432] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.657090][ T7432] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.693835][T14311] hsr_slave_0: entered promiscuous mode [ 448.702924][T14311] hsr_slave_1: entered promiscuous mode [ 448.709202][ T29] audit: type=1804 audit(1719619640.730:39): pid=14407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2839" name="/root/syzkaller.D1wqkq/200/cgroup.controllers" dev="sda1" ino=2003 res=1 errno=0 [ 448.743658][T14311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.759763][T14311] Cannot create hsr debugfs directory [ 448.775564][T14329] chnl_net:caif_netlink_parms(): no params data found [ 448.814655][T14408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2838'. [ 449.187385][T14425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2846'. [ 449.196895][T14425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2846'. [ 449.218536][T14425] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2846'. [ 449.230432][T14329] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.237644][T14329] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.259745][T14425] block nbd0: Unsupported socket: shutdown callout must be supported. [ 449.271833][T14427] netlink: 'syz.4.2847': attribute type 48 has an invalid length. [ 449.280377][T14329] bridge_slave_0: entered allmulticast mode [ 449.289532][T14329] bridge_slave_0: entered promiscuous mode [ 449.404641][T14329] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.423672][T14329] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.434930][T14329] bridge_slave_1: entered allmulticast mode [ 449.443475][T14329] bridge_slave_1: entered promiscuous mode [ 449.451559][ T7432] bridge_slave_1: left allmulticast mode [ 449.457331][ T7432] bridge_slave_1: left promiscuous mode [ 449.468983][ T7432] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.487798][ T7432] bridge_slave_0: left allmulticast mode [ 449.495484][ T7432] bridge_slave_0: left promiscuous mode [ 449.501836][ T7432] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.780897][T14439] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2852'. [ 449.804906][T14439] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2852'. [ 450.019436][ T5107] Bluetooth: hci2: command tx timeout [ 450.283137][ T7432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.319913][ T7432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.361016][ T7432] bond0 (unregistering): Released all slaves [ 450.418750][ T5107] Bluetooth: hci1: command tx timeout [ 450.554210][T14439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2852'. [ 450.650953][T14329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.673530][T14329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.841746][T14448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2853'. [ 450.973707][T14453] netlink: 'syz.4.2858': attribute type 48 has an invalid length. [ 451.068333][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2860'. [ 451.083230][T14458] block nbd0: Unsupported socket: shutdown callout must be supported. [ 451.174560][T14329] team0: Port device team_slave_0 added [ 451.200297][T14329] team0: Port device team_slave_1 added [ 451.463209][T14329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.483420][T14329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.585653][T14329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.689692][ T7432] hsr_slave_0: left promiscuous mode [ 451.697977][ T7432] hsr_slave_1: left promiscuous mode [ 451.722789][T14480] netlink: 'syz.3.2872': attribute type 48 has an invalid length. [ 451.738398][ T7432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.756556][ T7432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.792823][ T7432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.809248][ T7432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.861591][ T7432] veth1_macvtap: left promiscuous mode [ 451.867311][ T7432] veth0_macvtap: left promiscuous mode [ 451.888892][ T7432] veth1_vlan: left promiscuous mode [ 451.900836][ T7432] veth0_vlan: left promiscuous mode [ 451.959739][T14489] No such timeout policy "syz0" [ 452.046867][T14496] Bluetooth: MGMT ver 1.22 [ 452.098835][ T5106] Bluetooth: hci2: command tx timeout [ 452.506104][ T5106] Bluetooth: hci1: command tx timeout [ 452.787323][ T7432] team0 (unregistering): Port device team_slave_1 removed [ 452.862845][ T7432] team0 (unregistering): Port device team_slave_0 removed [ 452.985815][ T5106] Bluetooth: hci3: command 0x0406 tx timeout [ 453.417819][T14329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.425090][T14329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.451443][T14329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.588300][T14329] hsr_slave_0: entered promiscuous mode [ 453.596596][T14329] hsr_slave_1: entered promiscuous mode [ 453.626398][T14329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.641815][T14329] Cannot create hsr debugfs directory [ 453.891820][T14311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 454.019823][T14311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 454.041627][T14311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 454.160108][T14311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 454.178911][ T5107] Bluetooth: hci2: command tx timeout [ 454.633442][ T5106] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 454.653814][ T5106] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 454.665278][ T5106] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 454.676141][ T5106] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 454.688250][ T5106] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 454.702982][ T5106] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 454.879311][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.042675][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.134232][T14542] __nla_validate_parse: 2 callbacks suppressed [ 455.134255][T14542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2896'. [ 455.204412][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.320737][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.369528][T14311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.505735][T14311] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.582449][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.589703][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.743679][T14558] netlink: 'syz.0.2902': attribute type 1 has an invalid length. [ 456.616810][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.690409][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.715493][ T62] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 456.734243][ T62] team0: left allmulticast mode [ 456.740685][ T5107] Bluetooth: hci4: command tx timeout [ 456.757154][ T62] team_slave_0: left allmulticast mode [ 456.766900][ T62] team_slave_1: left allmulticast mode [ 456.786566][ T62] team_slave_0: left promiscuous mode [ 456.792269][ T62] team_slave_1: left promiscuous mode [ 456.830485][ T62] bond0 (unregistering): Released all slaves [ 456.940487][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.947993][ T5173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.982156][ T62] : left promiscuous mode [ 457.000465][T14329] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 