last executing test programs: 8.372976792s ago: executing program 3 (id=1482): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000001440)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0}, 0x0) 8.174383358s ago: executing program 3 (id=1489): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000400)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xd}, 0xe) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000006c0)="19d90500163fd9fc9e34bec39d59a79c7379b08f04be639387d6a598014f48f017682dde475a15641ba3d11061d467f5f7585d301c15f5e4b2f601e5a79c92253a945968bbeee5d6e4b3c5ca892a97ae09b355d4f19bcd034dc95358f5dfc9a01940225dc5e345f5c86940c3b6b66a6f473586874743207a5e72d4d6a9b16c297f362daf5168a81cce5e9e0b8c51f6f603edc27b074f676203be48d9292c8407ce873db0b27e704019231d464592bed412f8dfabe03fa2236596218498ed37c48f09833f", 0xc4}, {&(0x7f0000000080)="be32ad77fde55af4aaa9b957b812a18c279d81a2f15428a4ebac8025ebd7d24f44ae7c35c128588a56bc51417ad26458fc357bfe52edc42e199e59294b440cf11cc05ccb25ca7ee1b7c32100e01d58b5f147a097d2559e25d05691fb6b054c8d1f0e335655751345dcd2c42fdccd4e", 0x6f}, {&(0x7f0000000840)="f4872c011ddf7fa17da5af6803d7186208acb34e3976733e3ae1cbc72b70e78a6eba976c8f24429519be0ba5b7e0cca904f39c69b8128f1ca1eaa5707a584308630c53cc5db018ca85070950479a77fc490aefdeaf991f3cef1d880e041c7f15e7ba9f0577a5693714986e33106a49f58d0c9f5a14", 0x75}, {&(0x7f0000000440)="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", 0x217}, {&(0x7f00000009c0)="de73e7d819b21c026df3a1681ffbc58f03eee61e6eb5a0aea4507c1408c0668b401cc85e39bc3b01f8fe4061734cafbb491b74c3ee76c1a9da", 0x39}], 0x5}}], 0x1, 0x0) 8.040782782s ago: executing program 3 (id=1493): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000040)={&(0x7f0000000080)={0x1d, r1, 0x10000000}, 0x10, &(0x7f0000000240)={&(0x7f0000000180)={0x4, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0xfc, 0x0, 0x4, 0x0, "63bad47c2fbf2948"}}, 0x48}}, 0x0) 7.895002217s ago: executing program 3 (id=1497): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 7.815852944s ago: executing program 3 (id=1501): r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) 7.508172662s ago: executing program 3 (id=1508): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x7000000, &(0x7f0000000180)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {0x3}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000040), 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000080)}, 0x20) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 7.109234935s ago: executing program 1 (id=1515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r1, 0x5, 0x0, 0x0, {{0x36}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 6.947836598s ago: executing program 1 (id=1519): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000020000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000000)=0x56, 0x4) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 6.239844957s ago: executing program 1 (id=1532): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r0}, &(0x7f00000014c0), &(0x7f0000001500)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe80, 0x4) sendto$packet(r2, &(0x7f0000000180)="3f030e00030000002b001e0089e9aaa911e0c2310f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3", 0x37, 0x0, &(0x7f0000000240)={0x11, 0x0, r3, 0x4, 0x0, 0x6, @random="3690f13519fc"}, 0x14) 6.035903828s ago: executing program 1 (id=1535): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 5.931730728s ago: executing program 1 (id=1537): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0xff, 0x0, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003130000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000002c0)}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x33, 0x33, 0x5, [@datasec={0xd, 0x1, 0x0, 0xf, 0x3, [{0x2, 0xf3, 0xb7}], 'LNd'}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0xc87c}}]}, {0x0, [0x30, 0x0, 0x61]}}, &(0x7f0000000500)=""/105, 0x51, 0x69, 0x1, 0x2}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%pB \x00'}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x2, 0x400, 0x0, 0x39, 0x10c0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000740)='./file0\x00', 0x0, 0x8}, 0x18) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r9, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x3f}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r10}, &(0x7f0000000800), &(0x7f0000000840), 0x2}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)='%-5lx \x00'}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xc, 0x1, 0x9, 0x8, 0x1500, 0x1, 0x36850, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x1e, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x1, 0x9, 0x6, 0x5, 0x100, 0x4}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0xfff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x81}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000005c0)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000009c0)=[r5, r6, r7, r8, r9, r10, r11, r12], &(0x7f0000000a00)=[{0x2, 0x5, 0xa, 0x1}, {0x5, 0x2, 0xf, 0x6}, {0x4, 0x2, 0xb, 0xb}, {0x5, 0x5, 0xe, 0x4}, {0x1, 0x5, 0xc}], 0x10, 0x3}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={0xffffffffffffffff, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x54, &(0x7f0000000c40)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000c80), &(0x7f0000000cc0), 0x8, 0xab, 0x8, 0x8, &(0x7f0000000d00)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0x1}, 0x48) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x3f, 0x4}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, &(0x7f0000000100)=""/58, &(0x7f0000000140), &(0x7f0000000200), 0x4, r13}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r15) sendmsg$inet(r14, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 5.253672663s ago: executing program 1 (id=1548): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 1.436592841s ago: executing program 2 (id=1614): close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40001) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000001001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='ext4_mb_release_inode_pa\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) 1.371767215s ago: executing program 0 (id=1615): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/29, 0x1d}}], 0x1, 0x12141, 0x0) 1.317997137s ago: executing program 0 (id=1617): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {0x12}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0x6, 0x8001}]}, 0x34}}, 0x0) 1.198968732s ago: executing program 2 (id=1619): socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x8, 0x8}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 1.122115558s ago: executing program 0 (id=1620): r0 = socket(0x200000000000011, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000900)={&(0x7f0000000700)=@isdn={0x22, 0x0, 0x0, 0x9}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000780)="e0", 0x1}], 0x1, &(0x7f0000000a40)=[{0x10}], 0x6}, 0x0) 1.04769088s ago: executing program 2 (id=1622): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000000)='jbd2_handle_stats\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) 990.362367ms ago: executing program 0 (id=1623): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, &(0x7f0000000080)=0x7000000, 0x4) 917.432107ms ago: executing program 2 (id=1625): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}}, 0x0) 506.584468ms ago: executing program 4 (id=1626): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmmsg$unix(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="ff", 0x32880}], 0x5, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}}], 0x1, 0x0) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000100000883795c04a31ba377a1b2cc32b38d37400"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 456.512647ms ago: executing program 0 (id=1627): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000003c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r0, &(0x7f0000000300), 0x18, 0x0, 0x0, 0xfffffffffffffdfd) 410.649711ms ago: executing program 4 (id=1628): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x14}, 0x14}}, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xe4, 0x0, &(0x7f00000000c0)) 324.479289ms ago: executing program 4 (id=1629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 323.224013ms ago: executing program 0 (id=1630): getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000580)) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x1c) socket$l2tp(0x2, 0x2, 0x73) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={0x0, 0xffffffffffffffa3}, 0x1, 0x0, 0x0, 0x880}, 0x4004001) socket(0x9, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)={0x20, r2, 0x515, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x0) 276.716057ms ago: executing program 2 (id=1631): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r1, 0x111, 0x4, 0x0, 0x20001f00) 245.141352ms ago: executing program 4 (id=1632): r0 = socket(0x1d, 0x2, 0x6) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x4, r0, &(0x7f0000000080)={0x10000000}) 191.104283ms ago: executing program 4 (id=1633): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x7d, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x18) 127.173266ms ago: executing program 4 (id=1634): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}]}, 0x60}}, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 0s ago: executing program 2 (id=1635): r0 = socket(0x80000000000000a, 0x2, 0x0) close(r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bridge\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x50}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. [ 49.636500][ T5078] cgroup: Unknown subsys name 'net' [ 49.771919][ T5078] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.136444][ T5078] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.707035][ T5091] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.718044][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.727731][ T5094] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.741670][ T5095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.750760][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.758365][ T5095] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.766495][ T5098] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.774088][ T5098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.782226][ T5098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.782872][ T5101] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 51.789642][ T5098] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.798296][ T5101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.805560][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.818361][ T5098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 51.821008][ T5104] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.826214][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.836539][ T5104] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.842543][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.846745][ T5104] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 51.861449][ T4491] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 51.861884][ T5104] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 51.869005][ T5098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.876043][ T5104] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.894056][ T5094] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 51.895299][ T5098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 51.902156][ T5094] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 51.908694][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.917093][ T5094] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 51.929791][ T5094] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.938275][ T5094] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 52.416076][ T5089] chnl_net:caif_netlink_parms(): no params data found [ 52.528058][ T5099] chnl_net:caif_netlink_parms(): no params data found [ 52.666244][ T5102] chnl_net:caif_netlink_parms(): no params data found [ 52.677547][ T5087] chnl_net:caif_netlink_parms(): no params data found [ 52.697953][ T5088] chnl_net:caif_netlink_parms(): no params data found [ 52.723089][ T5089] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.731031][ T5089] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.738895][ T5089] bridge_slave_0: entered allmulticast mode [ 52.746107][ T5089] bridge_slave_0: entered promiscuous mode [ 52.792896][ T5089] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.800771][ T5089] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.810638][ T5089] bridge_slave_1: entered allmulticast mode [ 52.818260][ T5089] bridge_slave_1: entered promiscuous mode [ 52.896934][ T5089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.909622][ T5089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.919116][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.926752][ T5099] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.934045][ T5099] bridge_slave_0: entered allmulticast mode [ 52.941057][ T5099] bridge_slave_0: entered promiscuous mode [ 52.949643][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.956969][ T5099] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.964384][ T5099] bridge_slave_1: entered allmulticast mode [ 52.971260][ T5099] bridge_slave_1: entered promiscuous mode [ 53.074953][ T5089] team0: Port device team_slave_0 added [ 53.083393][ T5099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.098288][ T5099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.131426][ T5089] team0: Port device team_slave_1 added [ 53.168025][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.175820][ T5102] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.182968][ T5102] bridge_slave_0: entered allmulticast mode [ 53.190409][ T5102] bridge_slave_0: entered promiscuous mode [ 53.198545][ T5102] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.205785][ T5102] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.212923][ T5102] bridge_slave_1: entered allmulticast mode [ 53.219923][ T5102] bridge_slave_1: entered promiscuous mode [ 53.237921][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.245296][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.252420][ T5088] bridge_slave_0: entered allmulticast mode [ 53.259451][ T5088] bridge_slave_0: entered promiscuous mode [ 53.277749][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.285310][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.311482][ T5089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.353149][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.360833][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.368669][ T5088] bridge_slave_1: entered allmulticast mode [ 53.375631][ T5088] bridge_slave_1: entered promiscuous mode [ 53.389573][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.396651][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.422779][ T5089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.443769][ T5099] team0: Port device team_slave_0 added [ 53.450228][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.457477][ T5087] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.464879][ T5087] bridge_slave_0: entered allmulticast mode [ 53.471671][ T5087] bridge_slave_0: entered promiscuous mode [ 53.521239][ T5099] team0: Port device team_slave_1 added [ 53.537735][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.546134][ T5087] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.553330][ T5087] bridge_slave_1: entered allmulticast mode [ 53.561262][ T5087] bridge_slave_1: entered promiscuous mode [ 53.570332][ T5102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.582661][ T5102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.593978][ T5088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.620822][ T5089] hsr_slave_0: entered promiscuous mode [ 53.632318][ T5089] hsr_slave_1: entered promiscuous mode [ 53.673429][ T5088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.691627][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.699101][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.725478][ T5099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.738514][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.745731][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.771804][ T5099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.829614][ T5087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.841328][ T5087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.857700][ T5102] team0: Port device team_slave_0 added [ 53.865502][ T5094] Bluetooth: hci1: command tx timeout [ 53.890087][ T5088] team0: Port device team_slave_0 added [ 53.899281][ T5088] team0: Port device team_slave_1 added [ 53.939783][ T5102] team0: Port device team_slave_1 added [ 53.944425][ T5094] Bluetooth: hci0: command tx timeout [ 53.985314][ T5087] team0: Port device team_slave_0 added [ 54.017005][ T5099] hsr_slave_0: entered promiscuous mode [ 54.023946][ T5099] hsr_slave_1: entered promiscuous mode [ 54.029831][ T5094] Bluetooth: hci3: command tx timeout [ 54.036370][ T5105] Bluetooth: hci2: command tx timeout [ 54.036388][ T5106] Bluetooth: hci4: command tx timeout [ 54.048324][ T5099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.056704][ T5099] Cannot create hsr debugfs directory [ 54.063016][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.071003][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.097338][ T5088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.110400][ T5087] team0: Port device team_slave_1 added [ 54.156213][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.163224][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.189723][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.212229][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.219238][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.245705][ T5102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.258312][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.265369][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.291442][ T5102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.318302][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.325599][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.352104][ T5087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.411661][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.418739][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.444822][ T5087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.538024][ T5088] hsr_slave_0: entered promiscuous mode [ 54.545435][ T5088] hsr_slave_1: entered promiscuous mode [ 54.551460][ T5088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.559132][ T5088] Cannot create hsr debugfs directory [ 54.597308][ T5102] hsr_slave_0: entered promiscuous mode [ 54.603916][ T5102] hsr_slave_1: entered promiscuous mode [ 54.610625][ T5102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.618584][ T5102] Cannot create hsr debugfs directory [ 54.643125][ T5087] hsr_slave_0: entered promiscuous mode [ 54.649473][ T5087] hsr_slave_1: entered promiscuous mode [ 54.656224][ T5087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.663787][ T5087] Cannot create hsr debugfs directory [ 54.846184][ T5089] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.889561][ T5089] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.899834][ T5089] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.939718][ T5089] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.112660][ T5099] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.124698][ T5099] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.135347][ T5099] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.168357][ T5099] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.207989][ T5088] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.218741][ T5088] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.231473][ T5088] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.250094][ T5088] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.365052][ T5087] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.382386][ T5087] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.394058][ T5087] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.416683][ T5089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.435270][ T5087] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.509341][ T5089] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.572127][ T5102] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.583395][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.590867][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.623369][ T5102] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.640923][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.648053][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.667074][ T5102] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.679263][ T5102] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.770599][ T5099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.825268][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.842628][ T5087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.867045][ T5088] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.892579][ T5099] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.931783][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.938984][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.953848][ T5105] Bluetooth: hci1: command tx timeout [ 56.001450][ T5087] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.015903][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.023013][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.031072][ T5105] Bluetooth: hci0: command tx timeout [ 56.043353][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.050524][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.094046][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.101248][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.112799][ T5105] Bluetooth: hci3: command tx timeout [ 56.112849][ T5106] Bluetooth: hci2: command tx timeout [ 56.121850][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.124413][ T5094] Bluetooth: hci4: command tx timeout [ 56.131175][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.148067][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.155223][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.261505][ T5102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.293848][ T5088] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.304623][ T5088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.353839][ T5089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.378160][ T5102] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.455757][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.462924][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.497446][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.504697][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.669569][ T5102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.701327][ T5089] veth0_vlan: entered promiscuous mode [ 56.725539][ T5089] veth1_vlan: entered promiscuous mode [ 56.823329][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.847332][ T5087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.865998][ T5099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.882069][ T5089] veth0_macvtap: entered promiscuous mode [ 56.923706][ T5089] veth1_macvtap: entered promiscuous mode [ 57.060351][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.073728][ T5099] veth0_vlan: entered promiscuous mode [ 57.094028][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.125835][ T5099] veth1_vlan: entered promiscuous mode [ 57.150771][ T5089] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.160242][ T5089] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.170656][ T5089] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.179852][ T5089] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.211017][ T5088] veth0_vlan: entered promiscuous mode [ 57.244073][ T5102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.287451][ T5099] veth0_macvtap: entered promiscuous mode [ 57.322420][ T5088] veth1_vlan: entered promiscuous mode [ 57.365237][ T5099] veth1_macvtap: entered promiscuous mode [ 57.381668][ T5087] veth0_vlan: entered promiscuous mode [ 57.411771][ T5087] veth1_vlan: entered promiscuous mode [ 57.437249][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.453655][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.455363][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.474059][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.486416][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.523507][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.536203][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.549482][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.570043][ T5102] veth0_vlan: entered promiscuous mode [ 57.583884][ T5088] veth0_macvtap: entered promiscuous mode [ 57.595090][ T5088] veth1_macvtap: entered promiscuous mode [ 57.606529][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.615642][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.629265][ T5102] veth1_vlan: entered promiscuous mode [ 57.638763][ T5099] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.653015][ T5099] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.661894][ T5099] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.670660][ T5099] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.688669][ T5087] veth0_macvtap: entered promiscuous mode [ 57.729110][ T5087] veth1_macvtap: entered promiscuous mode [ 57.749159][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.762833][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.773170][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.783687][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.804689][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.861079][ T5102] veth0_macvtap: entered promiscuous mode [ 57.876174][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.897265][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.908131][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.919010][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.931321][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.981858][ T5172] netlink: 'syz.0.1': attribute type 3 has an invalid length. [ 57.986081][ T5088] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.998847][ T5172] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 57.999752][ T5088] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.012618][ T5172] netlink: 'syz.0.1': attribute type 7 has an invalid length. [ 58.016269][ T5088] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.023308][ T5172] netlink: 