last executing test programs: 1m27.763058893s ago: executing program 2 (id=726): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', '', [{0x20, '{],\'-)!:-\\^-\':]),\\\'[\\^!]].-'}]}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'ovf\x00'}, 0x2c) 1m10.972218994s ago: executing program 2 (id=726): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', '', [{0x20, '{],\'-)!:-\\^-\':]),\\\'[\\^!]].-'}]}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'ovf\x00'}, 0x2c) 59.36430536s ago: executing program 2 (id=726): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', '', [{0x20, '{],\'-)!:-\\^-\':]),\\\'[\\^!]].-'}]}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'ovf\x00'}, 0x2c) 46.54795059s ago: executing program 2 (id=726): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', '', [{0x20, '{],\'-)!:-\\^-\':]),\\\'[\\^!]].-'}]}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'ovf\x00'}, 0x2c) 34.94471635s ago: executing program 2 (id=726): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', '', [{0x20, '{],\'-)!:-\\^-\':]),\\\'[\\^!]].-'}]}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'ovf\x00'}, 0x2c) 17.746216168s ago: executing program 2 (id=726): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', '', [{0x20, '{],\'-)!:-\\^-\':]),\\\'[\\^!]].-'}]}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'ovf\x00'}, 0x2c) 1.680250777s ago: executing program 4 (id=1589): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000005a00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) 1.612378383s ago: executing program 4 (id=1592): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000180)=@udp6, 0x4}, 0x20) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 1.472921219s ago: executing program 4 (id=1597): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000400)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xd}, 0xe) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000006c0)="19d90500163fd9fc9e34bec39d59a79c7379b08f04be639387d6a598014f48f017682dde475a15641ba3d11061d467f5f7585d301c15f5e4b2f601e5a79c92253a945968bbeee5d6e4b3c5ca892a97ae09b355d4f19bcd034dc95358f5dfc9a01940225dc5e345f5c86940c3b6b66a6f473586874743207a5e72d4d6a9b16c297f362daf5168a81cce5e9e0b8c51f6f603edc27b074f676203be48d9292c8407ce873db0b27e704019231d464592bed412f8dfabe03fa2236596218498ed37c48f09833f", 0xc4}, {&(0x7f0000000080)="be32ad77fde55af4aaa9b957b812a18c279d81a2f15428a4ebac8025ebd7d24f44ae7c35c128588a56bc51417ad26458fc357bfe52edc42e199e59294b440cf11cc05ccb25ca7ee1b7c32100e01d58b5f147a097d2559e25d05691fb6b054c8d1f0e335655751345dcd2c42fdccd4e", 0x6f}, {&(0x7f0000000840)="f4872c011ddf7fa17da5af6803d7186208acb34e3976733e3ae1cbc72b70e78a6eba976c8f24429519be0ba5b7e0cca904f39c69b8128f1ca1eaa5707a584308630c53cc5db018ca85070950479a77fc490aefdeaf991f3cef1d880e041c7f15e7ba9f0577a5693714986e33106a49f58d0c9f5a14", 0x75}, {&(0x7f0000000440)="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", 0x217}, {&(0x7f00000009c0)="de73e7d819b21c026df3a1681ffbc58f03eee61e6eb5a0aea4507c1408c0668b401cc85e39bc3b01f8fe4061734cafbb491b74c3ee76c1a9da", 0x39}], 0x5}}], 0x1, 0x0) 1.364732686s ago: executing program 4 (id=1600): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x20, 0x1411, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x20}}, 0x0) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @empty}, &(0x7f00000003c0)=0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000400)) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x12, 0x22, 0x4, 0x6}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2000, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x38, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1}}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYRES16=r5, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080043007f00000008000500"], 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xb}, 0x48) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000440), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.037566557s ago: executing program 4 (id=1609): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0609140002"], 0x44}, 0x1, 0x1000000}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002000000000000000000000008000100e000000108000300", @ANYRES32], 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=@deltclass={0x48, 0x29, 0x600, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0x6, 0xfff3}, {0xffe0, 0xfff3}}, [@tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_qfq={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xff, 0x40}}]}, 0x48}}, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00'], 0x14}}, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0104000000000000000086065be981ddca980009eebac002000000200004801c0001800a00010072656469720000000c00028008000140000000000900010073797a30000000000900020073b0783ffa24100618ea562f3986a2797a320000000014000000110001000000000000"], 0x74}}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xe80, 0x4) accept$packet(r7, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="3f030e00030000002b001e0089e9aaa911e0c2310f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3", 0x37, 0x4, &(0x7f0000000040)={0x11, 0x0, r8, 0x4, 0x0, 0x6, @multicast}, 0x14) 722.684052ms ago: executing program 3 (id=1618): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}], @NL80211_ATTR_FRAME={0x24, 0x33, @assoc_resp={{{}, {}, @device_a, @device_a, @from_mac=@device_b}, 0x0, 0x0, @default, @val, @void}}]}, 0x48}}, 0x0) 635.47304ms ago: executing program 3 (id=1621): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, 0x0, &(0x7f0000000140)}, 0x20) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xf, &(0x7f0000000680)=@ringbuf, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x1a}, 0x90) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="2c002d8008"], 0x48}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x198, r4, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffb2}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x198}}, 0x0) 598.83783ms ago: executing program 1 (id=1622): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000180)=@udp6, 0x4}, 0x20) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 588.185388ms ago: executing program 0 (id=1623): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x30, 0x0, &(0x7f00000000c0)) 524.803647ms ago: executing program 3 (id=1624): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="74010000", @ANYRES16=r1, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003000100000028000200060001000a00000014000200ff010000000000000000000000000001050003000300000028000080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) 496.76468ms ago: executing program 0 (id=1625): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'wlan1\x00', &(0x7f0000000440)=@ethtool_gstrings={0x1b, 0x8}}) 446.19204ms ago: executing program 1 (id=1626): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x10, &(0x7f0000000100)={r2}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x56, 0x80000001}) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000b40)={0x0, 0xff, 0x3, 0x0, 0x3, 0xc0, 0x3, 0x2, 0x0, 0x0, 0x5, 0x7, 0x6}, 0xe) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x7fffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x2}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000680)={'vxcan0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, &(0x7f0000000700)=""/167, 0x0, 0xa7, 0x1}, 0x20) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x1c, r7, 0x301, 0x0, 0x0, {0x2b}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) 442.049737ms ago: executing program 0 (id=1627): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/28, 0x1c}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 436.922356ms ago: executing program 3 (id=1628): sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r0}, 0x38) 322.728179ms ago: executing program 1 (id=1629): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x2000000, 0x32, 0x0, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8861000dffd00139fb7a884", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 316.563308ms ago: executing program 0 (id=1630): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x7}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x63) 260.034168ms ago: executing program 1 (id=1631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}], @NL80211_ATTR_FRAME={0x24, 0x33, @assoc_resp={{{}, {}, @device_a, @device_a, @from_mac=@device_b}, 0x0, 0x0, @default, @val, @void}}]}, 0x48}}, 0x0) 220.957463ms ago: executing program 0 (id=1632): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@in={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x6}}], 0x20}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 176.340726ms ago: executing program 1 (id=1633): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, 0x0, &(0x7f0000000180)) 130.888477ms ago: executing program 4 (id=1634): r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, @in6}, 0x98) 97.968127ms ago: executing program 3 (id=1635): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r0, 0x111, 0x2, 0x0, 0x20000000) 86.979281ms ago: executing program 0 (id=1636): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$tipc(r1, &(0x7f0000000340)={&(0x7f0000000040)=@name, 0x10, 0x0}, 0x0) 32.392883ms ago: executing program 1 (id=1637): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x38, r1, 0x101, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x38}}, 0x0) 0s ago: executing program 3 (id=1638): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) kernel console output (not intermixed with test programs): 4.748601][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.769159][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.799633][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.812691][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.831431][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.845592][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.870262][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.885642][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.904751][ T6369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.964833][ T6369] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.975730][ T6369] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.986380][ T6369] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.995117][ T6369] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.193216][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.214815][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.284738][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.303466][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.523251][ T6635] netlink: 'syz.1.605': attribute type 4 has an invalid length. [ 95.629204][ T6641] netlink: 165 bytes leftover after parsing attributes in process `syz.4.608'. [ 95.706036][ T5093] Bluetooth: hci3: command tx timeout [ 95.887284][ T6654] netlink: 188 bytes leftover after parsing attributes in process `syz.4.612'. [ 96.091378][ T6669] tap0: tun_chr_ioctl cmd 1074025677 [ 96.105667][ T6669] tap0: linktype set to 512 [ 96.141709][ T6668] netlink: 292 bytes leftover after parsing attributes in process `syz.4.618'. [ 96.694660][ T6697] tipc: MTU too low for tipc bearer [ 96.817148][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.631'. [ 96.922434][ T6703] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 97.132421][ T6714] netlink: 165 bytes leftover after parsing attributes in process `syz.4.636'. [ 97.144397][ T6711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.635'. [ 98.414727][ T6787] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.665'. [ 98.512531][ T6790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.667'. [ 99.200298][ T6822] rdma_op ffff88806880c9f0 conn xmit_rdma 0000000000000000 [ 99.389152][ T29] audit: type=1804 audit(1719280158.228:12): pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.690" name="/root/syzkaller.q6jU8x/123/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 99.444855][ T29] audit: type=1804 audit(1719280158.258:13): pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.690" name="/root/syzkaller.q6jU8x/123/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 99.520622][ T29] audit: type=1804 audit(1719280158.258:14): pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.690" name="/root/syzkaller.q6jU8x/123/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 99.801934][ T6858] rdma_op ffff88807f5029f0 conn xmit_rdma 0000000000000000 [ 99.841458][ T6864] __nla_validate_parse: 6 callbacks suppressed [ 99.841477][ T6864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.702'. [ 100.265638][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.332823][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.711'. [ 100.373105][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.711'. [ 100.388186][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.711'. [ 100.503534][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.536427][ T6892] rdma_op ffff888066a251f0 conn xmit_rdma 0000000000000000 [ 100.693093][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.844568][ T12] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.984214][ T5104] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.995072][ T5104] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 101.007414][ T5104] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 101.019982][ T5104] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 101.033096][ T5104] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 101.040858][ T5104] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 101.189220][ T12] bridge_slave_1: left allmulticast mode [ 101.218551][ T12] bridge_slave_1: left promiscuous mode [ 101.230216][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.725'. [ 101.243747][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.258253][ T12] bridge_slave_0: left allmulticast mode [ 101.274236][ T12] bridge_slave_0: left promiscuous mode [ 101.282429][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.840785][ T5093] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 101.854082][ T5093] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 101.869092][ T5093] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 101.881244][ T5093] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 101.895209][ T5093] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 101.908229][ T5093] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.998684][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.019640][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.042193][ T12] bond0 (unregistering): Released all slaves [ 102.201872][ T6928] rdma_op ffff888068f701f0 conn xmit_rdma 0000000000000000 [ 102.682586][ T12] hsr_slave_0: left promiscuous mode [ 102.694655][ T12] hsr_slave_1: left promiscuous mode [ 