457.011928][T14329] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 457.110232][T14329] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 457.130502][T14329] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 457.434231][T14528] chnl_net:caif_netlink_parms(): no params data found [ 457.586369][T14584] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 457.699808][ T5106] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 458.128684][ T62] hsr_slave_0: left promiscuous mode [ 458.142533][ T62] hsr_slave_1: left promiscuous mode [ 458.159577][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.167104][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.207151][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.227230][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.309557][ T62] veth1_macvtap: left promiscuous mode [ 458.315682][ T62] veth0_macvtap: left promiscuous mode [ 458.330345][ T62] veth1_vlan: left promiscuous mode [ 458.336019][ T62] veth0_vlan: left promiscuous mode [ 458.336437][ T5107] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 458.354090][ T5107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 458.369392][ T5107] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 458.379746][ T5107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 458.391936][ T5107] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 458.399515][ T5107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 458.824084][ T5106] Bluetooth: hci4: command tx timeout [ 459.137252][ T62] team0 (unregistering): Port device team_slave_1 removed [ 459.187364][ T62] team0 (unregistering): Port device team_slave_0 removed [ 459.845330][T14528] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.854015][T14528] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.864293][T14528] bridge_slave_0: entered allmulticast mode [ 459.872704][T14528] bridge_slave_0: entered promiscuous mode [ 459.882033][T14528] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.889359][T14528] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.896630][T14528] bridge_slave_1: entered allmulticast mode [ 459.904000][T14528] bridge_slave_1: entered promiscuous mode [ 460.011805][T14528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.025357][T14528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.134216][T14311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.175418][T14528] team0: Port device team_slave_0 added [ 460.273558][T14528] team0: Port device team_slave_1 added [ 460.499004][ T5106] Bluetooth: hci0: command tx timeout [ 460.540077][T14528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.547092][T14528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.575976][T14528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.626355][T14329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.670641][T14528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.677651][T14528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.717865][T14528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.898741][ T5106] Bluetooth: hci4: command tx timeout [ 460.997428][T14528] hsr_slave_0: entered promiscuous mode [ 461.004943][T14528] hsr_slave_1: entered promiscuous mode [ 461.011661][T14528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.020046][T14528] Cannot create hsr debugfs directory [ 461.030643][T14329] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.041209][T14311] veth0_vlan: entered promiscuous mode [ 461.106777][T14311] veth1_vlan: entered promiscuous mode [ 461.206230][T12871] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.213504][T12871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.315232][T12871] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.322509][T12871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.413999][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.605229][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.649167][T14311] veth0_macvtap: entered promiscuous mode [ 461.684465][T14602] chnl_net:caif_netlink_parms(): no params data found [ 461.720387][T14311] veth1_macvtap: entered promiscuous mode [ 461.932925][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.098861][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.324211][T14311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.338155][T14311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.350438][T14311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.361054][T14311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.371153][T14311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.382085][T14311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.392214][T14311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.403394][T14311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.416333][T14311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.452648][T14311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.479140][T14311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.505233][T14311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.517048][T14311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.527657][T14311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.538187][T14311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.548627][T14311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.559365][T14311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.575003][T14311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.579139][ T5106] Bluetooth: hci0: command tx timeout [ 462.607761][T14602] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.616341][T14602] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.624823][T14602] bridge_slave_0: entered allmulticast mode [ 462.632655][T14602] bridge_slave_0: entered promiscuous mode [ 462.690867][T14602] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.700575][T14602] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.707918][T14602] bridge_slave_1: entered allmulticast mode [ 462.717424][T14602] bridge_slave_1: entered promiscuous mode [ 462.766976][T14311] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.793957][T14311] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.803208][T14311] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.825426][T14311] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.894724][T14602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.925841][ T62] bridge_slave_1: left allmulticast mode [ 462.931998][ T62] bridge_slave_1: left promiscuous mode [ 462.937826][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.966905][ T62] bridge_slave_0: left allmulticast mode [ 462.972885][ T62] bridge_slave_0: left promiscuous mode [ 462.979401][ T5106] Bluetooth: hci4: command tx timeout [ 462.980432][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.447572][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.463346][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.476085][ T62] bond0 (unregistering): Released all slaves [ 463.516076][T14602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.726124][T14329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.846775][T14602] team0: Port device team_slave_0 added [ 463.856422][T14602] team0: Port device team_slave_1 added [ 463.978305][T14602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.985600][T14602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.012429][T14602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.041838][T14602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.056999][T14602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.086647][T14602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.139886][T14528] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 464.165701][T14528] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 464.225355][T14528] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 464.242705][T14528] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 464.252867][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.289667][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.459042][T14602] hsr_slave_0: entered promiscuous mode [ 464.469200][T14602] hsr_slave_1: entered promiscuous mode [ 464.477257][T14602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.490235][T14602] Cannot create hsr debugfs directory [ 464.530052][ T62] hsr_slave_0: left promiscuous mode [ 464.555031][ T62] hsr_slave_1: left promiscuous mode [ 464.564129][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.571739][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.580996][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.588728][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.613761][ T62] veth1_macvtap: left promiscuous mode [ 464.619712][ T62] veth0_macvtap: left promiscuous mode [ 464.625432][ T62] veth1_vlan: left promiscuous mode [ 464.630938][ T62] veth0_vlan: left promiscuous mode [ 464.659312][ T5106] Bluetooth: hci0: command tx timeout [ 465.416864][ T62] team0 (unregistering): Port device team_slave_1 removed [ 465.481324][ T62] team0 (unregistering): Port device team_slave_0 removed [ 466.113278][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.123377][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.220319][T14329] veth0_vlan: entered promiscuous mode [ 466.345700][T14329] veth1_vlan: entered promiscuous mode [ 466.653756][T14329] veth0_macvtap: entered promiscuous mode [ 466.738579][ T5106] Bluetooth: hci0: command tx timeout [ 466.751021][T14329] veth1_macvtap: entered promiscuous mode [ 467.034123][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.167267][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.192357][T14329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.203085][T14329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.213351][T14329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.225582][T14329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.236990][T14329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.247580][T14329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.258486][T14329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.269254][T14329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.281398][T14329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.300484][T14329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.311168][T14329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.321854][T14329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.334056][T14329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.344103][T14329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.355064][T14329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.365067][T14329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.375566][T14329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.387956][T14329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.449098][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.476903][T14528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.527109][T14329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.536304][T14329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.548958][T14329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.557721][T14329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.592879][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.674111][T14528] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.691559][T14602] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 467.710572][T14602] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 467.771573][T14602] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 467.795212][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.802510][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.872779][T14602] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 467.905413][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.912665][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.004895][ T7439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.015335][ T7439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.052477][ T11] bridge_slave_1: left allmulticast mode [ 468.058287][ T11] bridge_slave_1: left promiscuous mode [ 468.064455][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.076697][ T11] bridge_slave_0: left allmulticast mode [ 468.082903][ T11] bridge_slave_0: left promiscuous mode [ 468.089424][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.518329][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.533336][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.560897][ T11] bond0 (unregistering): Released all slaves [ 468.760447][T14528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 468.800922][ T7439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.820304][ T7439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.112989][ T5107] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 469.123112][ T5107] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 469.151334][ T5107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 469.161972][ T5107] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 469.170663][ T5107] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 469.178394][ T5107] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 469.361653][T14701] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2950'. [ 469.557551][T14602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.587073][T14528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.728966][ T11] hsr_slave_0: left promiscuous mode [ 469.759799][ T11] hsr_slave_1: left promiscuous mode [ 469.789181][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.796676][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.819774][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.827281][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.921772][ T11] veth1_macvtap: left promiscuous mode [ 469.941458][ T11] veth0_macvtap: left promiscuous mode [ 469.947203][ T11] veth1_vlan: left promiscuous mode [ 469.957461][ T11] veth0_vlan: left promiscuous mode [ 470.666676][ T11] team0 (unregistering): Port device team_slave_1 removed [ 470.726701][ T11] team0 (unregistering): Port device team_slave_0 removed [ 471.223126][ T5107] Bluetooth: hci1: command tx timeout [ 471.301832][T14602] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.318982][T14707] netlink: 'syz.3.2952': attribute type 4 has an invalid length. [ 471.470691][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.477914][ T5173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.522191][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.529485][ T5173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.897344][T14528] veth0_vlan: entered promiscuous mode [ 472.105118][ T5106] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 472.115512][ T5106] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 472.124343][ T5106] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 472.137004][T14528] veth1_vlan: entered promiscuous mode [ 472.138183][ T5106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 472.175463][ T5106] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 472.188713][ T5106] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 472.314583][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.383618][T14691] chnl_net:caif_netlink_parms(): no params data found [ 472.467338][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.551987][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.731271][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.791312][T14528] veth0_macvtap: entered promiscuous mode [ 472.822126][T14743] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2959'. [ 472.838214][T14602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.918003][T14528] veth1_macvtap: entered promiscuous mode [ 473.070506][T14750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2961'. [ 473.084218][T14691] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.093608][T14691] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.101268][T14691] bridge_slave_0: entered allmulticast mode [ 473.109172][T14691] bridge_slave_0: entered promiscuous mode [ 473.136049][T14691] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.144330][T14691] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.152720][T14691] bridge_slave_1: entered allmulticast mode [ 473.161568][T14691] bridge_slave_1: entered promiscuous mode [ 473.195865][T14528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.206844][T14528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.217083][T14528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.228782][T14528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.238848][T14528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.250009][T14528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.260524][T14528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.273032][T14528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.284501][T14528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.299463][ T5106] Bluetooth: hci1: command tx timeout [ 473.350927][T14691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.405323][ T11] bridge_slave_1: left allmulticast mode [ 473.413745][ T11] bridge_slave_1: left promiscuous mode [ 473.419764][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.437884][ T11] bridge_slave_0: left allmulticast mode [ 473.444752][ T11] bridge_slave_0: left promiscuous mode [ 473.450769][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.020300][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.032811][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.045977][ T11] bond0 (unregistering): Released all slaves [ 474.062477][T14691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.103250][T14528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.116690][T14528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.126699][T14528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.137897][T14528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.147929][T14528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.159805][T14528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.169793][T14528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.180999][T14528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.194043][T14528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.207409][T14528] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.216366][T14528] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.225528][T14528] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.234747][T14528] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.259353][ T5106] Bluetooth: hci2: command tx timeout [ 474.295477][T14759] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2965'. [ 474.468032][T14691] team0: Port device team_slave_0 added [ 474.488167][T14691] team0: Port device team_slave_1 added [ 474.575907][T14691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.588087][T14768] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 474.597981][T14691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.614215][T14768] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2968'. [ 474.644907][T14691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.751191][T14602] veth0_vlan: entered promiscuous mode [ 474.765720][T14691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.779626][T14691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.806357][T14691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.825902][T14727] chnl_net:caif_netlink_parms(): no params data found [ 474.957668][T14602] veth1_vlan: entered promiscuous mode [ 475.214262][ T11] hsr_slave_0: left promiscuous mode [ 475.231766][ T11] hsr_slave_1: left promiscuous mode [ 475.238099][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.246164][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.255773][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.264407][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.294118][ T11] veth1_macvtap: left promiscuous mode [ 475.300731][ T11] veth0_macvtap: left promiscuous mode [ 475.306488][ T11] veth1_vlan: left promiscuous mode [ 475.312153][ T11] veth0_vlan: left promiscuous mode [ 475.392655][ T5106] Bluetooth: hci1: command tx timeout [ 475.963452][ T11] team0 (unregistering): Port device team_slave_1 removed [ 476.017328][ T11] team0 (unregistering): Port device team_slave_0 removed [ 476.349079][ T5106] Bluetooth: hci2: command tx timeout [ 476.564612][T14782] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 476.612265][T14691] hsr_slave_0: entered promiscuous mode [ 476.628917][T14691] hsr_slave_1: entered promiscuous mode [ 476.638934][T14691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.646823][T14691] Cannot create hsr debugfs directory [ 476.738908][T14787] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2976'. [ 476.786758][T14727] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.795048][T14727] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.825859][T14727] bridge_slave_0: entered allmulticast mode [ 476.826690][T14790] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 476.842024][T14727] bridge_slave_0: entered promiscuous mode [ 476.862111][T14727] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.862114][T14790] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2977'. [ 476.862249][T14727] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.887173][T14727] bridge_slave_1: entered allmulticast mode [ 476.895297][T14727] bridge_slave_1: entered promiscuous mode [ 476.919160][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.927224][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.061393][T14727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.083724][ T29] audit: type=1804 audit(1719619669.120:40): pid=14794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2979" name="/root/syzkaller.qJoewj/359/cgroup.controllers" dev="sda1" ino=1998 res=1 errno=0 [ 477.171153][T14727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.260619][ T2908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.269533][T14727] team0: Port device team_slave_0 added [ 477.276760][T14602] veth0_macvtap: entered promiscuous mode [ 477.282986][ T2908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.303573][T14727] team0: Port device team_slave_1 added [ 477.353557][T14602] veth1_macvtap: entered promiscuous mode [ 477.459291][ T5106] Bluetooth: hci1: command tx timeout [ 477.541003][T14727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.548018][T14727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.576744][T14727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.594235][T14727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.615701][T14727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.665803][T14727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.697215][T14807] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 477.767820][ T29] audit: type=1804 audit(1719619669.800:41): pid=14806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2984" name="/root/syzkaller.qJoewj/362/cgroup.controllers" dev="sda1" ino=2004 res=1 errno=0 [ 477.807907][T14602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.819409][T14602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.830124][T14602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.848872][T14602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.861458][T14602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.873151][T14602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.883091][T14602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.893780][T14602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.906151][T14602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.913623][T14809] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2985'. [ 478.007690][T14602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.029006][T14602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.039155][T14602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.053629][T14602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.069013][T14602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.088567][T14602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.110965][T14602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.129688][T14602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.139949][T14816] trusted_key: syz.4.2988 sent an empty control message without MSG_MORE. [ 478.161589][T14602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.216122][T14727] hsr_slave_0: entered promiscuous mode [ 478.227639][ T29] audit: type=1804 audit(1719619670.260:42): pid=14818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2989" name="/root/syzkaller.9ygzvU/7/cgroup.controllers" dev="sda1" ino=1995 res=1 errno=0 [ 478.267301][T14727] hsr_slave_1: entered promiscuous mode [ 478.290378][T14727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 478.298036][T14727] Cannot create hsr debugfs directory [ 478.383638][T14602] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.398744][T14602] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.407875][T14602] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.417866][T14602] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.428281][ T5106] Bluetooth: hci2: command tx timeout [ 478.719250][T14831] Bluetooth: MGMT ver 1.22 [ 478.871568][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.896689][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.020177][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.023524][T14691] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 479.028065][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.112137][T14691] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 479.162957][T14691] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 479.225799][T14847] xt_TPROXY: Can be used only with -p tcp or -p udp [ 479.232849][T14691] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 479.350835][T14853] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3003'. [ 479.836628][T14691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.868978][T14727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 479.915727][T14691] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.970321][T14727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 479.984791][T14727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 480.016462][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.023776][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.037037][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.044333][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.060073][T14727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 480.145887][T14882] xt_TPROXY: Can be used only with -p tcp or -p udp [ 480.267061][T14691] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 480.499146][ T5106] Bluetooth: hci2: command tx timeout [ 480.512945][T14727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.573505][T14895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3019'. [ 480.624164][T14727] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.661915][T12871] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.669163][T12871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.691109][T12871] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.698353][T12871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.913479][T14691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.090005][T14691] veth0_vlan: entered promiscuous mode [ 481.159790][T14691] veth1_vlan: entered promiscuous mode [ 481.303574][T14691] veth0_macvtap: entered promiscuous mode [ 481.337570][T14727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.350418][T14691] veth1_macvtap: entered promiscuous mode [ 481.402189][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.427915][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.442528][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.454468][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.467091][T14922] xt_TPROXY: Can be used only with -p tcp or -p udp [ 481.473959][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.486572][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.505525][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.526303][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.549296][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.563125][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.605294][T14691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.651091][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.675760][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.689396][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.700454][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.716843][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.732281][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.742596][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.753961][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.764518][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.775575][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.791903][T14691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.851019][T14691] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.861262][T14691] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.870864][T14691] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.879884][T14691] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.076064][T14727] veth0_vlan: entered promiscuous mode [ 482.161232][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.189021][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.199690][T14727] veth1_vlan: entered promiscuous mode [ 482.253041][ T7432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.265205][ T7432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.381365][T14727] veth0_macvtap: entered promiscuous mode [ 482.423480][T14727] veth1_macvtap: entered promiscuous mode [ 482.541782][T14727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.553720][T14727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.564119][T14727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.575175][T14727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.594015][T14727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.613036][T14727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.628217][T14727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.640162][T14727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.651175][T14727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.668343][T14727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.680051][T14727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.705723][T14727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.729972][T14727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.761327][T14727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.790730][T14727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.801253][T14727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.813533][T14727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.825424][T14727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.848580][T14727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.859277][T14727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.870333][T14727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.880773][T14727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.903857][T14727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.917357][T14727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.929715][T14727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.949062][T14727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.976179][T14727] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.017300][T14727] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.046940][T14727] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.078076][T14727] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.089574][T14943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3038'. [ 483.129221][T14950] xt_TPROXY: Can be used only with -p tcp or -p udp [ 483.357671][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.376010][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.443930][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.452939][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.838385][T14973] dccp_invalid_packet: P.Data Offset(0) too small [ 483.867126][T14973] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 484.122625][T14975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3053'. [ 484.344330][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.123934][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.217587][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.284241][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.396496][ T11] bridge_slave_1: left allmulticast mode [ 485.402350][ T11] bridge_slave_1: left promiscuous mode [ 485.408148][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.417889][ T11] bridge_slave_0: left allmulticast mode [ 485.424059][ T11] bridge_slave_0: left promiscuous mode [ 485.430495][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.955657][ T5107] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 485.983548][ T5107] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 486.000975][ T5107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 486.035875][ T5107] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 486.046877][ T5107] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 486.065424][ T5107] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 486.146153][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.162923][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.177375][ T11] bond0 (unregistering): Released all slaves [ 486.692265][ T11] hsr_slave_0: left promiscuous mode [ 486.698546][ T11] hsr_slave_1: left promiscuous mode [ 486.704806][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.712531][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.721114][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.728780][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.763164][ T11] veth1_macvtap: left promiscuous mode [ 486.769066][ T11] veth0_macvtap: left promiscuous mode [ 486.774714][ T11] veth1_vlan: left promiscuous mode [ 486.782239][ T11] veth0_vlan: left promiscuous mode [ 487.466125][T15005] dccp_invalid_packet: P.Data Offset(0) too small [ 487.518006][T15005] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 487.623393][ T11] team0 (unregistering): Port device team_slave_1 removed [ 487.760504][ T11] team0 (unregistering): Port device team_slave_0 removed [ 487.811850][ T5106] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 487.826019][ T5106] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 487.835573][ T5106] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 487.864644][ T5106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 487.872912][ T5106] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 487.886130][ T5106] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 488.108919][ T5106] Bluetooth: hci1: command tx timeout [ 488.894140][T14994] chnl_net:caif_netlink_parms(): no params data found [ 489.086500][T15025] dccp_close: ABORT with 190 bytes unread [ 489.420512][T14994] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.427816][T14994] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.462772][T14994] bridge_slave_0: entered allmulticast mode [ 489.478923][T14994] bridge_slave_0: entered promiscuous mode [ 489.526149][T14994] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.568880][T14994] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.576216][T14994] bridge_slave_1: entered allmulticast mode [ 489.587230][T15053] netlink: 'syz.0.3083': attribute type 3 has an invalid length. [ 489.611141][T15053] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3083'. [ 489.612113][T14994] bridge_slave_1: entered promiscuous mode [ 489.770693][T14994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.846175][T14994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.950883][ T5106] Bluetooth: hci2: command tx timeout [ 489.991106][T14994] team0: Port device team_slave_0 added [ 490.030522][T14994] team0: Port device team_slave_1 added [ 490.093996][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.188804][ T5106] Bluetooth: hci1: command tx timeout [ 