102.702341][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.722579][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.733479][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.747011][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.782064][ T12] veth1_macvtap: left promiscuous mode [ 102.788885][ T12] veth0_macvtap: left promiscuous mode [ 102.794663][ T12] veth1_vlan: left promiscuous mode [ 102.804754][ T12] veth0_vlan: left promiscuous mode [ 103.068876][ T5104] Bluetooth: hci2: command tx timeout [ 103.423351][ T12] team0 (unregistering): Port device team_slave_1 removed [ 103.475489][ T12] team0 (unregistering): Port device team_slave_0 removed [ 104.026107][ T5104] Bluetooth: hci3: command tx timeout [ 104.223308][ T6909] chnl_net:caif_netlink_parms(): no params data found [ 104.323317][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.739'. [ 104.340756][ T6956] netlink: 40 bytes leftover after parsing attributes in process `syz.1.738'. [ 104.400486][ T6923] chnl_net:caif_netlink_parms(): no params data found [ 104.537121][ T6909] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.544385][ T6909] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.561155][ T6909] bridge_slave_0: entered allmulticast mode [ 104.570087][ T6909] bridge_slave_0: entered promiscuous mode [ 104.614219][ T6969] netlink: 'syz.0.742': attribute type 1 has an invalid length. [ 104.623338][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'. [ 104.636402][ T6909] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.643557][ T6909] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.676620][ T6909] bridge_slave_1: entered allmulticast mode [ 104.706359][ T6909] bridge_slave_1: entered promiscuous mode [ 104.754828][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.746'. [ 104.861394][ T6909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.951794][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.009906][ T6909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.036957][ T6923] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.076086][ T6923] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.083401][ T6923] bridge_slave_0: entered allmulticast mode [ 105.104695][ T6923] bridge_slave_0: entered promiscuous mode [ 105.124349][ T6923] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.141201][ T6923] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.155981][ T5104] Bluetooth: hci2: command tx timeout [ 105.167245][ T6923] bridge_slave_1: entered allmulticast mode [ 105.187417][ T6923] bridge_slave_1: entered promiscuous mode [ 105.303610][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.421127][ T6909] team0: Port device team_slave_0 added [ 105.433879][ T6909] team0: Port device team_slave_1 added [ 105.478763][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.504155][ T6923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.584132][ T6923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.649084][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.666397][ T6909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.673464][ T6909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.703361][ T6909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.784434][ T6909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.802193][ T6909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.833226][ T6909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.863541][ T6923] team0: Port device team_slave_0 added [ 105.889179][ T6923] team0: Port device team_slave_1 added [ 106.106101][ T5104] Bluetooth: hci3: command tx timeout [ 106.150747][ T6909] hsr_slave_0: entered promiscuous mode [ 106.182223][ T6909] hsr_slave_1: entered promiscuous mode [ 106.239707][ T6909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.266218][ T6909] Cannot create hsr debugfs directory [ 106.290290][ T6923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.299576][ T6923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.385904][ T6923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.497591][ T6923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.504581][ T6923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.553350][ T6923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.574791][ T5093] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.610695][ T5093] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.620031][ T5093] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.631123][ T5093] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.645698][ T5093] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 106.659571][ T5093] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.779447][ T7061] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.790358][ T7061] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.844283][ T12] bridge_slave_1: left allmulticast mode [ 106.850561][ T12] bridge_slave_1: left promiscuous mode [ 106.857158][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.867997][ T12] bridge_slave_0: left allmulticast mode [ 106.873650][ T12] bridge_slave_0: left promiscuous mode [ 106.882615][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.191012][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.202655][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.214032][ T12] bond0 (unregistering): Released all slaves [ 107.225957][ T5093] Bluetooth: hci2: command tx timeout [ 107.259502][ T6923] hsr_slave_0: entered promiscuous mode [ 107.278352][ T6923] hsr_slave_1: entered promiscuous mode [ 107.310095][ T6923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.324742][ T6923] Cannot create hsr debugfs directory [ 107.375077][ T7061] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.395949][ T7061] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.454509][ T7077] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 107.535494][ T7061] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.555277][ T7061] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.568834][ T7081] xt_nat: multiple ranges no longer supported [ 107.731341][ T7061] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.742347][ T7061] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.823251][ T12] hsr_slave_0: left promiscuous mode [ 107.832988][ T12] hsr_slave_1: left promiscuous mode [ 107.841779][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.849599][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.858150][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.866809][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.883975][ T12] veth1_macvtap: left promiscuous mode [ 107.889689][ T12] veth0_macvtap: left promiscuous mode [ 107.895349][ T12] veth1_vlan: left promiscuous mode [ 107.900788][ T12] veth0_vlan: left promiscuous mode [ 108.186091][ T5093] Bluetooth: hci3: command tx timeout [ 108.299837][ T12] team0 (unregistering): Port device team_slave_1 removed [ 108.334889][ T12] team0 (unregistering): Port device team_slave_0 removed [ 108.674006][ T7089] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 108.746150][ T5093] Bluetooth: hci1: command tx timeout [ 108.907056][ T7061] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.926006][ T7061] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.946693][ T7061] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.955079][ T7061] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.970100][ T7098] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 109.010797][ T7061] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.021318][ T7061] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.047258][ T7061] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.055508][ T7061] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.260975][ T7064] chnl_net:caif_netlink_parms(): no params data found [ 109.306654][ T5093] Bluetooth: hci2: command tx timeout [ 109.471997][ T6909] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 109.481593][ T6909] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 109.526111][ T6909] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.539945][ T6909] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.563364][ T7122] netlink: 165 bytes leftover after parsing attributes in process `syz.1.807'. [ 109.581450][ T7064] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.589090][ T7064] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.601499][ T7064] bridge_slave_0: entered allmulticast mode [ 109.610008][ T7064] bridge_slave_0: entered promiscuous mode [ 109.637538][ T7064] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.654642][ T7064] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.677024][ T7064] bridge_slave_1: entered allmulticast mode [ 109.684402][ T7064] bridge_slave_1: entered promiscuous mode [ 109.744556][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.819735][ T29] audit: type=1804 audit(1719280168.658:15): pid=7133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.810" name="/root/syzkaller.8rrqSi/183/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 109.860484][ T7064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.909543][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.948338][ T7064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.010094][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.083427][ T7064] team0: Port device team_slave_0 added [ 110.140778][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.188207][ T7064] team0: Port device team_slave_1 added [ 110.267076][ T5093] Bluetooth: hci3: command tx timeout [ 110.438292][ T7064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.445296][ T7064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.483896][ T7064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.518142][ T7064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.525129][ T7064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.573465][ T7064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.608048][ T5104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 110.617687][ T5104] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 110.626778][ T5104] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.652299][ T5104] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 110.660225][ T5104] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 110.676196][ T5104] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.827697][ T5093] Bluetooth: hci1: command tx timeout [ 110.913909][ T7064] hsr_slave_0: entered promiscuous mode [ 110.921200][ T7064] hsr_slave_1: entered promiscuous mode [ 110.927784][ T7064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.935470][ T7064] Cannot create hsr debugfs directory [ 110.946357][ T6923] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 111.180839][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.192067][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.203992][ T12] bond0 (unregistering): Released all slaves [ 111.262386][ T6923] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 111.296581][ T12] : left promiscuous mode [ 111.338559][ T6923] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.366525][ T6923] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.404174][ T6909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.574261][ T6909] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.652438][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.659815][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.675736][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.682961][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.803336][ T12] hsr_slave_0: left promiscuous mode [ 111.810218][ T12] hsr_slave_1: left promiscuous mode [ 111.820495][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.829361][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.841492][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.849277][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.869456][ T12] veth1_macvtap: left promiscuous mode [ 111.875159][ T12] veth0_macvtap: left promiscuous mode [ 111.881764][ T12] veth1_vlan: left promiscuous mode [ 111.887418][ T12] veth0_vlan: left promiscuous mode [ 112.295498][ T12] team0 (unregistering): Port device team_slave_1 removed [ 112.338005][ T12] team0 (unregistering): Port device team_slave_0 removed [ 112.746450][ T5093] Bluetooth: hci4: command tx timeout [ 112.877250][ T7149] chnl_net:caif_netlink_parms(): no params data found [ 112.909896][ T5093] Bluetooth: hci1: command tx timeout [ 113.057708][ T6923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.068153][ T7149] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.076294][ T7149] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.083711][ T7149] bridge_slave_0: entered allmulticast mode [ 113.093133][ T7149] bridge_slave_0: entered promiscuous mode [ 113.101198][ T7149] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.108864][ T7149] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.117369][ T7149] bridge_slave_1: entered allmulticast mode [ 113.124213][ T7149] bridge_slave_1: entered promiscuous mode [ 113.188604][ T7149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.203738][ T7149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.291329][ T6923] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.320927][ T7149] team0: Port device team_slave_0 added [ 113.332910][ T7149] team0: Port device team_slave_1 added [ 113.431427][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.438641][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.448207][ T7064] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.462547][ T7149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.470555][ T7149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.500000][ T7149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.513693][ T7149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.521373][ T7149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.547882][ T7149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.558724][ T7185] netlink: 165 bytes leftover after parsing attributes in process `syz.3.824'. [ 113.579097][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.586272][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.594194][ T7064] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.615178][ T7064] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.642092][ T6909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.698179][ T7064] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.780802][ T7149] hsr_slave_0: entered promiscuous mode [ 113.796601][ T7149] hsr_slave_1: entered promiscuous mode [ 113.894724][ T7195] xt_CT: You must specify a L4 protocol and not use inversions on it [ 113.940222][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.952831][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.093574][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.121002][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.219579][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.234328][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.310691][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.329904][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.425517][ T6909] veth0_vlan: entered promiscuous mode [ 114.456702][ T6923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.474433][ T7064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.517246][ T6909] veth1_vlan: entered promiscuous mode [ 114.557246][ T7064] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.829623][ T5093] Bluetooth: hci4: command tx timeout [ 114.904812][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.924044][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.941542][ T12] bond0 (unregistering): Released all slaves [ 114.974752][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.981885][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.996467][ T5093] Bluetooth: hci1: command tx timeout [ 115.006839][ T12] : left promiscuous mode [ 115.053257][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.060394][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.118698][ T6909] veth0_macvtap: entered promiscuous mode [ 115.139261][ T6923] veth0_vlan: entered promiscuous mode [ 115.155595][ T6909] veth1_macvtap: entered promiscuous mode [ 115.214125][ T7209] netlink: 'syz.3.830': attribute type 2 has an invalid length. [ 115.224182][ T6923] veth1_vlan: entered promiscuous mode [ 115.296396][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.310323][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.320736][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.331339][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.342976][ T6909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.356351][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.369700][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.381674][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.402902][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.422525][ T6909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.465211][ T6909] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.475394][ T6909] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.496117][ T6909] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.508999][ T6909] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.627783][ T6923] veth0_macvtap: entered promiscuous mode [ 115.639392][ T6923] veth1_macvtap: entered promiscuous mode [ 115.655537][ T7223] netlink: 288 bytes leftover after parsing attributes in process `syz.3.836'. [ 115.703855][ T6923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.716927][ T6923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.727221][ T6923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.737974][ T6923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.747959][ T6923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.759307][ T6923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.771233][ T6923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.783799][ T12] hsr_slave_0: left promiscuous mode [ 115.790063][ T12] hsr_slave_1: left promiscuous mode [ 115.799515][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.807655][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.815424][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.823439][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.842079][ T12] veth1_macvtap: left promiscuous mode [ 115.848457][ T12] veth0_macvtap: left promiscuous mode [ 115.854391][ T12] veth1_vlan: left promiscuous mode [ 115.860113][ T12] veth0_vlan: left promiscuous mode [ 116.233233][ T12] team0 (unregistering): Port device team_slave_1 removed [ 116.280857][ T12] team0 (unregistering): Port device team_slave_0 removed [ 116.613644][ T6923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.628662][ T6923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.638574][ T6923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.649113][ T6923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.660718][ T6923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.672332][ T6923] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.696142][ T6923] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.705333][ T6923] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.714802][ T6923] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.748676][ T7229] netlink: zone id is out of range [ 116.812918][ T7064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.875388][ T7231] netlink: 'syz.3.839': attribute type 2 has an invalid length. [ 116.907384][ T5093] Bluetooth: hci4: command tx timeout [ 116.913410][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.944922][ T7149] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 116.954036][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.982417][ T7149] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 117.012689][ T7149] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 117.037906][ T7233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.840'. [ 117.038359][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.058884][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.087379][ T7149] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 117.129613][ T12] IPVS: stop unused estimator thread 0... [ 117.188562][ T7064] veth0_vlan: entered promiscuous mode [ 117.213816][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.236579][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.262543][ T7064] veth1_vlan: entered promiscuous mode [ 117.334448][ T945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.358107][ T945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.543270][ T7064] veth0_macvtap: entered promiscuous mode [ 117.595438][ T7064] veth1_macvtap: entered promiscuous mode [ 117.653790][ T7064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.673035][ T7064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.690605][ T7064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.712792][ T7064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.723338][ T7064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.739618][ T7064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.753103][ T7064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.768821][ T7235] netlink: 52 bytes leftover after parsing attributes in process `syz.4.712'. [ 117.803416][ T7149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.822834][ T7064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.833847][ T7064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.845039][ T7064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.857107][ T7064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.868779][ T7064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.879515][ T7064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.891409][ T7064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.051122][ T7149] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.062307][ T7248] netlink: 288 bytes leftover after parsing attributes in process `syz.4.845'. [ 118.084835][ T7064] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.106911][ T7064] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.115667][ T7064] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.135981][ T7064] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.158175][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.165346][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.211624][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.218876][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.331361][ T7253] netlink: zone id is out of range [ 118.545974][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.566404][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.630991][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.673496][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.710357][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.807926][ T5104] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.821507][ T5104] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.832659][ T5104] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.843554][ T5104] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.853538][ T5104] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 118.863935][ T5104] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 118.925093][ T7149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.987381][ T5093] Bluetooth: hci4: command tx timeout [ 119.042277][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.229155][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.433179][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.459134][ T7149] veth0_vlan: entered promiscuous mode [ 119.484101][ T7267] chnl_net:caif_netlink_parms(): no params data found [ 119.606268][ T7149] veth1_vlan: entered promiscuous mode [ 119.785451][ T7267] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.803768][ T7267] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.813925][ T7267] bridge_slave_0: entered allmulticast mode [ 119.829207][ T7267] bridge_slave_0: entered promiscuous mode [ 119.862015][ T7267] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.870652][ T7267] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.878684][ T7267] bridge_slave_1: entered allmulticast mode [ 119.897898][ T7267] bridge_slave_1: entered promiscuous mode [ 119.932805][ T61] bridge_slave_1: left allmulticast mode [ 119.942218][ T61] bridge_slave_1: left promiscuous mode [ 119.954756][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.969565][ T61] bridge_slave_0: left allmulticast mode [ 119.980729][ T61] bridge_slave_0: left promiscuous mode [ 119.987307][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.515450][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.529786][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.542268][ T61] bond0 (unregistering): Released all slaves [ 120.602340][ T7267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.643055][ T7267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.712649][ T7296] netlink: 288 bytes leftover after parsing attributes in process `syz.4.859'. [ 120.724145][ T7298] netlink: 6 bytes leftover after parsing attributes in process `syz.3.860'. [ 120.798861][ T7267] team0: Port device team_slave_0 added [ 120.875365][ T7267] team0: Port device team_slave_1 added [ 120.906637][ T5093] Bluetooth: hci3: command tx timeout [ 120.969525][ T7149] veth0_macvtap: entered promiscuous mode [ 121.053267][ T7267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.066944][ T7267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.104762][ T7267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.123452][ T7267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.130647][ T7267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.158354][ T7267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.263426][ T7149] veth1_macvtap: entered promiscuous mode [ 121.427121][ T61] hsr_slave_0: left promiscuous mode [ 121.435270][ T61] hsr_slave_1: left promiscuous mode [ 121.460928][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.475959][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.496902][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.504361][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.549791][ T61] veth1_macvtap: left promiscuous mode [ 121.555411][ T61] veth0_macvtap: left promiscuous mode [ 121.576105][ T61] veth1_vlan: left promiscuous mode [ 121.581424][ T61] veth0_vlan: left promiscuous mode [ 122.258867][ T61] team0 (unregistering): Port device team_slave_1 removed [ 122.322116][ T61] team0 (unregistering): Port device team_slave_0 removed [ 122.947721][ T7267] hsr_slave_0: entered promiscuous mode [ 122.954413][ T7267] hsr_slave_1: entered promiscuous mode [ 122.968309][ T7267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.982123][ T7267] Cannot create hsr debugfs directory [ 122.986591][ T5093] Bluetooth: hci3: command tx timeout [ 123.014388][ T7333] netlink: 24 bytes leftover after parsing attributes in process `syz.3.872'. [ 123.143144][ T7149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.162127][ T7149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.176380][ T7149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.187801][ T7149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.198059][ T7149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.214734][ T7149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.230227][ T7149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.390321][ T7149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.415388][ T7149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.445109][ T7149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.463437][ T7149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.483359][ T7149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.494199][ T7149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.512834][ T7149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.557323][ T7346] netlink: 'syz.3.877': attribute type 16 has an invalid length. [ 123.598981][ T7346] netlink: 'syz.3.877': attribute type 17 has an invalid length. [ 123.751375][ T7149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.781194][ T7149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.785990][ T7354] netlink: 'syz.4.879': attribute type 1 has an invalid length. [ 123.800647][ T7149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.805889][ T7354] netlink: 224 bytes leftover after parsing attributes in process `syz.4.879'. [ 123.819773][ T7149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.214836][ T945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.234170][ T945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.310804][ T7367] netlink: 'syz.4.885': attribute type 63 has an invalid length. [ 124.390932][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.410581][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.723392][ T7267] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 124.763469][ T7267] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 124.801384][ T7267] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 124.833430][ T7267] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 124.861835][ T7397] netlink: 144 bytes leftover after parsing attributes in process `syz.1.895'. [ 124.888955][ T7397] netlink: 144 bytes leftover after parsing attributes in process `syz.1.895'. [ 124.923802][ T7404] netlink: 'syz.3.898': attribute type 63 has an invalid length. [ 124.947920][ T7397] No such timeout policy "syz0" [ 125.072565][ T5093] Bluetooth: hci3: command tx timeout [ 125.153648][ T7267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.279213][ T7267] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.327176][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.334385][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.361713][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.368958][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.777218][ T7447] netlink: 52 bytes leftover after parsing attributes in process `syz.1.913'. [ 125.805190][ T7447] unsupported nlmsg_type 40 [ 125.973975][ T7267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.118073][ T7267] veth0_vlan: entered promiscuous mode [ 126.169780][ T7267] veth1_vlan: entered promiscuous mode [ 126.288175][ T7267] veth0_macvtap: entered promiscuous mode [ 126.309408][ T7267] veth1_macvtap: entered promiscuous mode [ 126.312423][ T7477] netlink: 248 bytes leftover after parsing attributes in process `syz.0.925'. [ 126.349085][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.379860][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.394300][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.411235][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.425537][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.443835][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.454058][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.472594][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.486790][ T7267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.573896][ T7491] netlink: 144 bytes leftover after parsing attributes in process `syz.0.931'. [ 126.593007][ T7491] netlink: 144 bytes leftover after parsing attributes in process `syz.0.931'. [ 126.611641][ T7495] No such timeout policy "syz0" [ 126.627540][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.643304][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.654414][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.682003][ T7500] netlink: 'syz.4.933': attribute type 1 has an invalid length. [ 126.689982][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.706091][ T7500] netlink: 224 bytes leftover after parsing attributes in process `syz.4.933'. [ 126.722457][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.734444][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.744598][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.755116][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.769708][ T7267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.850229][ T7267] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.867700][ T7267] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.884373][ T7267] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.904724][ T7267] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.115693][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.140645][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.151333][ T5093] Bluetooth: hci3: command tx timeout [ 127.166804][ T7518] netlink: 'syz.0.941': attribute type 2 has an invalid length. [ 127.174635][ T7518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.941'. [ 127.201155][ T7517] netlink: 248 bytes leftover after parsing attributes in process `syz.4.940'. [ 127.255123][ T945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.293466][ T945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.376641][ T7528] netlink: 'syz.3.942': attribute type 23 has an invalid length. [ 127.504917][ T7532] netlink: 92 bytes leftover after parsing attributes in process `syz.4.945'. [ 127.514205][ T7532] netlink: 92 bytes leftover after parsing attributes in process `syz.4.945'. [ 127.563139][ T7532] bond0: entered promiscuous mode [ 127.924410][ T7562] netlink: 248 bytes leftover after parsing attributes in process `syz.4.955'. [ 128.441492][ T7595] No such timeout policy "syz0" [ 128.671701][ T7606] netlink: 'syz.1.969': attribute type 1 has an invalid length. [ 129.357816][ T7645] vlan2: entered promiscuous mode [ 129.579864][ T7665] netlink: 'syz.1.993': attribute type 1 has an invalid length. [ 129.675364][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.382750][ T5104] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 130.394928][ T5104] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 130.404796][ T5104] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 130.414121][ T5104] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 130.425008][ T5104] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 130.433819][ T5104] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 130.798929][ T7700] chnl_net:caif_netlink_parms(): no params data found [ 131.038315][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.113426][ T7700] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.130538][ T7700] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.141251][ T7700] bridge_slave_0: entered allmulticast mode [ 131.153868][ T7700] bridge_slave_0: entered promiscuous mode [ 131.186819][ T7700] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.193998][ T7700] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.247135][ T7700] bridge_slave_1: entered allmulticast mode [ 131.269915][ T7700] bridge_slave_1: entered promiscuous mode [ 131.323072][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.479190][ T7700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.517110][ T7751] __nla_validate_parse: 12 callbacks suppressed [ 131.517128][ T7751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1024'. [ 131.576894][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1024'. [ 131.615589][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.781822][ T7700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.795025][ T5104] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 131.809330][ T5104] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 131.826041][ T5104] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.857766][ T5104] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.874332][ T5104] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 131.892931][ T5104] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 131.960180][ T7757] vlan2: entered promiscuous mode [ 132.012411][ T7700] team0: Port device team_slave_0 added [ 132.035634][ T7700] team0: Port device team_slave_1 added [ 132.188000][ T7700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.211786][ T7700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.249226][ T7700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.271378][ T7769] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1033'. [ 132.293519][ T7700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.311286][ T7700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.340544][ T7779] netlink: 'syz.0.1037': attribute type 3 has an invalid length. [ 132.350098][ T7779] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1037'. [ 132.363286][ T7700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.512532][ T5093] Bluetooth: hci3: command tx timeout [ 132.524250][ T11] bridge_slave_1: left allmulticast mode [ 132.549046][ T11] bridge_slave_1: left promiscuous mode [ 132.554851][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.581824][ T11] bridge_slave_0: left allmulticast mode [ 132.617140][ T11] bridge_slave_0: left promiscuous mode [ 132.622963][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.018905][ T7803] openvswitch: netlink: IP tunnel dst address not specified [ 133.229038][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.946633][ T5093] Bluetooth: hci2: command tx timeout [ 133.955174][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.970190][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.982933][ T11] bond0 (unregistering): Released all slaves [ 134.001214][ T7700] hsr_slave_0: entered promiscuous mode [ 134.008382][ T7700] hsr_slave_1: entered promiscuous mode [ 134.014528][ T7700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.024113][ T7700] Cannot create hsr debugfs directory [ 134.037249][ T7791] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1042'. [ 134.197217][ T7816] Bluetooth: MGMT ver 1.22 [ 134.201750][ T7816] Bluetooth: hci3: service_discovery: too big uuid_count value 12839 [ 134.269239][ T7818] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1054'. [ 134.398245][ T7825] vlan0: entered promiscuous mode [ 134.475087][ T11] hsr_slave_0: left promiscuous mode [ 134.484141][ T11] hsr_slave_1: left promiscuous mode [ 134.500755][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.511322][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.528090][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.535539][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.572194][ T11] veth1_macvtap: left promiscuous mode [ 134.578026][ T11] veth0_macvtap: left promiscuous mode [ 134.583693][ T11] veth1_vlan: left promiscuous mode [ 134.594975][ T5093] Bluetooth: hci3: command tx timeout [ 134.598090][ T11] veth0_vlan: left promiscuous mode [ 135.013468][ T11] team0 (unregistering): Port device team_slave_1 removed [ 135.052686][ T11] team0 (unregistering): Port device team_slave_0 removed [ 135.461421][ T7831] netlink: 'syz.0.1058': attribute type 22 has an invalid length. [ 135.605155][ T7840] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1062'. [ 135.643055][ T7755] chnl_net:caif_netlink_parms(): no params data found [ 135.704155][ T7845] team_slave_0: entered allmulticast mode [ 135.748949][ T7845] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 135.750559][ T8] IPVS: starting estimator thread 0... [ 135.855974][ T7848] IPVS: using max 19 ests per chain, 45600 per kthread [ 135.943650][ T7755] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.951964][ T7755] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.959811][ T7755] bridge_slave_0: entered allmulticast mode [ 135.967525][ T7755] bridge_slave_0: entered promiscuous mode [ 135.998269][ T7755] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.005613][ T7755] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.013025][ T7755] bridge_slave_1: entered allmulticast mode [ 136.020780][ T7755] bridge_slave_1: entered promiscuous mode [ 136.027551][ T5093] Bluetooth: hci2: command tx timeout [ 136.076940][ T7755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.103756][ T7755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.151032][ T7755] team0: Port device team_slave_0 added [ 136.196665][ T7755] team0: Port device team_slave_1 added [ 136.223295][ T1094] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.252624][ T7865] netlink: 'syz.1.1071': attribute type 22 has an invalid length. [ 136.323795][ T1094] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.349135][ T7755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.357106][ T7755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.391435][ T7755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.421727][ T7755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.436309][ T7755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.477015][ T7755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.509759][ T1094] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.553735][ T7700] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 136.569650][ T7873] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1075'. [ 136.600644][ T7700] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 136.625005][ T7871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.648611][ T1094] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.666212][ T5093] Bluetooth: hci3: command tx timeout [ 136.677059][ T4506] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 136.687035][ T5137] IPVS: starting estimator thread 0... [ 136.693379][ T7700] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 136.702139][ T7871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.702812][ T4506] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 136.731732][ T12] wlan1: authenticated [ 136.734983][ T7755] hsr_slave_0: entered promiscuous mode [ 136.754596][ T7755] hsr_slave_1: entered promiscuous mode [ 136.767104][ T35] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 136.774228][ T7755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.785606][ T7871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.792512][ T7877] netlink: 'syz.3.1076': attribute type 11 has an invalid length. [ 136.803439][ T945] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 136.803560][ T7877] netlink: 211132 bytes leftover after parsing attributes in process `syz.3.1076'. [ 136.812090][ T7875] IPVS: using max 19 ests per chain, 45600 per kthread [ 136.845903][ T7755] Cannot create hsr debugfs directory [ 136.864912][ T945] wlan1: associated [ 136.883790][ T7700] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 136.959091][ T7881] Bluetooth: hci3: service_discovery: too big uuid_count value 12839 [ 137.173531][ T1094] bridge_slave_1: left allmulticast mode [ 137.181652][ T1094] bridge_slave_1: left promiscuous mode [ 137.188051][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.204033][ T1094] bridge_slave_0: left allmulticast mode [ 137.210083][ T1094] bridge_slave_0: left promiscuous mode [ 137.216413][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.650559][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.661855][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.673769][ T1094] bond0 (unregistering): Released all slaves [ 137.685680][ T1094] bond1 (unregistering): Released all slaves [ 137.698936][ T7887] netlink: 'syz.0.1081': attribute type 22 has an invalid length. [ 138.011856][ T7700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.108474][ T5093] Bluetooth: hci2: command tx timeout [ 138.127685][ T7700] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.207946][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.215180][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.225120][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.232364][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.304754][ T1094] hsr_slave_0: left promiscuous mode [ 138.313462][ T1094] hsr_slave_1: left promiscuous mode [ 138.327058][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.334778][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.349441][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.361244][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.418371][ T1094] veth1_macvtap: left promiscuous mode [ 138.423959][ T1094] veth0_macvtap: left promiscuous mode [ 138.444953][ T1094] veth1_vlan: left promiscuous mode [ 138.455719][ T1094] veth0_vlan: left promiscuous mode [ 138.755857][ T5093] Bluetooth: hci3: command tx timeout [ 139.354168][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 139.388643][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 139.751040][ T7914] netlink: 'syz.1.1092': attribute type 2 has an invalid length. [ 139.948547][ T7755] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 139.972712][ T7755] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 140.011183][ T7755] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 