490.204795][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.221217][T14994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.228252][T14994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.254942][T14994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.276509][T14994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.283895][T14994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.311664][T14994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.354253][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.473937][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.506253][T14994] hsr_slave_0: entered promiscuous mode [ 490.513196][T14994] hsr_slave_1: entered promiscuous mode [ 490.526748][T14994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 490.534436][T14994] Cannot create hsr debugfs directory [ 490.546481][T15010] chnl_net:caif_netlink_parms(): no params data found [ 490.778134][ T11] bridge_slave_1: left allmulticast mode [ 490.784217][ T11] bridge_slave_1: left promiscuous mode [ 490.790257][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.801771][ T11] bridge_slave_0: left allmulticast mode [ 490.807475][ T11] bridge_slave_0: left promiscuous mode [ 490.813474][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.263947][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.276863][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.289747][ T11] bond0 (unregistering): Released all slaves [ 491.342948][T15010] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.360422][T15010] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.367830][T15010] bridge_slave_0: entered allmulticast mode [ 491.376245][T15010] bridge_slave_0: entered promiscuous mode [ 491.396090][T15010] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.403805][T15010] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.412934][T15010] bridge_slave_1: entered allmulticast mode [ 491.420915][T15010] bridge_slave_1: entered promiscuous mode [ 491.517311][T15010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.581340][T15010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.657531][T15010] team0: Port device team_slave_0 added [ 491.689425][T15010] team0: Port device team_slave_1 added [ 491.965087][ T11] hsr_slave_0: left promiscuous mode [ 491.980747][ T11] hsr_slave_1: left promiscuous mode [ 491.989759][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.997296][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.007212][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.015140][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.022593][ T5106] Bluetooth: hci2: command tx timeout [ 492.084641][ T11] veth1_macvtap: left promiscuous mode [ 492.093464][ T11] veth0_macvtap: left promiscuous mode [ 492.101673][ T11] veth1_vlan: left promiscuous mode [ 492.107868][ T11] veth0_vlan: left promiscuous mode [ 492.259282][ T5106] Bluetooth: hci1: command tx timeout [ 492.875513][ T11] team0 (unregistering): Port device team_slave_1 removed [ 492.927831][ T11] team0 (unregistering): Port device team_slave_0 removed [ 493.475109][T15010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.487083][T15010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.513826][T15010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.540773][T15010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.548236][T15010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.574513][T15010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.595155][T15079] vlan3: entered promiscuous mode [ 493.795984][T15010] hsr_slave_0: entered promiscuous mode [ 493.820337][T15010] hsr_slave_1: entered promiscuous mode [ 493.848701][T15010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.856346][T15010] Cannot create hsr debugfs directory [ 494.098908][ T5106] Bluetooth: hci2: command tx timeout [ 494.136780][T14994] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 494.208095][T14994] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 494.230351][T14994] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 494.292915][T14994] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 494.339105][ T5106] Bluetooth: hci1: command tx timeout [ 495.041834][T14994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.115156][T14994] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.151395][T12866] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.158664][T12866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.195836][T15152] vlan3: entered promiscuous mode [ 495.230574][T12866] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.237851][T12866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.417002][T15161] netlink: 'syz.0.3120': attribute type 1 has an invalid length. [ 495.425202][T15161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3120'. [ 495.522459][T15010] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 495.570486][T15010] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 495.615819][T15010] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 495.672281][T15010] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 495.790795][ T35] ================================================================== [ 495.798930][ T35] BUG: KASAN: slab-use-after-free in l2tp_tunnel_del_work+0xe5/0x330 [ 495.807069][ T35] Read of size 8 at addr ffff88807e96c0b8 by task kworker/u8:2/35 [ 495.814906][ T35] [ 495.817272][ T35] CPU: 1 PID: 35 Comm: kworker/u8:2 Not tainted 6.10.0-rc5-syzkaller-01097-g748e3bbf4721 #0 [ 495.827383][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 495.837475][ T35] Workqueue: l2tp l2tp_tunnel_del_work [ 495.843014][ T35] Call Trace: [ 495.846331][ T35] [ 495.849294][ T35] dump_stack_lvl+0x241/0x360 [ 495.854016][ T35] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.859260][ T35] ? __pfx__printk+0x10/0x10 [ 495.863905][ T35] ? _printk+0xd5/0x120 [ 495.868111][ T35] ? __virt_addr_valid+0x183/0x520 [ 495.873288][ T35] ? __virt_addr_valid+0x183/0x520 [ 495.878492][ T35] print_report+0x169/0x550 [ 495.883054][ T35] ? __virt_addr_valid+0x183/0x520 [ 495.888214][ T35] ? __virt_addr_valid+0x183/0x520 [ 495.893366][ T35] ? __virt_addr_valid+0x44e/0x520 [ 495.898536][ T35] ? __phys_addr+0xba/0x170 [ 495.903082][ T35] ? l2tp_tunnel_del_work+0xe5/0x330 [ 495.908405][ T35] kasan_report+0x143/0x180 [ 495.912954][ T35] ? l2tp_tunnel_del_work+0xe5/0x330 [ 495.918282][ T35] l2tp_tunnel_del_work+0xe5/0x330 [ 495.923436][ T35] ? process_scheduled_works+0x945/0x1830 [ 495.929197][ T35] process_scheduled_works+0xa2c/0x1830 [ 495.934805][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 495.941005][ T35] ? assign_work+0x364/0x3d0 [ 495.945636][ T35] worker_thread+0x86d/0xd50 [ 495.950276][ T35] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 495.956214][ T35] ? __kthread_parkme+0x169/0x1d0 [ 495.961285][ T35] ? __pfx_worker_thread+0x10/0x10 [ 495.966441][ T35] kthread+0x2f0/0x390 [ 495.970554][ T35] ? __pfx_worker_thread+0x10/0x10 [ 495.975706][ T35] ? __pfx_kthread+0x10/0x10 [ 495.980357][ T35] ret_from_fork+0x4b/0x80 [ 495.984841][ T35] ? __pfx_kthread+0x10/0x10 [ 495.989472][ T35] ret_from_fork_asm+0x1a/0x30 [ 495.994291][ T35] [ 495.997351][ T35] [ 495.999701][ T35] Allocated by task 15167: [ 496.004137][ T35] kasan_save_track+0x3f/0x80 [ 496.008861][ T35] __kasan_kmalloc+0x98/0xb0 [ 496.013536][ T35] __kmalloc_noprof+0x1f9/0x400 [ 496.018422][ T35] l2tp_session_create+0x3b/0xc20 [ 496.023485][ T35] pppol2tp_connect+0xca3/0x17a0 [ 496.028462][ T35] __sys_connect+0x2df/0x310 [ 496.033121][ T35] __x64_sys_connect+0x7a/0x90 [ 496.037931][ T35] do_syscall_64+0xf3/0x230 [ 496.042468][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.048400][ T35] [ 496.050749][ T35] Freed by task 15010: [ 496.054837][ T35] kasan_save_track+0x3f/0x80 [ 496.059556][ T35] kasan_save_free_info+0x40/0x50 [ 496.064627][ T35] poison_slab_object+0xe0/0x150 [ 496.069618][ T35] __kasan_slab_free+0x37/0x60 [ 496.074511][ T35] kfree+0x149/0x360 [ 496.078453][ T35] __sk_destruct+0x58/0x5f0 [ 496.083133][ T35] rcu_core+0xafd/0x1830 [ 496.087413][ T35] handle_softirqs+0x2c4/0x970 [ 496.092229][ T35] __irq_exit_rcu+0xf4/0x1c0 [ 496.096852][ T35] irq_exit_rcu+0x9/0x30 [ 496.101129][ T35] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 496.106818][ T35] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 496.112840][ T35] [ 496.115186][ T35] Last potentially related work creation: [ 496.120925][ T35] kasan_save_stack+0x3f/0x60 [ 496.125635][ T35] __kasan_record_aux_stack+0xac/0xc0 [ 496.131039][ T35] call_rcu+0x167/0xa70 [ 496.135235][ T35] pppol2tp_release+0x24b/0x350 [ 496.140121][ T35] sock_close+0xbc/0x240 [ 496.144396][ T35] __fput+0x406/0x8b0 [ 496.148497][ T35] task_work_run+0x24f/0x310 [ 496.153125][ T35] syscall_exit_to_user_mode+0x168/0x370 [ 496.157863][T15010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.158788][ T35] do_syscall_64+0x100/0x230 [ 496.158816][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.158839][ T35] [ 496.158844][ T35] The buggy address belongs to the object at ffff88807e96c000 [ 496.158844][ T35] which belongs to the cache kmalloc-1k of size 1024 [ 496.158863][ T35] The buggy address is located 184 bytes inside of [ 496.158863][ T35] freed 1024-byte region [ffff88807e96c000, ffff88807e96c400) [ 496.158887][ T35] [ 496.158893][ T35] The buggy address belongs to the physical page: [ 496.158917][ T35] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e968 [ 496.158943][ T35] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 496.158962][ T35] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 496.158989][ T35] page_type: 0xffffefff(slab) [ 496.159011][ T35] raw: 00fff00000000040 ffff888015041dc0 ffffea0001970800 dead000000000002 [ 496.159030][ T35] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 496.159051][ T35] head: 00fff00000000040 ffff888015041dc0 ffffea0001970800 dead000000000002 [ 496.159070][ T35] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 496.159090][ T35] head: 00fff00000000003 ffffea0001fa5a01 ffffffffffffffff 0000000000000000 [ 496.159109][ T35] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 496.159120][ T35] page dumped because: kasan: bad access detected [ 496.159136][ T35] page_owner tracks the page as allocated [ 496.159144][ T35] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 11, tgid 11 (kworker/u8:0), ts 390469994367, free_ts 386707406762 [ 496.178874][ T5106] Bluetooth: hci2: command tx timeout [ 496.192604][ T35] post_alloc_hook+0x1f3/0x230 [ 496.192645][ T35] get_page_from_freelist+0x2e4c/0x2f10 [ 496.192666][ T35] __alloc_pages_noprof+0x256/0x6c0 [ 496.192684][ T35] alloc_slab_page+0x5f/0x120 [ 496.192707][ T35] allocate_slab+0x5a/0x2f0 [ 496.192730][ T35] ___slab_alloc+0xcd1/0x14b0 [ 496.192749][ T35] __slab_alloc+0x58/0xa0 [ 496.192767][ T35] kmalloc_node_track_caller_noprof+0x281/0x440 [ 496.192789][ T35] kmalloc_reserve+0x111/0x2a0 [ 496.192814][ T35] __alloc_skb+0x1f3/0x440 [ 496.192838][ T35] inet6_rt_notify+0xdf/0x290 [ 496.192856][ T35] fib6_add+0x1e33/0x4430 [ 496.192882][ T35] ip6_ins_rt+0x106/0x170 [ 496.192907][ T35] __ipv6_ifa_notify+0x5d2/0x1230 [ 496.192936][ T35] addrconf_dad_completed+0x181/0xcd0 [ 496.282173][T15010] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.289050][ T35] addrconf_dad_work+0xdc2/0x16f0 [ 496.289091][ T35] page last free pid 2908 tgid 2908 stack trace: [ 496.289104][ T35] free_unref_page+0xd22/0xea0 [ 496.289131][ T35] __put_partials+0xeb/0x130 [ 496.289151][ T35] put_cpu_partial+0x17c/0x250 [ 496.289174][ T35] __slab_free+0x2ea/0x3d0 [ 496.289199][ T35] qlist_free_all+0x9e/0x140 [ 496.289222][ T35] kasan_quarantine_reduce+0x14f/0x170 [ 496.289246][ T35] __kasan_slab_alloc+0x23/0x80 [ 496.289271][ T35] kmalloc_trace_noprof+0x132/0x2c0 [ 496.289290][ T35] netdevice_event+0x37d/0x950 [ 496.289329][ T35] notifier_call_chain+0x19f/0x3e0 [ 496.289351][ T35] unregister_netdevice_many_notify+0xd75/0x16b0 [ 496.289389][ T35] default_device_exit_batch+0xa0f/0xa90 [ 496.289413][ T35] cleanup_net+0x89d/0xcc0 [ 496.289437][ T35] process_scheduled_works+0xa2c/0x1830 [ 496.289457][ T35] worker_thread+0x86d/0xd50 [ 496.289478][ T35] kthread+0x2f0/0x390 [ 496.289502][ T35] [ 496.289507][ T35] Memory state around the buggy address: [ 496.289520][ T35] ffff88807e96bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 496.289535][ T35] ffff88807e96c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 496.289549][ T35] >ffff88807e96c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 496.289561][ T35] ^ [ 496.289573][ T35] ffff88807e96c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 496.289588][ T35] ffff88807e96c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 496.289599][ T35] ================================================================== [ 496.289685][ T35] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 496.289698][ T35] CPU: 1 PID: 35 Comm: kworker/u8:2 Not tainted 6.10.0-rc5-syzkaller-01097-g748e3bbf4721 #0 [ 496.289722][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 496.289736][ T35] Workqueue: l2tp l2tp_tunnel_del_work [ 496.289761][ T35] Call Trace: [ 496.289771][ T35] [ 496.289780][ T35] dump_stack_lvl+0x241/0x360 [ 496.289808][ T35] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.289833][ T35] ? __pfx__printk+0x10/0x10 [ 496.289873][ T35] ? vscnprintf+0x5d/0x90 [ 496.289900][ T35] panic+0x349/0x860 [ 496.289936][ T35] ? check_panic_on_warn+0x21/0xb0 [ 496.289967][ T35] ? __pfx_panic+0x10/0x10 [ 496.290001][ T35] ? mark_lock+0x9a/0x350 [ 496.290028][ T35] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 496.290057][ T35] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 496.290085][ T35] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 496.290112][ T35] ? print_report+0x502/0x550 [ 496.290145][ T35] check_panic_on_warn+0x86/0xb0 [ 496.290176][ T35] ? l2tp_tunnel_del_work+0xe5/0x330 [ 496.290200][ T35] end_report+0x77/0x160 [ 496.290229][ T35] kasan_report+0x154/0x180 [ 496.290261][ T35] ? l2tp_tunnel_del_work+0xe5/0x330 [ 496.290290][ T35] l2tp_tunnel_del_work+0xe5/0x330 [ 496.290317][ T35] ? process_scheduled_works+0x945/0x1830 [ 496.290340][ T35] process_scheduled_works+0xa2c/0x1830 [ 496.290398][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 496.290429][ T35] ? assign_work+0x364/0x3d0 [ 496.290456][ T35] worker_thread+0x86d/0xd50 [ 496.290486][ T35] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 496.290516][ T35] ? __kthread_parkme+0x169/0x1d0 [ 496.290544][ T35] ? __pfx_worker_thread+0x10/0x10 [ 496.290568][ T35] kthread+0x2f0/0x390 [ 496.290596][ T35] ? __pfx_worker_thread+0x10/0x10 [ 496.290620][ T35] ? __pfx_kthread+0x10/0x10 [ 496.290648][ T35] ret_from_fork+0x4b/0x80 [ 496.290680][ T35] ? __pfx_kthread+0x10/0x10 [ 496.290706][ T35] ret_from_fork_asm+0x1a/0x30 [ 496.290750][ T35] [ 496.298730][ T35] Kernel Offset: disabled