140.037109][ T7755] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 140.188428][ T5093] Bluetooth: hci2: command tx timeout [ 140.312890][ T7755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.368154][ T7700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.386319][ T7941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.397474][ T7755] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.419493][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.426705][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.451632][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.458762][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.532926][ T7700] veth0_vlan: entered promiscuous mode [ 140.562174][ T7700] veth1_vlan: entered promiscuous mode [ 140.620517][ T7700] veth0_macvtap: entered promiscuous mode [ 140.640503][ T7700] veth1_macvtap: entered promiscuous mode [ 140.677746][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.689326][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.699426][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.710153][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.720071][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.730655][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.743001][ T7700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.769041][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.779932][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.791072][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.801819][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.812005][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.822743][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.836471][ T7700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.853406][ T7700] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.862346][ T7700] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.871608][ T7700] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.880879][ T7700] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.915253][ T7755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.059295][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.084005][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.126954][ T7960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.128882][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.177477][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.218651][ T7967] netlink: 'syz.0.1107': attribute type 2 has an invalid length. [ 141.234819][ T7960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.337364][ T7960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.403146][ T7755] veth0_vlan: entered promiscuous mode [ 141.430858][ T7755] veth1_vlan: entered promiscuous mode [ 141.467767][ T7755] veth0_macvtap: entered promiscuous mode [ 141.481622][ T7755] veth1_macvtap: entered promiscuous mode [ 141.529297][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.552036][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.575400][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.588769][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.604625][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.621482][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.639877][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.658811][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.672891][ T7755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.705093][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.720171][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.730363][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.741715][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.759030][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.774125][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.788363][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.819193][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.835107][ T7755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.890327][ T7755] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.905664][ T7755] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.918626][ T7755] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.930654][ T7755] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.106729][ T7982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.139163][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.158250][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.207237][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.215122][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.500557][ T1094] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.126307][ T7999] tipc: Started in network mode [ 143.131228][ T7999] tipc: Node identity ac1414aa, cluster identity 4711 [ 143.156045][ T7999] tipc: New replicast peer: 0.0.0.0 [ 143.173301][ T7999] tipc: Enabled bearer , priority 10 [ 143.583473][ T5104] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 143.599306][ T5104] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 143.612804][ T5104] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 143.626447][ T5104] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 143.634734][ T5104] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 143.652996][ T5104] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 143.752277][ T1094] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.822803][ T8018] vxcan2: entered allmulticast mode [ 144.124230][ T1094] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.287850][ T8] tipc: Node number set to 2886997162 [ 144.369155][ T1094] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.398371][ T8033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.414915][ T8035] tap0: tun_chr_ioctl cmd 1074025675 [ 144.420770][ T8035] tap0: persist enabled [ 144.440058][ T8040] tap0: tun_chr_ioctl cmd 1074025675 [ 144.460753][ T8040] tap0: persist disabled [ 144.540849][ T8012] chnl_net:caif_netlink_parms(): no params data found [ 144.863061][ T8012] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.872793][ T8012] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.885265][ T8012] bridge_slave_0: entered allmulticast mode [ 144.901515][ T8012] bridge_slave_0: entered promiscuous mode [ 144.932147][ T8057] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 144.935100][ T8012] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.966860][ T8057] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 144.976658][ T8012] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.983932][ T8012] bridge_slave_1: entered allmulticast mode [ 145.008514][ T8012] bridge_slave_1: entered promiscuous mode [ 145.024997][ T8057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.046216][ T1094] bridge_slave_1: left allmulticast mode [ 145.052431][ T1094] bridge_slave_1: left promiscuous mode [ 145.075340][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.092623][ T8058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.097213][ T945] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 145.128184][ T1094] bridge_slave_0: left allmulticast mode [ 145.142544][ T1094] bridge_slave_0: left promiscuous mode [ 145.156775][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.198611][ T8057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.237173][ T945] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 145.355964][ T61] wlan1: authentication with 08:02:11:00:00:00 timed out [ 145.708419][ T5093] Bluetooth: hci3: command tx timeout [ 145.727364][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.750050][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.763847][ T1094] bond0 (unregistering): Released all slaves [ 145.869077][ T8012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.901390][ T8012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.966157][ T8073] netlink: 'syz.0.1140': attribute type 1 has an invalid length. [ 146.078142][ T8012] team0: Port device team_slave_0 added [ 146.135363][ T8012] team0: Port device team_slave_1 added [ 146.328619][ T8012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.343232][ T8012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.398274][ T8012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.497967][ T1094] hsr_slave_0: left promiscuous mode [ 146.516948][ T1094] hsr_slave_1: left promiscuous mode [ 146.545434][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.565919][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.576097][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.583552][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.639480][ T1094] veth1_macvtap: left promiscuous mode [ 146.685252][ T1094] veth0_macvtap: left promiscuous mode [ 146.696025][ T1094] veth1_vlan: left promiscuous mode [ 146.701451][ T1094] veth0_vlan: left promiscuous mode [ 146.930644][ T8100] netlink: 'syz.3.1151': attribute type 1 has an invalid length. [ 147.322806][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 147.360571][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 147.708906][ T8012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.716073][ T8012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.742626][ T8012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.786026][ T5093] Bluetooth: hci3: command tx timeout [ 147.822862][ T8089] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.856310][ T8106] tap0: tun_chr_ioctl cmd 2147767511 [ 147.928093][ T8089] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.971713][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'. [ 147.990427][ T8111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.999867][ T8111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.018638][ T8111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.041716][ T8111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.182023][ T8012] hsr_slave_0: entered promiscuous mode [ 148.192005][ T8012] hsr_slave_1: entered promiscuous mode [ 148.202837][ T8012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.215880][ T8012] Cannot create hsr debugfs directory [ 148.254023][ T8089] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.296454][ T8120] pimreg: entered allmulticast mode [ 148.383339][ T8089] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.429577][ T8117] pimreg: left allmulticast mode [ 148.668560][ T8089] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.682287][ T8089] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.703026][ T8089] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.728668][ T8089] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.914719][ T8012] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 148.951627][ T8012] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 149.005225][ T8012] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 149.038578][ T8012] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 149.144046][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1168'. [ 149.261414][ T8012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.326516][ T8012] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.368488][ T8154] lo speed is unknown, defaulting to 1000 [ 149.374514][ T4506] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.381686][ T4506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.527395][ T4506] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.534573][ T4506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.536288][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1178'. [ 149.575905][ T8154] lo speed is unknown, defaulting to 1000 [ 149.611033][ T8154] lo speed is unknown, defaulting to 1000 [ 149.746308][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1182'. [ 149.818401][ T8176] tap0: tun_chr_ioctl cmd 2147767511 [ 149.869007][ T5093] Bluetooth: hci3: command tx timeout [ 150.057033][ T4506] lo speed is unknown, defaulting to 1000 [ 150.067929][ T8012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.098375][ T8154] infiniband syz0: set active [ 150.131346][ T8154] infiniband syz0: added lo [ 150.157635][ T8154] syz0: rxe_create_cq: returned err = -12 [ 150.179297][ T8154] infiniband syz0: Couldn't create ib_mad CQ [ 150.198445][ T8154] infiniband syz0: Couldn't open port 1 [ 150.232232][ T8012] veth0_vlan: entered promiscuous mode [ 150.283174][ T8012] veth1_vlan: entered promiscuous mode [ 150.324940][ T8154] RDS/IB: syz0: added [ 150.338204][ T8154] smc: adding ib device syz0 with port count 1 [ 150.355335][ T8154] smc: ib device syz0 port 1 has pnetid [ 150.365375][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1192'. [ 150.378034][ T5140] lo speed is unknown, defaulting to 1000 [ 150.390094][ T8012] veth0_macvtap: entered promiscuous mode [ 150.414951][ T8154] lo speed is unknown, defaulting to 1000 [ 150.422501][ T8012] veth1_macvtap: entered promiscuous mode [ 150.502630][ T8012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.534506][ T8012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.545144][ T8012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.556337][ T8012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.567832][ T8012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.585309][ T8012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.600779][ T8012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.632207][ T8012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.656210][ T8012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.676449][ T8012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.698811][ T8012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.726126][ T8012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.762393][ T8012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.803437][ T8012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.812588][ T8208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1196'. [ 150.842047][ T8154] lo speed is unknown, defaulting to 1000 [ 150.866317][ T8012] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.891050][ T8012] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.902912][ T8012] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.919051][ T8012] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.933448][ T8215] tap0: tun_chr_ioctl cmd 2147767511 [ 151.058210][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1198'. [ 151.177444][ T8217] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1199'. [ 151.236971][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.244832][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.302852][ T8154] lo speed is unknown, defaulting to 1000 [ 151.353600][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.388518][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.905874][ T8154] lo speed is unknown, defaulting to 1000 [ 151.971320][ T5093] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.985169][ T5093] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.996452][ T5093] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.005684][ T5093] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.015357][ T5093] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.026091][ T5093] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.194380][ T8237] lo speed is unknown, defaulting to 1000 [ 152.198029][ T8242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1209'. [ 152.274970][ T8244] pimreg: entered allmulticast mode [ 152.319119][ T8243] pimreg: left allmulticast mode [ 152.371331][ T8154] lo speed is unknown, defaulting to 1000 [ 152.655730][ T8237] chnl_net:caif_netlink_parms(): no params data found [ 152.763666][ T8257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1215'. [ 152.878506][ T8237] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.886279][ T8237] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.893477][ T8237] bridge_slave_0: entered allmulticast mode [ 152.901865][ T8237] bridge_slave_0: entered promiscuous mode [ 152.912911][ T8237] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.920696][ T8237] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.930675][ T8237] bridge_slave_1: entered allmulticast mode [ 152.939430][ T8237] bridge_slave_1: entered promiscuous mode [ 152.992025][ T8237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.029699][ T8237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.081135][ T8237] team0: Port device team_slave_0 added [ 153.090420][ T8237] team0: Port device team_slave_1 added [ 153.118781][ T8237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.127849][ T8237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.158868][ T8237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.175208][ T8237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.182908][ T8237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.209430][ T8237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.256578][ T8237] hsr_slave_0: entered promiscuous mode [ 153.262972][ T8237] hsr_slave_1: entered promiscuous mode [ 153.271018][ T8237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.279669][ T8237] Cannot create hsr debugfs directory [ 153.426913][ T8237] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.439581][ T8237] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.522972][ T8237] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.523221][ T8280] __nla_validate_parse: 1 callbacks suppressed [ 153.523234][ T8280] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1220'. [ 153.544454][ T8237] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.576038][ T8280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1220'. [ 153.592262][ T8280] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1220'. [ 153.606447][ T8280] netlink: 'syz.4.1220': attribute type 3 has an invalid length. [ 153.615307][ T8280] netlink: 'syz.4.1220': attribute type 2 has an invalid length. [ 153.646294][ T8280] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1220'. [ 153.687843][ T8237] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.697950][ T8237] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.778607][ T8237] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.794201][ T8237] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.856435][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1227'. [ 153.976458][ T8237] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 153.998715][ T8237] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 154.086676][ T1094] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.106106][ T5093] Bluetooth: hci0: command tx timeout [ 154.185683][ T8237] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 154.213172][ T8237] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 154.400429][ T8237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.450973][ T8237] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.473249][ T4506] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.480459][ T4506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.510049][ T4506] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.517237][ T4506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.579049][ T8237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.703471][ T8237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.746259][ T8237] veth0_vlan: entered promiscuous mode [ 154.759577][ T8237] veth1_vlan: entered promiscuous mode [ 154.823318][ T8237] veth0_macvtap: entered promiscuous mode [ 154.864988][ T8237] veth1_macvtap: entered promiscuous mode [ 154.916962][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.946798][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.975993][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.016435][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.043603][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.065562][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.089056][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.117952][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.153038][ T8237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.215379][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.240200][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.260815][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.284414][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.298918][ T5104] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.309246][ T5104] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.313752][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.327283][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.331707][ T5104] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.337376][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.357308][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.368301][ T5104] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.382498][ T5104] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.390984][ T5104] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.401670][ T8237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.526632][ T1094] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.581110][ T8237] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.609174][ T8237] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.618321][ T8237] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.630849][ T8237] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.657496][ T8331] netlink: 'syz.1.1241': attribute type 10 has an invalid length. [ 155.665346][ T8331] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1241'. [ 155.692335][ T8342] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 155.707383][ T8331] bridge0: port 3(dummy0) entered blocking state [ 155.707492][ T8331] bridge0: port 3(dummy0) entered disabled state [ 155.707654][ T8331] dummy0: entered allmulticast mode [ 155.709281][ T8331] dummy0: entered promiscuous mode [ 155.710136][ T8331] bridge0: port 3(dummy0) entered blocking state [ 155.739699][ T8331] bridge0: port 3(dummy0) entered forwarding state [ 155.814580][ T1094] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.849472][ T8324] lo speed is unknown, defaulting to 1000 [ 155.931273][ T1094] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.061927][ T8351] sit0: entered promiscuous mode [ 156.084424][ T8351] netlink: 'syz.4.1249': attribute type 1 has an invalid length. [ 156.116316][ T8351] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1249'. [ 156.186047][ T5093] Bluetooth: hci0: command tx timeout [ 156.214831][ T945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.260871][ T945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.442158][ T8364] tipc: Started in network mode [ 156.456041][ T8364] tipc: Node identity 065d377f6553, cluster identity 4711 [ 156.479033][ T8364] tipc: Enabled bearer , priority 10 [ 156.503904][ T1094] bridge_slave_1: left allmulticast mode [ 156.515144][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.521904][ T1094] bridge_slave_1: left promiscuous mode [ 156.534537][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.546029][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.565408][ T1094] bridge_slave_0: left allmulticast mode [ 156.582524][ T1094] bridge_slave_0: left promiscuous mode [ 156.602293][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.783348][ T8381] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1260'. [ 157.195731][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.216892][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.231284][ T1094] bond0 (unregistering): Released all slaves [ 157.471419][ T5093] Bluetooth: hci3: command tx timeout [ 157.499541][ T5088] tipc: Node number set to 1661876095 [ 157.810677][ T8399] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 157.842343][ T8324] chnl_net:caif_netlink_parms(): no params data found [ 157.951350][ T8410] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1268'. [ 158.266712][ T5093] Bluetooth: hci0: command tx timeout [ 158.303723][ T8324] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.339999][ T8324] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.363115][ T8324] bridge_slave_0: entered allmulticast mode [ 158.378045][ T8324] bridge_slave_0: entered promiscuous mode [ 158.401366][ T1094] hsr_slave_0: left promiscuous mode [ 158.423316][ T1094] hsr_slave_1: left promiscuous mode [ 158.435948][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.443502][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.456534][ T8433] rdma_rxe: rxe_newlink: failed to add lo [ 158.503431][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.511559][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.527161][ T8437] x_tables: ip_tables: ah match: only valid for protocol 51 [ 158.539179][ T1094] veth1_macvtap: left promiscuous mode [ 158.545389][ T1094] veth0_macvtap: left promiscuous mode [ 158.551794][ T1094] veth1_vlan: left promiscuous mode [ 158.558571][ T1094] veth0_vlan: left promiscuous mode [ 159.080044][ T8450] ebt_among: dst integrity fail: 102 [ 159.083339][ T8448] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1281'. [ 159.301709][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1285'. [ 159.552007][ T5093] Bluetooth: hci3: command tx timeout [ 159.694917][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 159.825845][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 160.254179][ T8324] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.261493][ T8324] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.269784][ T8324] bridge_slave_1: entered allmulticast mode [ 160.282186][ T8324] bridge_slave_1: entered promiscuous mode [ 160.324871][ T8435] tipc: Enabled bearer , priority 10 [ 160.331760][ T8469] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1289'. [ 160.346458][ T5093] Bluetooth: hci0: command tx timeout [ 160.500955][ T8324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.541804][ T8324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.551937][ T8489] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1294'. [ 160.561568][ T8490] ebt_among: dst integrity fail: 102 [ 160.715010][ T8324] team0: Port device team_slave_0 added [ 160.749585][ T8324] team0: Port device team_slave_1 added [ 160.877612][ T8324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.895418][ T8324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.940687][ T8324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.962530][ T8505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1298'. [ 160.980610][ T8324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.989580][ T8324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.024945][ T8324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.060097][ T8507] bridge0: entered promiscuous mode [ 161.165399][ T8506] bridge0: left promiscuous mode [ 161.195163][ T8324] hsr_slave_0: entered promiscuous mode [ 161.207291][ T8324] hsr_slave_1: entered promiscuous mode [ 161.242103][ T8324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.263063][ T8324] Cannot create hsr debugfs directory [ 161.272722][ T8509] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1303'. [ 161.309169][ T8523] syz.3.1305[8523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.309329][ T8523] syz.3.1305[8523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.369187][ T8527] ebt_among: dst integrity fail: 102 [ 161.430686][ T8523] syzkaller0: entered promiscuous mode [ 161.437496][ T8523] syzkaller0: entered allmulticast mode [ 161.443171][ T8525] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 161.626613][ T5093] Bluetooth: hci3: command tx timeout [ 161.852171][ T8545] x_tables: unsorted entry at hook 2 [ 162.986049][ T8525] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1306'. [ 163.481329][ T8573] syz.0.1328 (8573) used greatest stack depth: 17808 bytes left [ 163.569468][ T8580] syz.0.1331[8580] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.569629][ T8580] syz.0.1331[8580] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.705993][ T5093] Bluetooth: hci3: command tx timeout [ 163.713820][ T8587] Bluetooth: MGMT ver 1.22 [ 163.749582][ T8580] syzkaller0: entered promiscuous mode [ 163.755197][ T8580] syzkaller0: entered allmulticast mode [ 165.173923][ T8596] netlink: 'syz.3.1338': attribute type 3 has an invalid length. [ 165.251807][ T8324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 165.288259][ T8324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 165.337550][ T8324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 165.355716][ T8324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 165.594995][ T8324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.665059][ T8324] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.699513][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.706720][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.737493][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.744656][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.929062][ T8631] Bluetooth: MGMT ver 1.22 [ 165.992257][ T8630] syz.1.1354[8630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.992407][ T8630] syz.1.1354[8630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.009903][ T8638] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1356'. [ 166.080886][ T8642] No such timeout policy "syz1" [ 166.147335][ T8630] syzkaller0: entered promiscuous mode [ 166.153115][ T8630] syzkaller0: entered allmulticast mode [ 167.873331][ T8324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.964523][ T8671] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 167.972507][ T8671] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 168.018849][ T8673] sctp: [Deprecated]: syz.1.1370 (pid 8673) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.018849][ T8673] Use struct sctp_sack_info instead [ 168.042176][ T8324] veth0_vlan: entered promiscuous mode [ 168.089613][ T8324] veth1_vlan: entered promiscuous mode [ 168.180430][ T8324] veth0_macvtap: entered promiscuous mode [ 168.189638][ T29] audit: type=1804 audit(1719280227.028:16): pid=8677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1372" name="/root/syzkaller.w6H6XU/139/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 168.233979][ T8324] veth1_macvtap: entered promiscuous mode [ 168.256840][ T8684] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 168.265391][ T8324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.297069][ T8324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.312583][ T8324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.326131][ T8324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.338964][ T8324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.373466][ T8324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.413442][ T8324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.441724][ T8324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.461598][ T8324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.490659][ T8324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.511574][ T8324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.535590][ T8324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.572776][ T8324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.585190][ T8324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.606250][ T8324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.629547][ T8324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.654187][ T8324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.673469][ T8324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.752571][ T8324] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.761879][ T8324] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.771095][ T8324] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.780535][ T8324] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.800234][ T8700] team_slave_0: entered promiscuous mode [ 168.806249][ T8700] team_slave_1: entered promiscuous mode [ 168.812917][ T8700] macsec1: entered promiscuous mode [ 168.818208][ T8700] team0: entered promiscuous mode [ 168.832796][ T8700] macsec1: entered allmulticast mode [ 168.839079][ T8700] team0: entered allmulticast mode [ 168.844525][ T8700] team_slave_0: entered allmulticast mode [ 168.850463][ T8700] team_slave_1: entered allmulticast mode [ 168.860996][ T8700] team0: left allmulticast mode [ 168.867410][ T8700] team_slave_0: left allmulticast mode [ 168.873543][ T8700] team_slave_1: left allmulticast mode [ 168.879360][ T8700] team0: left promiscuous mode [ 168.884564][ T8700] team_slave_0: left promiscuous mode [ 168.890083][ T8700] team_slave_1: left promiscuous mode [ 169.158477][ T8713] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 169.197954][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.222379][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.278192][ T29] audit: type=1804 audit(1719280228.118:17): pid=8723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1394" name="/root/syzkaller.CYOV4t/33/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 169.331531][ T8724] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1392'. [ 169.349653][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.367933][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.639686][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1398'. [ 169.670222][ T8738] openvswitch: netlink: Flow actions attr not present in new flow. [ 169.741715][ T8741] team_slave_0: entered promiscuous mode [ 169.747484][ T8741] team_slave_1: entered promiscuous mode [ 169.753832][ T8741] macsec1: entered promiscuous mode [ 169.759371][ T8741] team0: entered promiscuous mode [ 169.764902][ T8741] macsec1: entered allmulticast mode [ 169.770687][ T8741] team0: entered allmulticast mode [ 169.776012][ T8741] team_slave_0: entered allmulticast mode [ 169.781778][ T8741] team_slave_1: entered allmulticast mode [ 169.792686][ T8741] team0: left allmulticast mode [ 169.801977][ T8741] team_slave_0: left allmulticast mode [ 169.807798][ T8741] team_slave_1: left allmulticast mode [ 169.813328][ T8741] team0: left promiscuous mode [ 169.824276][ T8741] team_slave_0: left promiscuous mode [ 169.829807][ T8741] team_slave_1: left promiscuous mode [ 170.604943][ T8792] team_slave_0: entered promiscuous mode [ 170.610817][ T8792] team_slave_1: entered promiscuous mode [ 170.640979][ T8792] macsec2: entered promiscuous mode [ 170.650276][ T8792] team0: entered promiscuous mode [ 170.666614][ T8792] macsec2: entered allmulticast mode [ 170.672088][ T8792] team0: entered allmulticast mode [ 170.674606][ T8798] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 170.682335][ T8792] team_slave_1: entered allmulticast mode [ 170.683755][ T8798] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 170.716181][ T8792] team0: left allmulticast mode [ 170.721529][ T8792] team_slave_1: left allmulticast mode [ 170.739775][ T8792] team0: left promiscuous mode [ 170.758892][ T8792] team_slave_0: left promiscuous mode [ 170.764463][ T8792] team_slave_1: left promiscuous mode [ 171.370603][ T945] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.538556][ T5104] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 171.547719][ T5104] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 171.556334][ T5104] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 171.567316][ T5104] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 171.575490][ T5104] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 171.583046][ T5104] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 171.613988][ T8826] lo speed is unknown, defaulting to 1000 [ 171.830335][ T8826] chnl_net:caif_netlink_parms(): no params data found [ 171.900165][ T8826] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.907398][ T8826] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.914674][ T8826] bridge_slave_0: entered allmulticast mode [ 171.923133][ T8826] bridge_slave_0: entered promiscuous mode [ 171.933348][ T8826] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.940648][ T8826] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.948162][ T8826] bridge_slave_1: entered allmulticast mode [ 171.954907][ T8826] bridge_slave_1: entered promiscuous mode [ 171.987095][ T8826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.998780][ T8826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.046272][ T945] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.071912][ T8826] team0: Port device team_slave_0 added [ 172.081595][ T8826] team0: Port device team_slave_1 added [ 172.171289][ T945] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.273983][ T8839] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1439'. [ 172.384056][ T945] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.428057][ T8826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.436623][ T8850] sctp: [Deprecated]: syz.1.1444 (pid 8850) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.436623][ T8850] Use struct sctp_sack_info instead [ 172.456174][ T8826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.526028][ T8826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.565968][ T8826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.573037][ T8826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.631814][ T8826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.646436][ T5093] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.666750][ T5093] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 172.675005][ T5093] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 172.695330][ T5093] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 172.704899][ T5093] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 172.714599][ T5093] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 172.823396][ T8826] hsr_slave_0: entered promiscuous mode [ 172.852313][ T8826] hsr_slave_1: entered promiscuous mode [ 172.868974][ T8826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.880655][ T8826] Cannot create hsr debugfs directory [ 172.901623][ T8870] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1450'. [ 172.913478][ T8858] lo speed is unknown, defaulting to 1000 [ 173.124306][ T8852] syzkaller0: entered promiscuous mode [ 173.130622][ T8852] syzkaller0: entered allmulticast mode [ 173.629568][ T5093] Bluetooth: hci2: command tx timeout [ 174.514825][ T8876] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1453'. [ 174.623984][ T945] bridge_slave_1: left allmulticast mode [ 174.634973][ T945] bridge_slave_1: left promiscuous mode [ 174.643727][ T945] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.684891][ T945] bridge_slave_0: left allmulticast mode [ 174.691429][ T945] bridge_slave_0: left promiscuous mode [ 174.702386][ T945] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.746830][ T5093] Bluetooth: hci3: command tx timeout [ 175.006428][ T8905] netlink: 'syz.3.1465': attribute type 3 has an invalid length. [ 175.275323][ T945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.291131][ T945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.302799][ T945] bond0 (unregistering): Released all slaves [ 175.559121][ T8826] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.712378][ T8826] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.716319][ T5093] Bluetooth: hci2: command tx timeout [ 175.904942][ T8826] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.024930][ T8826] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.138390][ T8858] chnl_net:caif_netlink_parms(): no params data found [ 176.306666][ T945] hsr_slave_0: left promiscuous mode [ 176.362311][ T945] hsr_slave_1: left promiscuous mode [ 176.396317][ T945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.410971][ T945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.424929][ T945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.433646][ T945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.490986][ T945] veth1_macvtap: left promiscuous mode [ 176.512101][ T945] veth0_macvtap: left promiscuous mode [ 176.521659][ T945] veth1_vlan: left promiscuous mode [ 176.530517][ T945] veth0_vlan: left promiscuous mode [ 176.836848][ T5093] Bluetooth: hci3: command tx timeout [ 177.338510][ T945] team0 (unregistering): Port device team_slave_1 removed [ 177.384819][ T945] team0 (unregistering): Port device team_slave_0 removed [ 177.787513][ T5093] Bluetooth: hci2: command tx timeout [ 177.934632][ T8958] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 178.378767][ T8826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 178.414813][ T8858] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.436786][ T8858] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.445198][ T8858] bridge_slave_0: entered allmulticast mode [ 178.470168][ T8858] bridge_slave_0: entered promiscuous mode [ 178.488644][ T8826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 178.524650][ T8858] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.543145][ T8858] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.561807][ T8858] bridge_slave_1: entered allmulticast mode [ 178.580960][ T8858] bridge_slave_1: entered promiscuous mode [ 178.624273][ T8826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 178.701047][ T8858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.710899][ T8826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 178.754370][ T8858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.908337][ T5093] Bluetooth: hci3: command tx timeout [ 178.922302][ T8985] syzkaller0: entered promiscuous mode [ 178.938910][ T8985] syzkaller0: entered allmulticast mode [ 178.952542][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1503'. [ 178.980220][ T8858] team0: Port device team_slave_0 added [ 179.016721][ T61] syzkaller0: tun_net_xmit 48 [ 179.867850][ T5093] Bluetooth: hci2: command tx timeout [ 180.540788][ T8858] team0: Port device team_slave_1 added [ 180.639319][ T945] bridge_slave_1: left allmulticast mode [ 180.645014][ T945] bridge_slave_1: left promiscuous mode [ 180.659337][ T945] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.685312][ T945] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.709132][ T9024] netlink: 'syz.0.1514': attribute type 1 has an invalid length. [ 180.719289][ T9024] netlink: 'syz.0.1514': attribute type 2 has an invalid length. [ 180.989791][ T5093] Bluetooth: hci3: command tx timeout [ 181.337589][ T945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.348965][ T945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.362954][ T945] bond0 (unregistering): Released all slaves [ 181.375030][ T8858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.382398][ T8858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.411114][ T8858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.423639][ T9043] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1522'. [ 181.500652][ T8858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.508686][ T8858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.537188][ T8858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.549593][ T945] tipc: Disabling bearer [ 181.562073][ T945] tipc: Disabling bearer [ 181.580114][ T945] tipc: Left network mode [ 181.788273][ T8858] hsr_slave_0: entered promiscuous mode [ 181.809052][ T8858] hsr_slave_1: entered promiscuous mode [ 181.821328][ T8858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.829166][ T8858] Cannot create hsr debugfs directory [ 181.907664][ T9060] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1526'. [ 182.336825][ T945] hsr_slave_0: left promiscuous mode [ 182.343087][ T945] hsr_slave_1: left promiscuous mode [ 182.352789][ T945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.364772][ T945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.373908][ T945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.381717][ T945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.401274][ T945] veth1_macvtap: left promiscuous mode [ 182.406906][ T945] veth0_macvtap: left promiscuous mode [ 182.413686][ T945] veth1_vlan: left promiscuous mode [ 182.419179][ T945] veth0_vlan: left promiscuous mode [ 182.882116][ T945] team0 (unregistering): Port device team_slave_1 removed [ 182.923064][ T945] team0 (unregistering): Port device team_slave_0 removed [ 183.551457][ T8826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.612715][ T8826] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.689061][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.696251][ T5088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.709686][ T5104] Bluetooth: hci3: command 0x0405 tx timeout [ 183.787653][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.795690][ T5088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.055281][ T8858] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 184.067122][ T8858] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 184.087726][ T8858] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 184.112221][ T8858] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 184.195563][ T8826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.320603][ T8858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.398683][ T8858] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.441974][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.449194][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.490582][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.497832][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.620210][ T8858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.658808][ T8826] veth0_vlan: entered promiscuous mode [ 184.692342][ T8826] veth1_vlan: entered promiscuous mode [ 184.760351][ T8826] veth0_macvtap: entered promiscuous mode [ 184.787713][ T8826] veth1_macvtap: entered promiscuous mode [ 184.834285][ T8826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.864977][ T8826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.894141][ T8826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.915831][ T8826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.925954][ T8826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.940616][ T8826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.957662][ T8826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.983752][ T8826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.022106][ T8826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.042504][ T8826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.053559][ T8826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.076986][ T8826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.095936][ T8826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.121249][ T8826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.145958][ T8826] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.166493][ T8826] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.185715][ T8826] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.195344][ T8826] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.293083][ T9149] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1557'. [ 185.363868][ T8858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.374228][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.394424][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.450901][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.459960][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.554415][ T8858] veth0_vlan: entered promiscuous mode [ 185.600209][ T8858] veth1_vlan: entered promiscuous mode [ 185.729696][ T8858] veth0_macvtap: entered promiscuous mode [ 185.762982][ T8858] veth1_macvtap: entered promiscuous mode [ 185.825304][ T9169] macvlan2: entered allmulticast mode [ 185.890461][ T8858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.930254][ T8858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.957026][ T8858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.980456][ T8858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.990785][ T8858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.009032][ T8858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.035851][ T8858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.050478][ T8858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.068504][ T8858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.092759][ T8858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.136801][ T8858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.173250][ T8858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.192819][ T8858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.210090][ T8858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.220799][ T8858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.226276][ T9185] ieee802154 phy1 wpan1: encryption failed: -22 [ 186.231979][ T8858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.253823][ T8858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.273868][ T8858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.302778][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1572'. [ 186.374769][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1575'. [ 186.649497][ T9192] team0 (unregistering): Port device team_slave_0 removed [ 186.685161][ T9192] team0 (unregistering): Port device team_slave_1 removed [ 186.722589][ T9195] netlink: 'syz.4.1576': attribute type 10 has an invalid length. [ 186.745177][ T8858] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.767809][ T8858] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.778975][ T8858] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.793940][ T8858] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.961535][ T9209] netlink: 296 bytes leftover after parsing attributes in process `syz.0.1582'. [ 187.023882][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.046214][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.088220][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.096787][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.909923][ T9260] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1606'. [ 188.087517][ T9275] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1609'. [ 188.150039][ T9277] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1613'. [ 188.383527][ T9293] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1621'. [ 188.547724][ T9308] sctp: [Deprecated]: syz.1.1626 (pid 9308) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.547724][ T9308] Use struct sctp_sack_info instead [ 188.951830][ T35] ================================================================== [ 188.959946][ T35] BUG: KASAN: slab-use-after-free in l2tp_tunnel_del_work+0xe5/0x330 [ 188.968062][ T35] Read of size 8 at addr ffff8880692c98b8 by task kworker/u8:2/35 [ 188.975876][ T35] [ 188.978219][ T35] CPU: 1 PID: 35 Comm: kworker/u8:2 Not tainted 6.10.0-rc4-syzkaller-00891-gbf2468f9afba #0 [ 188.988297][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 188.998363][ T35] Workqueue: l2tp l2tp_tunnel_del_work [ 189.003865][ T35] Call Trace: [ 189.007160][ T35] [ 189.010091][ T35] dump_stack_lvl+0x241/0x360 [ 189.014789][ T35] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.020001][ T35] ? __pfx__printk+0x10/0x10 [ 189.024777][ T35] ? _printk+0xd5/0x120 [ 189.028943][ T35] ? __virt_addr_valid+0x183/0x520 [ 189.034062][ T35] ? __virt_addr_valid+0x183/0x520 [ 189.039188][ T35] print_report+0x169/0x550 [ 189.043717][ T35] ? __virt_addr_valid+0x183/0x520 [ 189.048845][ T35] ? __virt_addr_valid+0x183/0x520 [ 189.053953][ T35] ? __virt_addr_valid+0x44e/0x520 [ 189.059060][ T35] ? __phys_addr+0xba/0x170 [ 189.063557][ T35] ? l2tp_tunnel_del_work+0xe5/0x330 [ 189.068871][ T35] kasan_report+0x143/0x180 [ 189.073388][ T35] ? l2tp_tunnel_del_work+0xe5/0x330 [ 189.078669][ T35] l2tp_tunnel_del_work+0xe5/0x330 [ 189.083771][ T35] ? process_scheduled_works+0x945/0x1830 [ 189.089478][ T35] process_scheduled_works+0xa2c/0x1830 [ 189.095018][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 189.100984][ T35] ? assign_work+0x364/0x3d0 [ 189.105565][ T35] worker_thread+0x86d/0xd70 [ 189.110147][ T35] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 189.116033][ T35] ? __kthread_parkme+0x169/0x1d0 [ 189.121043][ T35] ? __pfx_worker_thread+0x10/0x10 [ 189.126142][ T35] kthread+0x2f0/0x390 [ 189.130200][ T35] ? __pfx_worker_thread+0x10/0x10 [ 189.135293][ T35] ? __pfx_kthread+0x10/0x10 [ 189.139869][ T35] ret_from_fork+0x4b/0x80 [ 189.144273][ T35] ? __pfx_kthread+0x10/0x10 [ 189.148855][ T35] ret_from_fork_asm+0x1a/0x30 [ 189.153785][ T35] [ 189.156790][ T35] [ 189.159095][ T35] Allocated by task 9323: [ 189.163402][ T35] kasan_save_track+0x3f/0x80 [ 189.168063][ T35] __kasan_kmalloc+0x98/0xb0 [ 189.172638][ T35] __kmalloc_noprof+0x1f9/0x400 [ 189.177473][ T35] l2tp_session_create+0x3b/0xc20 [ 189.182483][ T35] pppol2tp_connect+0xca3/0x17a0 [ 189.187407][ T35] __sys_connect+0x2df/0x310 [ 189.191981][ T35] __x64_sys_connect+0x7a/0x90 [ 189.196730][ T35] do_syscall_64+0xf3/0x230 [ 189.201220][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.207102][ T35] [ 189.209412][ T35] Freed by task 9320: [ 189.213372][ T35] kasan_save_track+0x3f/0x80 [ 189.218035][ T35] kasan_save_free_info+0x40/0x50 [ 189.223039][ T35] poison_slab_object+0xe0/0x150 [ 189.227965][ T35] __kasan_slab_free+0x37/0x60 [ 189.232716][ T35] kfree+0x149/0x360 [ 189.236600][ T35] __sk_destruct+0x58/0x5f0 [ 189.241088][ T35] rcu_core+0xafd/0x1830 [ 189.245318][ T35] handle_softirqs+0x2c4/0x970 [ 189.250063][ T35] __irq_exit_rcu+0xf4/0x1c0 [ 189.254636][ T35] irq_exit_rcu+0x9/0x30 [ 189.258861][ T35] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 189.264476][ T35] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 189.270498][ T35] [ 189.272819][ T35] Last potentially related work creation: [ 189.278533][ T35] kasan_save_stack+0x3f/0x60 [ 189.283209][ T35] __kasan_record_aux_stack+0xac/0xc0 [ 189.288566][ T35] call_rcu+0x167/0xa70 [ 189.292730][ T35] pppol2tp_release+0x24b/0x350 [ 189.297589][ T35] sock_close+0xbc/0x240 [ 189.301831][ T35] __fput+0x406/0x8b0 [ 189.305806][ T35] task_work_run+0x24f/0x310 [ 189.310394][ T35] syscall_exit_to_user_mode+0x168/0x370 [ 189.316022][ T35] do_syscall_64+0x100/0x230 [ 189.320600][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.326486][ T35] [ 189.328794][ T35] The buggy address belongs to the object at ffff8880692c9800 [ 189.328794][ T35] which belongs to the cache kmalloc-1k of size 1024 [ 189.342840][ T35] The buggy address is located 184 bytes inside of [ 189.342840][ T35] freed 1024-byte region [ffff8880692c9800, ffff8880692c9c00) [ 189.356792][ T35] [ 189.359101][ T35] The buggy address belongs to the physical page: [ 189.365500][ T35] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x692c8 [ 189.374242][ T35] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 189.382726][ T35] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 189.390269][ T35] page_type: 0xffffefff(slab) [ 189.394931][ T35] raw: 00fff00000000040 ffff888015041dc0 dead000000000100 dead000000000122 [ 189.403497][ T35] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 189.412065][ T35] head: 00fff00000000040 ffff888015041dc0 dead000000000100 dead000000000122 [ 189.420720][ T35] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 189.429394][ T35] head: 00fff00000000003 ffffea0001a4b201 ffffffffffffffff 0000000000000000 [ 189.438044][ T35] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 189.446692][ T35] page dumped because: kasan: bad access detected [ 189.453097][ T35] page_owner tracks the page as allocated [ 189.458796][ T35] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5096, tgid 5096 (syz-executor), ts 59411812137, free_ts 15190770137 [ 189.478065][ T35] post_alloc_hook+0x1f3/0x230 [ 189.482839][ T35] get_page_from_freelist+0x2e43/0x2f00 [ 189.488376][ T35] __alloc_pages_noprof+0x256/0x6c0 [ 189.493568][ T35] alloc_slab_page+0x5f/0x120 [ 189.498230][ T35] allocate_slab+0x5a/0x2f0 [ 189.502725][ T35] ___slab_alloc+0xcd1/0x14b0 [ 189.507385][ T35] __slab_alloc+0x58/0xa0 [ 189.511703][ T35] kmalloc_trace_noprof+0x1d5/0x2c0 [ 189.516885][ T35] batadv_hard_if_event+0xe71/0x1620 [ 189.522156][ T35] notifier_call_chain+0x19f/0x3e0 [ 189.527247][ T35] register_netdevice+0x1570/0x19e0 [ 189.532518][ T35] nsim_create+0x647/0x890 [ 189.536927][ T35] __nsim_dev_port_add+0x6c0/0xae0 [ 189.542026][ T35] nsim_dev_port_add_all+0x33/0xf0 [ 189.547129][ T35] nsim_drv_probe+0x85f/0xb80 [ 189.551806][ T35] really_probe+0x2b8/0xad0 [ 189.556303][ T35] page last free pid 1 tgid 1 stack trace: [ 189.562091][ T35] free_unref_page+0xd22/0xea0 [ 189.566844][ T35] free_contig_range+0x9e/0x160 [ 189.571678][ T35] destroy_args+0x8a/0x890 [ 189.576087][ T35] debug_vm_pgtable+0x4be/0x550 [ 189.580921][ T35] do_one_initcall+0x248/0x880 [ 189.585674][ T35] do_initcall_level+0x157/0x210 [ 189.590599][ T35] do_initcalls+0x3f/0x80 [ 189.594913][ T35] kernel_init_freeable+0x435/0x5d0 [ 189.600097][ T35] kernel_init+0x1d/0x2b0 [ 189.604415][ T35] ret_from_fork+0x4b/0x80 [ 189.608821][ T35] ret_from_fork_asm+0x1a/0x30 [ 189.613575][ T35] [ 189.615881][ T35] Memory state around the buggy address: [ 189.621491][ T35] ffff8880692c9780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 189.629555][ T35] ffff8880692c9800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.637604][ T35] >ffff8880692c9880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.645663][ T35] ^ [ 189.651532][ T35] ffff8880692c9900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.659662][ T35] ffff8880692c9980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.667703][ T35] ================================================================== [ 189.675858][ T35] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 189.683228][ T35] CPU: 1 PID: 35 Comm: kworker/u8:2 Not tainted 6.10.0-rc4-syzkaller-00891-gbf2468f9afba #0 [ 189.693311][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 189.703409][ T35] Workqueue: l2tp l2tp_tunnel_del_work [ 189.708895][ T35] Call Trace: [ 189.712171][ T35] [ 189.715093][ T35] dump_stack_lvl+0x241/0x360 [ 189.719768][ T35] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.724955][ T35] ? __pfx__printk+0x10/0x10 [ 189.729538][ T35] ? vscnprintf+0x5d/0x90 [ 189.733857][ T35] panic+0x349/0x860 [ 189.737739][ T35] ? check_panic_on_warn+0x21/0xb0 [ 189.742837][ T35] ? __pfx_panic+0x10/0x10 [ 189.747245][ T35] ? mark_lock+0x9a/0x350 [ 189.751563][ T35] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 189.757449][ T35] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 189.763328][ T35] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 189.769642][ T35] ? print_report+0x502/0x550 [ 189.774313][ T35] check_panic_on_warn+0x86/0xb0 [ 189.779239][ T35] ? l2tp_tunnel_del_work+0xe5/0x330 [ 189.784518][ T35] end_report+0x77/0x160 [ 189.788758][ T35] kasan_report+0x154/0x180 [ 189.793258][ T35] ? l2tp_tunnel_del_work+0xe5/0x330 [ 189.798539][ T35] l2tp_tunnel_del_work+0xe5/0x330 [ 189.803644][ T35] ? process_scheduled_works+0x945/0x1830 [ 189.809346][ T35] process_scheduled_works+0xa2c/0x1830 [ 189.814885][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 189.820849][ T35] ? assign_work+0x364/0x3d0 [ 189.825424][ T35] worker_thread+0x86d/0xd70 [ 189.830006][ T35] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 189.835894][ T35] ? __kthread_parkme+0x169/0x1d0 [ 189.840913][ T35] ? __pfx_worker_thread+0x10/0x10 [ 189.846009][ T35] kthread+0x2f0/0x390 [ 189.850067][ T35] ? __pfx_worker_thread+0x10/0x10 [ 189.855162][ T35] ? __pfx_kthread+0x10/0x10 [ 189.859741][ T35] ret_from_fork+0x4b/0x80 [ 189.864169][ T35] ? __pfx_kthread+0x10/0x10 [ 189.868776][ T35] ret_from_fork_asm+0x1a/0x30 [ 189.873551][ T35] [ 189.876773][ T35] Kernel Offset: disabled [ 189.881088][ T35] Rebooting in 86400 seconds..