'syz.0.1': attribute type 8 has an invalid length. [ 58.031647][ T5088] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.032098][ T5094] Bluetooth: hci1: command tx timeout [ 58.058393][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.062994][ T5172] netlink: 'syz.0.1': attribute type 7 has an invalid length. [ 58.074911][ T5172] netlink: 198200 bytes leftover after parsing attributes in process `syz.0.1'. [ 58.079496][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.085897][ T5102] veth1_macvtap: entered promiscuous mode [ 58.101484][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.113640][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.124048][ T5094] Bluetooth: hci0: command tx timeout [ 58.133113][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.149838][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.160221][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.171782][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.184144][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.192629][ T5094] Bluetooth: hci4: command tx timeout [ 58.199466][ T5106] Bluetooth: hci2: command tx timeout [ 58.199477][ T5105] Bluetooth: hci3: command tx timeout [ 58.243054][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.274626][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.284670][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.295498][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.305491][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.316010][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.329291][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.391741][ T5087] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.406519][ T5087] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.422302][ T5087] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.432235][ T5087] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.444175][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.452305][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.453548][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.470143][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.481944][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.492956][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.503186][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.516706][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.528396][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.558263][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.570568][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.574153][ T5182] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 58.639628][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.668838][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.671352][ T5184] nft_compat: unsupported protocol 0 [ 58.685036][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.695982][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.706766][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.736576][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.747745][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.758638][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.770470][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.823354][ T5102] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.844382][ T5102] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.853122][ T5102] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.887350][ T5102] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.971692][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.985929][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.020461][ T5188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'. [ 59.078637][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.099362][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.171872][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.221469][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.277877][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.302702][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.436786][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.443639][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.453695][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.459010][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.106128][ T5105] Bluetooth: hci1: command tx timeout [ 60.156022][ T5223] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 60.185782][ T5105] Bluetooth: hci0: command tx timeout [ 60.266230][ T5105] Bluetooth: hci2: command tx timeout [ 60.271771][ T5105] Bluetooth: hci4: command tx timeout [ 60.277873][ T5105] Bluetooth: hci3: command tx timeout [ 60.762629][ T5262] netlink: 32 bytes leftover after parsing attributes in process `syz.2.38'. [ 61.024145][ T5271] netlink: 164 bytes leftover after parsing attributes in process `syz.2.45'. [ 61.046816][ T5271] netlink: 'syz.2.45': attribute type 1 has an invalid length. [ 61.064999][ T5271] netlink: 104 bytes leftover after parsing attributes in process `syz.2.45'. [ 61.275470][ T5283] netlink: 6204 bytes leftover after parsing attributes in process `syz.0.49'. [ 61.291513][ T5288] netlink: 'syz.3.51': attribute type 21 has an invalid length. [ 61.309007][ T5283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.49'. [ 61.323042][ T5288] netlink: 132 bytes leftover after parsing attributes in process `syz.3.51'. [ 61.338299][ T5283] netlink: 6204 bytes leftover after parsing attributes in process `syz.0.49'. [ 61.415839][ T5290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'. [ 61.810806][ T5310] netlink: 'syz.4.61': attribute type 1 has an invalid length. [ 63.107325][ T5348] sch_fq: defrate 0 ignored. [ 63.206767][ T5403] __nla_validate_parse: 4 callbacks suppressed [ 63.206786][ T5403] netlink: 164 bytes leftover after parsing attributes in process `syz.2.75'. [ 63.222832][ T5403] netlink: 'syz.2.75': attribute type 1 has an invalid length. [ 63.254508][ T5403] netlink: 104 bytes leftover after parsing attributes in process `syz.2.75'. [ 63.300220][ T5409] Zero length message leads to an empty skb [ 63.638774][ T5425] netlink: 'syz.0.82': attribute type 1 has an invalid length. [ 63.684420][ T5425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'. [ 63.770197][ T5433] netlink: 'syz.1.86': attribute type 1 has an invalid length. [ 64.348690][ T5463] warning: `syz.0.96' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 64.412297][ T5464] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.526888][ T5471] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 64.533844][ T5471] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 64.553868][ T5464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'. [ 64.698798][ T5464] dummy0: entered promiscuous mode [ 65.349431][ T5515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.117'. [ 65.542044][ T5524] netlink: 16 bytes leftover after parsing attributes in process `syz.2.123'. [ 65.563368][ T5524] netlink: 16 bytes leftover after parsing attributes in process `syz.2.123'. [ 65.664570][ T5527] netlink: 164 bytes leftover after parsing attributes in process `syz.0.124'. [ 65.706509][ T5527] netlink: 'syz.0.124': attribute type 1 has an invalid length. [ 65.734872][ T5527] netlink: 104 bytes leftover after parsing attributes in process `syz.0.124'. [ 65.993911][ T5548] syz.2.131 uses obsolete (PF_INET,SOCK_PACKET) [ 66.414394][ T5570] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 66.414461][ T5569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.138'. [ 66.445827][ T5570] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 66.773800][ T5580] netlink: zone id is out of range [ 66.972623][ T5583] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.194720][ T5583] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.302874][ T5374] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.442120][ T5583] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.551368][ T5374] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.635084][ T5583] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.790218][ T5607] tipc: Started in network mode [ 67.795299][ T5607] tipc: Node identity , cluster identity 4711 [ 67.804364][ T5607] tipc: Failed to set node id, please configure manually [ 67.818344][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.827911][ T5607] tipc: Enabling of bearer rejected, failed to enable media [ 67.836373][ T5094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.851042][ T5094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.910186][ T5094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.926077][ T5094] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.933594][ T5094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.946507][ T5374] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.114144][ T5374] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.243185][ T5583] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.278350][ T5583] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.325325][ T5583] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.419532][ T5583] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.591175][ T5374] bridge_slave_1: left allmulticast mode [ 68.605342][ T5636] xt_ecn: cannot match TCP bits for non-tcp packets [ 68.638148][ T5374] bridge_slave_1: left promiscuous mode [ 68.645439][ T5374] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.733844][ T5374] bridge_slave_0: left allmulticast mode [ 68.763780][ T5374] bridge_slave_0: left promiscuous mode [ 68.776569][ T5374] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.382824][ T5374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.400044][ T5374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.413001][ T5374] bond0 (unregistering): Released all slaves [ 69.758817][ T5615] chnl_net:caif_netlink_parms(): no params data found [ 69.915060][ T5671] __nla_validate_parse: 1 callbacks suppressed [ 69.915080][ T5671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'. [ 69.952178][ T5671] dummy0: entered promiscuous mode [ 70.032895][ T5094] Bluetooth: hci0: command tx timeout [ 70.070014][ T5674] netlink: 56 bytes leftover after parsing attributes in process `syz.1.178'. [ 70.499995][ T5702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.182'. [ 70.786441][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.793610][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.832650][ T5615] bridge_slave_0: entered allmulticast mode [ 70.871788][ T5615] bridge_slave_0: entered promiscuous mode [ 70.906206][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.923229][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.945451][ T5615] bridge_slave_1: entered allmulticast mode [ 70.979229][ T5615] bridge_slave_1: entered promiscuous mode [ 71.047222][ T5374] hsr_slave_0: left promiscuous mode [ 71.122088][ T5374] hsr_slave_1: left promiscuous mode [ 71.149676][ T5374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.184553][ T5374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.209497][ T5374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.240440][ T5374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.263461][ T5737] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.342244][ T5374] veth1_macvtap: left promiscuous mode [ 71.355495][ T5374] veth0_macvtap: left promiscuous mode [ 71.361967][ T5374] veth1_vlan: left promiscuous mode [ 71.367637][ T5374] veth0_vlan: left promiscuous mode [ 71.721189][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.728548][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.899973][ T5374] team0 (unregistering): Port device team_slave_1 removed [ 71.942468][ T5374] team0 (unregistering): Port device team_slave_0 removed [ 72.108312][ T5094] Bluetooth: hci0: command tx timeout [ 72.436387][ T5726] netlink: 24 bytes leftover after parsing attributes in process `syz.4.191'. [ 72.459797][ T5738] netlink: 'syz.0.195': attribute type 1 has an invalid length. [ 72.613117][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.673680][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.771059][ T5752] tipc: Started in network mode [ 72.782224][ T5752] tipc: Node identity , cluster identity 4711 [ 72.796167][ T5752] tipc: Failed to set node id, please configure manually [ 72.810814][ T5752] tipc: Enabling of bearer rejected, failed to enable media [ 72.837515][ T5615] team0: Port device team_slave_0 added [ 72.853574][ T5754] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 72.880409][ T5615] team0: Port device team_slave_1 added [ 72.958983][ T5767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.206'. [ 73.063855][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.074379][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.154060][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.201772][ T5776] xt_ecn: cannot match TCP bits for non-tcp packets [ 73.255010][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.269092][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.315275][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.351642][ T5785] bridge0: port 3(team0) entered blocking state [ 73.361820][ T5785] bridge0: port 3(team0) entered disabled state [ 73.382006][ T5785] team0: entered allmulticast mode [ 73.399196][ T5785] team_slave_0: entered allmulticast mode [ 73.415064][ T5785] team_slave_1: entered allmulticast mode [ 73.440885][ T5785] team0: entered promiscuous mode [ 73.450973][ T5785] team_slave_0: entered promiscuous mode [ 73.470365][ T5785] team_slave_1: entered promiscuous mode [ 73.496906][ T5785] bridge0: port 3(team0) entered blocking state [ 73.503592][ T5785] bridge0: port 3(team0) entered forwarding state [ 73.658218][ T5796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.215'. [ 73.735830][ T5615] hsr_slave_0: entered promiscuous mode [ 73.757391][ T5615] hsr_slave_1: entered promiscuous mode [ 73.785828][ T5615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.812819][ T5615] Cannot create hsr debugfs directory [ 73.825722][ T5796] netlink: 40 bytes leftover after parsing attributes in process `syz.3.215'. [ 73.870810][ T5804] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 74.121959][ T5813] Bluetooth: MGMT ver 1.22 [ 74.184419][ T5094] Bluetooth: hci0: command tx timeout [ 74.400242][ T5828] netlink: 'syz.1.225': attribute type 1 has an invalid length. [ 74.438247][ T5828] netlink: 636 bytes leftover after parsing attributes in process `syz.1.225'. [ 74.531868][ T5834] ip6gretap0: entered promiscuous mode [ 74.583013][ T5834] batadv_slave_0: entered promiscuous mode [ 74.640614][ T5842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.229'. [ 74.671663][ T5842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.229'. [ 74.836543][ T5853] netlink: 'syz.0.231': attribute type 5 has an invalid length. [ 75.022902][ T5867] netlink: 'syz.0.238': attribute type 1 has an invalid length. [ 75.047119][ T5867] netlink: 636 bytes leftover after parsing attributes in process `syz.0.238'. [ 75.066431][ T5869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'. [ 75.083657][ T5869] netlink: 'syz.1.237': attribute type 14 has an invalid length. [ 75.108867][ T5869] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.118155][ T5869] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.127130][ T5869] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.136218][ T5869] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.148670][ T5869] vxlan0: entered promiscuous mode [ 75.173878][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.213827][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.249011][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.280017][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.374034][ T5879] ip6gretap0: entered promiscuous mode [ 75.381712][ T5881] netlink: 16 bytes leftover after parsing attributes in process `syz.3.243'. [ 75.392770][ T5879] batadv_slave_0: entered promiscuous mode [ 75.401284][ T5879] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 75.410014][ T5879] Cannot create hsr debugfs directory [ 75.425646][ T5881] netlink: 16 bytes leftover after parsing attributes in process `syz.3.243'. [ 75.535033][ T5885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.245'. [ 75.556734][ T5885] netlink: 40 bytes leftover after parsing attributes in process `syz.0.245'. [ 75.615777][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.678918][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.709438][ T5196] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.716631][ T5196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.778768][ T5196] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.785996][ T5196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.886269][ T5615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.264609][ T5094] Bluetooth: hci0: command tx timeout [ 76.340637][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.443269][ T5615] veth0_vlan: entered promiscuous mode [ 76.487295][ T5615] veth1_vlan: entered promiscuous mode [ 76.579699][ T5615] veth0_macvtap: entered promiscuous mode [ 76.632837][ T5615] veth1_macvtap: entered promiscuous mode [ 76.658487][ T5938] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 76.696164][ T5615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.728126][ T5615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.772193][ T5615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.802667][ T5615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.815746][ T5615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.828024][ T45] cfg80211: failed to load regulatory.db [ 76.833928][ T5615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.845989][ T5615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.862809][ T5615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.877749][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.897675][ T5958] bridge0: port 3(team0) entered blocking state [ 76.913371][ T5958] bridge0: port 3(team0) entered disabled state [ 76.924458][ T5958] team0: entered allmulticast mode [ 76.929622][ T5958] team_slave_0: entered allmulticast mode [ 76.943132][ T5958] team_slave_1: entered allmulticast mode [ 76.951607][ T5958] team0: entered promiscuous mode [ 76.968549][ T5958] team_slave_0: entered promiscuous mode [ 76.977189][ T5958] team_slave_1: entered promiscuous mode [ 76.991413][ T5958] bridge0: port 3(team0) entered blocking state [ 76.998528][ T5958] bridge0: port 3(team0) entered forwarding state [ 77.037166][ T5615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.090901][ T5615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.112299][ T5615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.126187][ T5615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.136564][ T5615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.148427][ T5615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.169679][ T5615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.182805][ T5615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.195138][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.226540][ T5615] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.253789][ T5615] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.271398][ T5615] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.280682][ T5615] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.455531][ T5374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.485586][ T5374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.588902][ T5379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.619480][ T5379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.824886][ T5105] Bluetooth: hci0: command 0x0405 tx timeout [ 80.026651][ T6158] netlink: 248 bytes leftover after parsing attributes in process `syz.1.351'. [ 80.905467][ T5105] Bluetooth: hci0: command 0x0405 tx timeout [ 80.919925][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.378'. [ 81.248287][ T6247] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 81.601434][ T6264] netlink: 248 bytes leftover after parsing attributes in process `syz.3.397'. [ 83.106645][ T6361] netlink: 'syz.3.442': attribute type 10 has an invalid length. [ 83.153496][ T6361] batman_adv: batadv0: Adding interface: team0 [ 83.164578][ T6361] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.211145][ T6361] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 83.277509][ T6374] xt_recent: Unsupported userspace flags (00000076) [ 83.513329][ T6385] hsr0: entered promiscuous mode [ 84.058144][ T6388] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 84.322429][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888029d33400: rx timeout, send abort [ 84.347635][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807cc40400: rx timeout, send abort [ 84.648846][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.471'. [ 84.740852][ T6435] hsr0: entered promiscuous mode [ 84.803457][ T6439] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 84.832943][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888029d33400: abort rx timeout. Force session deactivation [ 84.856049][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807cc40400: abort rx timeout. Force session deactivation [ 85.183587][ T6458] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 85.252123][ T6462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.489'. [ 85.262312][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.489'. [ 86.588470][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'. [ 86.612795][ T6549] netlink: 830 bytes leftover after parsing attributes in process `syz.1.528'. [ 87.019330][ T6566] af_packet: tpacket_rcv: packet too big, clamped from 59650 to 3952. macoff=96 [ 87.320915][ T6596] IPv6: Can't replace route, no match found [ 87.591978][ T6610] netlink: 201400 bytes leftover after parsing attributes in process `syz.0.555'. [ 87.723160][ T6614] netlink: 'syz.1.556': attribute type 1 has an invalid length. [ 87.731275][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.556'. [ 87.764260][ T6620] tap0: tun_chr_ioctl cmd 2147767506 [ 87.906445][ T6632] syzkaller1: entered promiscuous mode [ 87.923949][ T6632] syzkaller1: entered allmulticast mode [ 88.276937][ T6653] tap0: tun_chr_ioctl cmd 2147767506 [ 88.964631][ T6700] tap0: tun_chr_ioctl cmd 2147767506 [ 89.201691][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.599'. [ 89.262064][ T6727] nftables ruleset with unbound chain [ 89.364054][ T6733] netlink: 201400 bytes leftover after parsing attributes in process `syz.2.607'. [ 90.172868][ T6782] tap0: tun_chr_ioctl cmd 2147767506 [ 90.523175][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.635'. [ 91.397419][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.658'. [ 91.418545][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.658'. [ 91.432945][ T6857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.442575][ T6857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.455819][ T6857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.472294][ T6857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.553094][ T6865] macsec2: entered promiscuous mode [ 91.563486][ T6865] macvlan1: entered promiscuous mode [ 91.570147][ T6865] macsec2: entered allmulticast mode [ 91.580546][ T6865] macvlan1: entered allmulticast mode [ 91.587265][ T6865] veth1_vlan: entered allmulticast mode [ 91.600882][ T6865] macvlan1: left allmulticast mode [ 91.606176][ T6865] veth1_vlan: left allmulticast mode [ 91.611480][ T6865] macvlan1: left promiscuous mode [ 91.649497][ T6867] netlink: 'syz.3.664': attribute type 26 has an invalid length. [ 91.793660][ T6873] netlink: 40 bytes leftover after parsing attributes in process `syz.2.665'. [ 91.849666][ T6873] netlink: 'syz.2.665': attribute type 5 has an invalid length. [ 91.900984][ T6873] : entered promiscuous mode [ 91.948568][ T6884] netlink: 116 bytes leftover after parsing attributes in process `syz.2.665'. [ 91.969686][ T6884] bridge_slave_1: left allmulticast mode [ 91.999596][ T6884] bridge_slave_1: left promiscuous mode [ 92.049288][ T6884] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.106718][ T6897] netlink: 188 bytes leftover after parsing attributes in process `syz.3.674'. [ 92.118973][ T6897] netlink: 'syz.3.674': attribute type 1 has an invalid length. [ 92.127112][ T6897] netlink: 20 bytes leftover after parsing attributes in process `syz.3.674'. [ 92.181487][ T6884] bridge_slave_0: left allmulticast mode [ 92.199937][ T6884] bridge_slave_0: left promiscuous mode [ 92.210237][ T6884] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.242553][ T5097] IPVS: starting estimator thread 0... [ 92.256103][ T6902] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 92.333158][ T6899] netlink: 48 bytes leftover after parsing attributes in process `syz.1.677'. [ 92.342577][ T6903] IPVS: using max 33 ests per chain, 79200 per kthread [ 92.344505][ T6899] netlink: 48 bytes leftover after parsing attributes in process `syz.1.677'. [ 92.364369][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.677'. [ 92.520889][ T6910] macsec2: entered promiscuous mode [ 92.525913][ T6912] trusted_key: syz.2.681 sent an empty control message without MSG_MORE. [ 92.529414][ T6910] macvlan1: entered promiscuous mode [ 92.540991][ T6910] macsec2: entered allmulticast mode [ 92.546945][ T6910] macvlan1: entered allmulticast mode [ 92.552417][ T6910] veth1_vlan: entered allmulticast mode [ 92.560569][ T6910] macvlan1: left allmulticast mode [ 92.567808][ T6910] veth1_vlan: left allmulticast mode [ 92.573147][ T6910] macvlan1: left promiscuous mode [ 92.679767][ T6914] tipc: Invalid UDP bearer configuration [ 92.679801][ T6914] tipc: Enabling of bearer rejected, failed to enable media [ 92.805766][ T6919] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.365078][ T6951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.698'. [ 93.407477][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.698'. [ 93.454928][ T6951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.484452][ T6951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.505396][ T6951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.533022][ T6951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.677413][ T6968] netlink: 48 bytes leftover after parsing attributes in process `syz.4.706'. [ 93.708744][ T8] IPVS: starting estimator thread 0... [ 93.716966][ T6968] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 93.814626][ T6973] IPVS: using max 23 ests per chain, 55200 per kthread [ 94.380933][ T5105] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.395580][ T5105] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.403601][ T5105] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.445686][ T5105] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.453477][ T5105] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 94.462527][ T5105] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.615735][ T7018] netlink: 'syz.2.727': attribute type 1 has an invalid length. [ 94.658263][ T5379] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.791368][ T5379] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.911123][ T5379] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.050233][ T5379] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.169675][ T7005] chnl_net:caif_netlink_parms(): no params data found [ 95.432481][ T5379] team0: left allmulticast mode [ 95.441680][ T5379] team_slave_0: left allmulticast mode [ 95.447773][ T5379] team_slave_1: left allmulticast mode [ 95.453367][ T5379] team0: left promiscuous mode [ 95.459156][ T5379] team_slave_0: left promiscuous mode [ 95.465160][ T5379] team_slave_1: left promiscuous mode [ 95.471627][ T5379] bridge0: port 3(team0) entered disabled state [ 95.489805][ T5379] bridge_slave_1: left allmulticast mode [ 95.495994][ T5379] bridge_slave_1: left promiscuous mode [ 95.501852][ T5379] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.550594][ T5379] bridge_slave_0: left allmulticast mode [ 95.561267][ T5379] bridge_slave_0: left promiscuous mode [ 95.568002][ T5379] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.804336][ T5379] ip6gretap0 (unregistering): left promiscuous mode [ 96.182339][ T5379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.215124][ T5379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.236766][ T5379] bond0 (unregistering): Released all slaves [ 96.473774][ T7005] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.502195][ T7005] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.518473][ T5094] Bluetooth: hci1: command tx timeout [ 96.529159][ T7005] bridge_slave_0: entered allmulticast mode [ 96.549137][ T7005] bridge_slave_0: entered promiscuous mode [ 96.646693][ T7005] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.653872][ T7005] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.670745][ T7005] bridge_slave_1: entered allmulticast mode [ 96.679174][ T7005] bridge_slave_1: entered promiscuous mode [ 96.797825][ T5379] batadv_slave_0: left promiscuous mode [ 96.866471][ T5379] hsr_slave_0: left promiscuous mode [ 96.878693][ T5379] hsr_slave_1: left promiscuous mode [ 96.897591][ T5379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.921779][ T5379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.963125][ T5379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.986281][ T5379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.068409][ T7163] __nla_validate_parse: 7 callbacks suppressed [ 97.068429][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.779'. [ 97.070036][ T5379] veth1_macvtap: left promiscuous mode [ 97.131018][ T5379] veth0_macvtap: left promiscuous mode [ 97.146782][ T5379] veth1_vlan: left promiscuous mode [ 97.152209][ T5379] veth0_vlan: left promiscuous mode [ 97.752113][ T5379] team0 (unregistering): Port device team_slave_1 removed [ 97.784157][ T5379] team0 (unregistering): Port device team_slave_0 removed [ 98.103503][ T7005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.119640][ T7167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.786'. [ 98.326343][ T7005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.446032][ T7197] netlink: 24 bytes leftover after parsing attributes in process `syz.2.799'. [ 98.509771][ T7005] team0: Port device team_slave_0 added [ 98.547251][ T7005] team0: Port device team_slave_1 added [ 98.589243][ T5094] Bluetooth: hci1: command tx timeout [ 98.714613][ T7005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.731528][ T7005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.769694][ T7005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.796828][ T7005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.803811][ T7005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.863337][ T7005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.882811][ T5379] IPVS: stop unused estimator thread 0... [ 98.902359][ T7216] netlink: 'syz.0.808': attribute type 3 has an invalid length. [ 98.936378][ T7216] netlink: 'syz.0.808': attribute type 3 has an invalid length. [ 99.055425][ T7231] netlink: 24 bytes leftover after parsing attributes in process `syz.2.813'. [ 99.086454][ T7005] hsr_slave_0: entered promiscuous mode [ 99.108930][ T7005] hsr_slave_1: entered promiscuous mode [ 99.125900][ T7005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.133496][ T7005] Cannot create hsr debugfs directory [ 99.636637][ T7272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.830'. [ 99.969291][ T7290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.838'. [ 100.091510][ T7292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.840'. [ 100.151217][ T7298] netlink: 'syz.3.842': attribute type 33 has an invalid length. [ 100.169374][ T7298] netlink: 152 bytes leftover after parsing attributes in process `syz.3.842'. [ 100.348927][ T5105] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.359591][ T5105] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.368334][ T5105] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.376684][ T5105] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.384474][ T5105] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 100.388493][ T7005] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.391939][ T5105] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.468697][ T7300] netlink: 24 bytes leftover after parsing attributes in process `syz.3.843'. [ 100.483407][ T7005] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.546277][ T7005] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.587114][ T7005] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.664637][ T5105] Bluetooth: hci1: command tx timeout [ 100.719209][ T2449] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.749727][ T2449] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.898757][ T2449] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.913993][ T2449] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.059580][ T2449] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.094334][ T2449] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.134100][ T7338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.857'. [ 101.172787][ T2449] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.193975][ T2449] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.484118][ T7301] chnl_net:caif_netlink_parms(): no params data found [ 101.614563][ T7005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.679620][ T2449] bridge_slave_1: left allmulticast mode [ 101.689671][ T2449] bridge_slave_1: left promiscuous mode [ 101.698116][ T2449] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.710783][ T2449] bridge_slave_0: left allmulticast mode [ 101.721101][ T2449] bridge_slave_0: left promiscuous mode [ 101.730735][ T2449] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.180024][ T2449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.198155][ T2449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.209830][ T2449] bond0 (unregistering): Released all slaves [ 102.223439][ T2449] bond1 (unregistering): Released all slaves [ 102.266728][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.868'. [ 102.358791][ T7373] team1: Mode "" not found [ 102.432892][ T7301] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.442046][ T5105] Bluetooth: hci4: command tx timeout [ 102.451922][ T7301] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.462647][ T7301] bridge_slave_0: entered allmulticast mode [ 102.472723][ T7301] bridge_slave_0: entered promiscuous mode [ 102.506289][ T7005] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.558325][ T7301] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.575058][ T7301] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.596930][ T7301] bridge_slave_1: entered allmulticast mode [ 102.608349][ T7301] bridge_slave_1: entered promiscuous mode [ 102.645966][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.653165][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.745109][ T5105] Bluetooth: hci1: command tx timeout [ 102.813002][ T7403] netlink: 'syz.0.877': attribute type 1 has an invalid length. [ 102.824479][ T7403] netlink: 9388 bytes leftover after parsing attributes in process `syz.0.877'. [ 102.855740][ T7301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.896545][ T2449] hsr_slave_0: left promiscuous mode [ 102.917523][ T2449] hsr_slave_1: left promiscuous mode [ 102.956337][ T2449] dummy0: left promiscuous mode [ 102.961618][ T2449] veth1_macvtap: left promiscuous mode [ 102.970891][ T2449] veth0_macvtap: left promiscuous mode [ 102.978043][ T2449] veth1_vlan: left promiscuous mode [ 102.983387][ T2449] veth0_vlan: left promiscuous mode [ 103.503607][ T2449] team0 (unregistering): Port device team_slave_1 removed [ 103.543059][ T2449] team0 (unregistering): Port device team_slave_0 removed [ 103.792597][ T7301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.833909][ T7412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.879'. [ 103.856233][ T7417] team1: Mode "" not found [ 103.904720][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.911897][ T5097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.992617][ T7301] team0: Port device team_slave_0 added [ 104.020251][ T7301] team0: Port device team_slave_1 added [ 104.056040][ T7443] netlink: 100 bytes leftover after parsing attributes in process `syz.3.892'. [ 104.105952][ T7443] pim6reg: entered allmulticast mode [ 104.183616][ T7443] vxcan1: entered allmulticast mode [ 104.207373][ T7301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.239972][ T7301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.294441][ T7301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.315241][ T7301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.327661][ T7301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.377942][ T7301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.504617][ T5105] Bluetooth: hci4: command tx timeout [ 104.512938][ T7301] hsr_slave_0: entered promiscuous mode [ 104.535702][ T7301] hsr_slave_1: entered promiscuous mode [ 104.564317][ T7301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.572129][ T7301] Cannot create hsr debugfs directory [ 104.652940][ T2449] IPVS: stop unused estimator thread 0... [ 105.286229][ T7005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.717897][ T7301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.777561][ T7301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.841945][ T7301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.909743][ T7301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.244540][ T7005] veth0_vlan: entered promiscuous mode [ 106.251366][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.270358][ T5094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.286175][ T5094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.310701][ T5094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.312901][ T7005] veth1_vlan: entered promiscuous mode [ 106.331741][ T5094] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 106.339817][ T5094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.382493][ T7005] veth0_macvtap: entered promiscuous mode [ 106.402304][ T7005] veth1_macvtap: entered promiscuous mode [ 106.438397][ T7301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.477423][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.492411][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.503285][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.516841][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.531525][ T7005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.558970][ T7301] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.584523][ T5105] Bluetooth: hci4: command tx timeout [ 106.592556][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.623430][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.634390][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.645059][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.645995][ T7522] x_tables: unsorted entry at hook 1 [ 106.657423][ T7005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.706997][ T7005] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.715934][ T7005] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.729653][ T7005] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.739982][ T7005] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.813897][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.821142][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.857363][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.864851][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.255937][ T5394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.263775][ T5394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.273288][ T7546] x_tables: unsorted entry at hook 1 [ 107.301174][ T7508] chnl_net:caif_netlink_parms(): no params data found [ 107.388036][ T2449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.404629][ T2449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.522098][ T7551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.932'. [ 107.645374][ T7508] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.653707][ T7508] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.672731][ T7508] bridge_slave_0: entered allmulticast mode [ 107.688200][ T7508] bridge_slave_0: entered promiscuous mode [ 107.711184][ T7562] batadv0: entered promiscuous mode [ 107.722163][ T7562] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 107.739770][ T7562] batadv0: left promiscuous mode [ 107.791285][ T7508] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.803010][ T7508] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.811698][ T7508] bridge_slave_1: entered allmulticast mode [ 107.821785][ T7508] bridge_slave_1: entered promiscuous mode [ 107.903018][ T7508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.917557][ T7301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.942537][ T7508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.945925][ T7573] x_tables: unsorted entry at hook 1 [ 108.041368][ T7508] team0: Port device team_slave_0 added [ 108.069012][ T7508] team0: Port device team_slave_1 added [ 108.143273][ T7581] ebt_limit: overflow, try lower: 0/0 [ 108.151560][ T7508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.164436][ T7508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.221231][ T7508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.256906][ T7585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.943'. [ 108.274867][ T7508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.282009][ T7508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.313532][ T7508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.424759][ T5105] Bluetooth: hci0: command tx timeout [ 108.486276][ T7508] hsr_slave_0: entered promiscuous mode [ 108.511643][ T29] audit: type=1804 audit(1719383128.671:2): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.947" name="/root/syzkaller.YOxc3U/226/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 108.511737][ T7508] hsr_slave_1: entered promiscuous mode [ 108.562461][ T7508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.580343][ T7508] Cannot create hsr debugfs directory [ 108.598070][ T7301] veth0_vlan: entered promiscuous mode [ 108.665759][ T5105] Bluetooth: hci4: command tx timeout [ 108.686610][ T7301] veth1_vlan: entered promiscuous mode [ 108.933866][ T7508] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.980712][ T7301] veth0_macvtap: entered promiscuous mode [ 109.096118][ T7508] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.150443][ T7301] veth1_macvtap: entered promiscuous mode [ 109.212984][ T7508] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.506403][ T7508] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.554164][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.594898][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 109.596363][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.620398][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.637012][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.648179][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.659121][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.677878][ T7301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.732788][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.750397][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.762003][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.776920][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.788143][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.802269][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.813953][ T7301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.846850][ T7301] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.855841][ T7637] netlink: 112 bytes leftover after parsing attributes in process `syz.4.962'. [ 109.867567][ T7301] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.880806][ T7301] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.889608][ T7301] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.047379][ T7508] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 110.098932][ T7508] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 110.112944][ T7508] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 110.151057][ T7508] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 110.183349][ T2449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.205899][ T2449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.309114][ T2449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.320794][ T2449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.486327][ T7508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.508520][ T5105] Bluetooth: hci0: command tx timeout [ 110.573506][ T7508] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.613395][ T7672] netlink: 52 bytes leftover after parsing attributes in process `syz.1.975'. [ 110.688637][ T5196] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.695873][ T5196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.761202][ T5196] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.768407][ T5196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.341938][ T5094] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.353274][ T5094] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.356704][ T7508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.372581][ T5094] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.382665][ T5094] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.398769][ T5094] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 111.422159][ T5094] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.463816][ T7508] veth0_vlan: entered promiscuous mode [ 111.518497][ T7508] veth1_vlan: entered promiscuous mode [ 111.631027][ T7508] veth0_macvtap: entered promiscuous mode [ 111.658794][ T7508] veth1_macvtap: entered promiscuous mode [ 111.794458][ T7508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.809255][ T7508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.821668][ T7508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.841796][ T7508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.852545][ T7508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.865081][ T7508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.879382][ T7508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.892072][ T7508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.907154][ T7508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.943149][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 111.958295][ T7508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.977684][ T7508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.988808][ T7508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.000566][ T7508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.010754][ T7508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.029304][ T7508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.039439][ T7508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.061737][ T7508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.093676][ T7508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.210284][ T7508] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.221175][ T7508] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.230307][ T7508] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.239276][ T7508] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.444844][ T7705] chnl_net:caif_netlink_parms(): no params data found [ 112.541797][ T5381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.566100][ T5381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.584596][ T5105] Bluetooth: hci0: command tx timeout [ 112.723969][ T5381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.732872][ T7705] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.743735][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.750893][ T5381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.759782][ T7705] bridge_slave_0: entered allmulticast mode [ 112.767671][ T7705] bridge_slave_0: entered promiscuous mode [ 112.794654][ T7705] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.804470][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.812828][ T7705] bridge_slave_1: entered allmulticast mode [ 112.831142][ T7705] bridge_slave_1: entered promiscuous mode [ 112.888433][ T7705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.906201][ T7705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.002596][ T7705] team0: Port device team_slave_0 added [ 113.028051][ T7705] team0: Port device team_slave_1 added [ 113.119632][ T7705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.126728][ T7705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.164721][ T7705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.193057][ T7705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.205624][ T7705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.244090][ T7705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.418338][ T29] audit: type=1800 audit(1719383133.571:3): pid=7796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1020" name="memory.events" dev="sda1" ino=1953 res=0 errno=0 [ 113.466943][ T5105] Bluetooth: hci2: command tx timeout [ 113.473215][ T7705] hsr_slave_0: entered promiscuous mode [ 113.509726][ T29] audit: type=1804 audit(1719383133.611:4): pid=7796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1020" name="/root/syzkaller.Q6GVRr/36/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 113.545960][ T29] audit: type=1804 audit(1719383133.711:5): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1020" name="/root/syzkaller.Q6GVRr/36/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 113.585366][ T7705] hsr_slave_1: entered promiscuous mode [ 113.598034][ T7705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.614271][ T7705] Cannot create hsr debugfs directory [ 113.855061][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1027'. [ 114.036818][ T7705] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.187575][ T7705] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.300075][ T7705] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.476725][ T7705] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.499308][ T7837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1039'. [ 114.665221][ T5105] Bluetooth: hci0: command tx timeout [ 114.776787][ T7705] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.828499][ T7705] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.864378][ T7705] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.883481][ T7705] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.136291][ T7868] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1053'. [ 115.297309][ T7705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.347765][ T7705] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.430456][ T7879] dummy0: entered promiscuous mode [ 115.462477][ T7879] dummy0: left promiscuous mode [ 115.536960][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.544154][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.551915][ T5105] Bluetooth: hci2: command tx timeout [ 115.600960][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.608132][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.335099][ T7705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.478625][ T7705] veth0_vlan: entered promiscuous mode [ 116.496974][ T7705] veth1_vlan: entered promiscuous mode [ 116.577017][ T7705] veth0_macvtap: entered promiscuous mode [ 116.605470][ T7705] veth1_macvtap: entered promiscuous mode [ 116.615889][ T7929] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1074'. [ 116.644068][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.676608][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.698988][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.723106][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.745778][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.781674][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.813705][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.834180][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.859708][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.884337][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.911629][ T7705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.072801][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.096343][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.114734][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.126422][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.136380][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.150470][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.162861][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.173531][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.191044][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.201795][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.222494][ T7705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.233897][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1082'. [ 117.277868][ T7954] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.287081][ T7954] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.295917][ T7954] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.305138][ T7954] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.329414][ T7954] vxlan0: entered promiscuous mode [ 117.360612][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1087'. [ 117.404872][ T7705] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.426775][ T7705] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.442041][ T7705] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.451031][ T7705] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.604179][ T5381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.620999][ T5381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.636670][ T5105] Bluetooth: hci2: command tx timeout [ 117.666757][ T5394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.674933][ T5394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.020208][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1099'. [ 118.195151][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1105'. [ 118.328850][ T8007] xt_CT: No such helper "syz1" [ 118.606860][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'. [ 118.730112][ T8037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.940343][ T8054] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1129'. [ 119.082707][ T8062] dummy0: entered promiscuous mode [ 119.100335][ T8062] dummy0: left promiscuous mode [ 119.550267][ T8094] Bluetooth: MGMT ver 1.22 [ 119.706636][ T5105] Bluetooth: hci2: command tx timeout [ 119.908627][ T8119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.093598][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1168'. [ 120.922081][ T8193] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1199'. [ 121.399005][ T8224] sch_tbf: peakrate 3 is lower than or equals to rate 7694164499349936757 ! [ 121.933631][ T8249] sch_tbf: peakrate 3 is lower than or equals to rate 7694164499349936757 ! [ 121.993577][ T8255] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 122.217745][ T29] audit: type=1804 audit(1719383142.381:6): pid=8271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1234" name="/root/syzkaller.kHDg32/31/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 125.015440][ T8288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1239'. [ 125.035252][ T8288] bridge_slave_1: left allmulticast mode [ 125.041687][ T8288] bridge_slave_1: left promiscuous mode [ 125.055403][ T8288] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.350404][ T8306] netlink: 'syz.3.1249': attribute type 5 has an invalid length. [ 125.455262][ T8316] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1255'. [ 125.940426][ T8342] netlink: 'syz.4.1267': attribute type 5 has an invalid length. [ 125.998455][ T8341] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1266'. [ 126.533565][ T29] audit: type=1804 audit(1719383146.691:7): pid=8373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1278" name="/root/syzkaller.Q6GVRr/101/cgroup.controllers" dev="sda1" ino=1975 res=1 errno=0 [ 126.853340][ T5094] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 126.865745][ T5094] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 126.877976][ T5094] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 126.917273][ T5094] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 126.927754][ T5094] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 126.936120][ T5094] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 127.128163][ T8394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1285'. [ 127.142822][ T8387] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1284'. [ 127.313729][ T8382] chnl_net:caif_netlink_parms(): no params data found [ 127.400891][ T8410] sch_tbf: peakrate 3 is lower than or equals to rate 7694164499349936757 ! [ 127.727185][ T8382] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.753610][ T8382] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.774949][ T8382] bridge_slave_0: entered allmulticast mode [ 127.796293][ T8382] bridge_slave_0: entered promiscuous mode [ 127.819590][ T8382] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.850150][ T8382] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.863101][ T8436] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1302'. [ 127.884043][ T8382] bridge_slave_1: entered allmulticast mode [ 127.895163][ T8382] bridge_slave_1: entered promiscuous mode [ 128.032424][ T8382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.078426][ T8382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.187089][ T8382] team0: Port device team_slave_0 added [ 128.202573][ T8453] syz.0.1310 (8453) used greatest stack depth: 18192 bytes left [ 128.204400][ T8455] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1308'. [ 128.242680][ T8382] team0: Port device team_slave_1 added [ 128.332859][ T8382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.347938][ T8382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.383409][ T8382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.403042][ T8382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.410404][ T8382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.460160][ T8382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.569656][ T8382] hsr_slave_0: entered promiscuous mode [ 128.590574][ T8382] hsr_slave_1: entered promiscuous mode [ 128.604305][ T8382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.622751][ T8382] Cannot create hsr debugfs directory [ 128.994448][ T5094] Bluetooth: hci3: command tx timeout [ 129.126951][ T8382] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.147900][ T8382] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.321436][ T29] audit: type=1804 audit(1719383149.481:8): pid=8498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1331" name="/root/syzkaller.ludSVJ/66/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 129.413144][ T8382] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.424003][ T8382] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.557300][ T8382] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.572754][ T8382] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.727237][ T8382] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.740448][ T8382] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.880808][ T8519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1339'. [ 129.969677][ T8382] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 129.982253][ T8382] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 130.001730][ T8382] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 130.031345][ T8382] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 130.180988][ T8382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.217124][ T8382] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.232101][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.239334][ T5097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.267204][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.274510][ T5097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.353174][ T8382] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.666481][ T8382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.791276][ T8382] veth0_vlan: entered promiscuous mode [ 130.838536][ T8382] veth1_vlan: entered promiscuous mode [ 130.903285][ T8382] veth0_macvtap: entered promiscuous mode [ 130.940517][ T8382] veth1_macvtap: entered promiscuous mode [ 130.992956][ T8571] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1362'. [ 131.065121][ T5094] Bluetooth: hci3: command tx timeout [ 131.144987][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.182040][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.192944][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.203727][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.213865][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.227828][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.237964][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.254518][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.265019][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.276689][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.287834][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.298483][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.310941][ T8382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.344152][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.369920][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.382291][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.399279][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.412920][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.427948][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.438068][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.458775][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.474424][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.491649][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.502139][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.513045][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.530458][ T8382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.539839][ T8579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1365'. [ 131.581359][ T8382] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.590431][ T8382] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.600634][ T8382] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.610042][ T8382] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.741792][ T8599] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1375'. [ 131.786642][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.798657][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.844976][ T5374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.854042][ T5374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.974121][ T8609] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1272'. [ 132.256984][ T5394] tipc: Subscription rejected, illegal request [ 132.367071][ T8628] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1387'. [ 132.478844][ T8634] bond_slave_0: entered promiscuous mode [ 132.485710][ T8634] bond_slave_1: entered promiscuous mode [ 132.501812][ T8634] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 132.542739][ T8634] bond_slave_0: left promiscuous mode [ 132.548336][ T8634] bond_slave_1: left promiscuous mode [ 132.605299][ T8642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1391'. [ 132.719147][ T8651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1393'. [ 133.099020][ T8672] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1405'. [ 133.121704][ T8675] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1407'. [ 133.146714][ T5094] Bluetooth: hci3: command tx timeout [ 133.153377][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.159872][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.261328][ T8677] bond_slave_0: entered promiscuous mode [ 133.267087][ T8677] bond_slave_1: entered promiscuous mode [ 133.274811][ T8677] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 133.296854][ T8677] bond_slave_0: left promiscuous mode [ 133.302328][ T8677] bond_slave_1: left promiscuous mode [ 133.870409][ T8707] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1421'. [ 134.087188][ T8715] bond_slave_0: entered promiscuous mode [ 134.092907][ T8715] bond_slave_1: entered promiscuous mode [ 134.143960][ T8715] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 134.170605][ T8715] bond_slave_0: left promiscuous mode [ 134.176145][ T8715] bond_slave_1: left promiscuous mode [ 134.483196][ T8740] netlink: 'syz.1.1437': attribute type 3 has an invalid length. [ 134.502222][ T8740] netlink: 'syz.1.1437': attribute type 1 has an invalid length. [ 134.796159][ T8760] bond_slave_0: entered promiscuous mode [ 134.801937][ T8760] bond_slave_1: entered promiscuous mode [ 134.829896][ T8760] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 134.856803][ T8760] bond_slave_0: left promiscuous mode [ 134.862345][ T8760] bond_slave_1: left promiscuous mode [ 135.224812][ T5094] Bluetooth: hci3: command tx timeout [ 135.385298][ T8801] netlink: set zone limit has 8 unknown bytes [ 135.952974][ T8832] netlink: set zone limit has 8 unknown bytes [ 136.155180][ T8847] netlink: 'syz.1.1487': attribute type 3 has an invalid length. [ 136.204496][ T8847] netlink: 'syz.1.1487': attribute type 1 has an invalid length. [ 136.500113][ T8868] netlink: set zone limit has 8 unknown bytes [ 136.751078][ T8882] netlink: 'syz.1.1506': attribute type 3 has an invalid length. [ 136.781107][ T8882] netlink: 'syz.1.1506': attribute type 1 has an invalid length. [ 136.929860][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.039496][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.134035][ T8894] netlink: set zone limit has 8 unknown bytes [ 137.235577][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.426068][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.540529][ T8912] netlink: 'syz.2.1521': attribute type 3 has an invalid length. [ 137.572201][ T8912] netlink: 'syz.2.1521': attribute type 1 has an invalid length. [ 137.667134][ T5105] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 137.689713][ T5105] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 137.711076][ T5105] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 137.724523][ T5105] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 137.733690][ T5105] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 137.741506][ T5105] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 137.890499][ T35] bridge_slave_1: left allmulticast mode [ 137.910944][ T35] bridge_slave_1: left promiscuous mode [ 137.931086][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.975111][ T35] bridge_slave_0: left allmulticast mode [ 137.980859][ T35] bridge_slave_0: left promiscuous mode [ 137.993546][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.734066][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.754770][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.776338][ T35] bond0 (unregistering): Released all slaves [ 139.583679][ T5105] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 139.601989][ T5105] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 139.610048][ T5105] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 139.618889][ T5105] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 139.636690][ T5105] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 139.642668][ T35] hsr_slave_0: left promiscuous mode [ 139.659078][ T5105] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.697030][ T35] hsr_slave_1: left promiscuous mode [ 139.710837][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.719223][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.738958][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.754371][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.782196][ T8992] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1559'. [ 139.784575][ T5094] Bluetooth: hci3: command tx timeout [ 139.820342][ T35] veth1_macvtap: left promiscuous mode [ 139.829061][ T35] veth0_macvtap: left promiscuous mode [ 139.837958][ T35] veth1_vlan: left promiscuous mode [ 139.843712][ T35] veth0_vlan: left promiscuous mode [ 140.296381][ T35] team0 (unregistering): Port device team_slave_1 removed [ 140.346506][ T35] team0 (unregistering): Port device team_slave_0 removed [ 140.729942][ T8917] chnl_net:caif_netlink_parms(): no params data found [ 141.127159][ T8917] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.158524][ T9023] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1571'. [ 141.162179][ T8917] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.220491][ T8917] bridge_slave_0: entered allmulticast mode [ 141.235707][ T8917] bridge_slave_0: entered promiscuous mode [ 141.293217][ T8917] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.309221][ T8917] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.321969][ T8917] bridge_slave_1: entered allmulticast mode [ 141.329542][ T8917] bridge_slave_1: entered promiscuous mode [ 141.423741][ T8917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.461877][ T8917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.633294][ T8917] team0: Port device team_slave_0 added [ 141.696505][ T9053] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1585'. [ 141.705052][ T5094] Bluetooth: hci4: command tx timeout [ 141.752288][ T8917] team0: Port device team_slave_1 added [ 141.864796][ T5094] Bluetooth: hci3: command tx timeout [ 141.897052][ T8917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.911505][ T8917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.937833][ T8917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.953441][ T8917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.960854][ T8917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.993405][ T8917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.120471][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.161029][ T8979] chnl_net:caif_netlink_parms(): no params data found [ 142.236445][ T8917] hsr_slave_0: entered promiscuous mode [ 142.250049][ T8917] hsr_slave_1: entered promiscuous mode [ 142.252190][ T9081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1598'. [ 142.265132][ T9084] netlink: 'syz.2.1599': attribute type 4 has an invalid length. [ 142.273152][ T8917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.286436][ T8917] Cannot create hsr debugfs directory [ 142.363833][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.491458][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.666878][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.817917][ T8979] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.838552][ T8979] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.846646][ T8979] bridge_slave_0: entered allmulticast mode [ 142.852533][ T9114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1612'. [ 142.873708][ T8979] bridge_slave_0: entered promiscuous mode [ 142.935697][ T8979] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.954846][ T8979] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.971737][ T8979] bridge_slave_1: entered allmulticast mode [ 142.988047][ T8979] bridge_slave_1: entered promiscuous mode [ 143.111968][ T8979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.161193][ T8979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.240476][ T35] bridge_slave_1: left allmulticast mode [ 143.247501][ T35] bridge_slave_1: left promiscuous mode [ 143.253274][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.269835][ T35] bridge_slave_0: left allmulticast mode [ 143.275750][ T35] bridge_slave_0: left promiscuous mode [ 143.282598][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.689151][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.701961][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.716122][ T35] bond0 (unregistering): Released all slaves [ 143.784527][ T5094] Bluetooth: hci4: command tx timeout [ 143.911580][ T8979] team0: Port device team_slave_0 added [ 143.923401][ T8979] team0: Port device team_slave_1 added [ 143.944751][ T5094] Bluetooth: hci3: command tx timeout [ 144.199971][ T8979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.224372][ T8979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.284501][ T5381] ================================================================== [ 144.292610][ T5381] BUG: KASAN: slab-use-after-free in l2tp_tunnel_del_work+0xe5/0x330 [ 144.300739][ T5381] Read of size 8 at addr ffff888029b3f8b8 by task kworker/u8:14/5381 [ 144.306634][ T8979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.308795][ T5381] [ 144.308814][ T5381] CPU: 1 PID: 5381 Comm: kworker/u8:14 Not tainted 6.10.0-rc4-syzkaller-00936-g50b70845fc5c #0 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 144.331940][ T5381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 144.342014][ T5381] Workqueue: l2tp l2tp_tunnel_del_work [ 144.347530][ T5381] Call Trace: [ 144.350825][ T5381] [ 144.353770][ T5381] dump_stack_lvl+0x241/0x360 [ 144.358760][ T5381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.363962][ T5381] ? __pfx__printk+0x10/0x10 [ 144.368546][ T5381] ? _printk+0xd5/0x120 [ 144.372700][ T5381] ? __virt_addr_valid+0x183/0x520 [ 144.377810][ T5381] ? __virt_addr_valid+0x183/0x520 [ 144.382915][ T5381] print_report+0x169/0x550 [ 144.387411][ T5381] ? __virt_addr_valid+0x183/0x520 [ 144.392516][ T5381] ? __virt_addr_valid+0x183/0x520 [ 144.397630][ T5381] ? __virt_addr_valid+0x44e/0x520 [ 144.402844][ T5381] ? __phys_addr+0xba/0x170 [ 144.407337][ T5381] ? l2tp_tunnel_del_work+0xe5/0x330 [ 144.412613][ T5381] kasan_report+0x143/0x180 [ 144.417106][ T5381] ? l2tp_tunnel_del_work+0xe5/0x330 [ 144.422383][ T5381] l2tp_tunnel_del_work+0xe5/0x330 [ 144.427485][ T5381] ? process_scheduled_works+0x945/0x1830 [ 144.433193][ T5381] process_scheduled_works+0xa2c/0x1830 [ 144.438734][ T5381] ? __pfx_process_scheduled_works+0x10/0x10 [ 144.444709][ T5381] ? assign_work+0x364/0x3d0 [ 144.449285][ T5381] worker_thread+0x86d/0xd70 [ 144.453873][ T5381] ? __kthread_parkme+0x169/0x1d0 [ 144.458891][ T5381] ? __pfx_worker_thread+0x10/0x10 [ 144.463989][ T5381] kthread+0x2f0/0x390 [ 144.468044][ T5381] ? __pfx_worker_thread+0x10/0x10 [ 144.473140][ T5381] ? __pfx_kthread+0x10/0x10 [ 144.477717][ T5381] ret_from_fork+0x4b/0x80 [ 144.482124][ T5381] ? __pfx_kthread+0x10/0x10 [ 144.486706][ T5381] ret_from_fork_asm+0x1a/0x30 [ 144.491464][ T5381] [ 144.494557][ T5381] [ 144.496863][ T5381] Allocated by task 9155: [ 144.501171][ T5381] kasan_save_track+0x3f/0x80 [ 144.505834][ T5381] __kasan_kmalloc+0x98/0xb0 [ 144.510494][ T5381] __kmalloc_noprof+0x1f9/0x400 [ 144.515326][ T5381] l2tp_session_create+0x3b/0xc20 [ 144.520339][ T5381] pppol2tp_connect+0xca3/0x17a0 [ 144.525258][ T5381] __sys_connect+0x2df/0x310 [ 144.529863][ T5381] __x64_sys_connect+0x7a/0x90 [ 144.534610][ T5381] do_syscall_64+0xf3/0x230 [ 144.539100][ T5381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.544985][ T5381] [ 144.547290][ T5381] Freed by task 7508: [ 144.551265][ T5381] kasan_save_track+0x3f/0x80 [ 144.555935][ T5381] kasan_save_free_info+0x40/0x50 [ 144.560940][ T5381] poison_slab_object+0xe0/0x150 [ 144.565953][ T5381] __kasan_slab_free+0x37/0x60 [ 144.570703][ T5381] kfree+0x149/0x360 [ 144.574611][ T5381] __sk_destruct+0x58/0x5f0 [ 144.579881][ T5381] rcu_core+0xafd/0x1830 [ 144.584128][ T5381] handle_softirqs+0x2c4/0x970 [ 144.588879][ T5381] __irq_exit_rcu+0xf4/0x1c0 [ 144.593451][ T5381] irq_exit_rcu+0x9/0x30 [ 144.597684][ T5381] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 144.603307][ T5381] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 144.609278][ T5381] [ 144.611586][ T5381] Last potentially related work creation: [ 144.617318][ T5381] kasan_save_stack+0x3f/0x60 [ 144.621980][ T5381] __kasan_record_aux_stack+0xac/0xc0 [ 144.627422][ T5381] call_rcu+0x167/0xa70 [ 144.631567][ T5381] pppol2tp_release+0x24b/0x350 [ 144.636404][ T5381] sock_close+0xbc/0x240 [ 144.640630][ T5381] __fput+0x406/0x8b0 [ 144.644597][ T5381] task_work_run+0x24f/0x310 [ 144.649187][ T5381] syscall_exit_to_user_mode+0x168/0x370 [ 144.654807][ T5381] do_syscall_64+0x100/0x230 [ 144.659392][ T5381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.665281][ T5381] [ 144.667695][ T5381] The buggy address belongs to the object at ffff888029b3f800 [ 144.667695][ T5381] which belongs to the cache kmalloc-1k of size 1024 [ 144.681730][ T5381] The buggy address is located 184 bytes inside of [ 144.681730][ T5381] freed 1024-byte region [ffff888029b3f800, ffff888029b3fc00) [ 144.695695][ T5381] [ 144.698010][ T5381] The buggy address belongs to the physical page: [ 144.704421][ T5381] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29b38 [ 144.713179][ T5381] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 144.721676][ T5381] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 144.730102][ T5381] page_type: 0xffffefff(slab) [ 144.734944][ T5381] raw: 00fff00000000040 ffff888015041dc0 0000000000000000 dead000000000001 [ 144.743513][ T5381] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 144.752177][ T5381] head: 00fff00000000040 ffff888015041dc0 0000000000000000 dead000000000001 [ 144.760845][ T5381] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 144.769509][ T5381] head: 00fff00000000003 ffffea0000a6ce01 ffffffffffffffff 0000000000000000 [ 144.778175][ T5381] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 144.786826][ T5381] page dumped because: kasan: bad access detected [ 144.793234][ T5381] page_owner tracks the page as allocated [ 144.798945][ T5381] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5099, tgid 5099 (syz-executor), ts 55613140744, free_ts 55530280297 [ 144.819685][ T5381] post_alloc_hook+0x1f3/0x230 [ 144.824444][ T5381] get_page_from_freelist+0x2e43/0x2f00 [ 144.829981][ T5381] __alloc_pages_noprof+0x256/0x6c0 [ 144.835170][ T5381] alloc_slab_page+0x5f/0x120 [ 144.839887][ T5381] allocate_slab+0x5a/0x2f0 [ 144.844381][ T5381] ___slab_alloc+0xcd1/0x14b0 [ 144.849141][ T5381] __slab_alloc+0x58/0xa0 [ 144.853455][ T5381] kmalloc_node_track_caller_noprof+0x281/0x440 [ 144.859680][ T5381] kmalloc_reserve+0x111/0x2a0 [ 144.864441][ T5381] __alloc_skb+0x1f3/0x440 [ 144.868854][ T5381] inet6_rt_notify+0xdf/0x290 [ 144.873523][ T5381] fib6_add+0x1e33/0x4430 [ 144.877866][ T5381] ip6_ins_rt+0x106/0x170 [ 144.882180][ T5381] __ipv6_ifa_notify+0x5d2/0x1230 [ 144.887192][ T5381] add_addr+0x2dd/0x490 [ 144.891333][ T5381] add_v4_addrs+0x8dd/0x1160 [ 144.895913][ T5381] page last free pid 5088 tgid 5088 stack trace: [ 144.902219][ T5381] free_unref_page+0xd22/0xea0 [ 144.906974][ T5381] __slab_free+0x31b/0x3d0 [ 144.911481][ T5381] qlist_free_all+0x9e/0x140 [ 144.916065][ T5381] kasan_quarantine_reduce+0x14f/0x170 [ 144.921515][ T5381] __kasan_slab_alloc+0x23/0x80 [ 144.926370][ T5381] kmalloc_trace_noprof+0x132/0x2c0 [ 144.931652][ T5381] ____ip_mc_inc_group+0x31d/0xbf0 [ 144.936841][ T5381] ip_mc_up+0x124/0x300 [ 144.940980][ T5381] inetdev_event+0x1025/0x15c0 [ 144.945728][ T5381] notifier_call_chain+0x19f/0x3e0 [ 144.950834][ T5381] __dev_notify_flags+0x207/0x400 [ 144.955930][ T5381] dev_change_flags+0xf0/0x1a0 [ 144.960683][ T5381] do_setlink+0xccd/0x41f0 [ 144.965084][ T5381] rtnl_newlink+0x180d/0x20a0 [ 144.969750][ T5381] rtnetlink_rcv_msg+0x89b/0x1180 [ 144.974760][ T5381] netlink_rcv_skb+0x1e3/0x430 [ 144.979528][ T5381] [ 144.981836][ T5381] Memory state around the buggy address: [ 144.987447][ T5381] ffff888029b3f780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 144.995491][ T5381] ffff888029b3f800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.003533][ T5381] >ffff888029b3f880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.011581][ T5381] ^ [ 145.017451][ T5381] ffff888029b3f900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.025495][ T5381] ffff888029b3f980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.033533][ T5381] ================================================================== [ 145.041700][ T5381] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 145.048893][ T5381] CPU: 1 PID: 5381 Comm: kworker/u8:14 Not tainted 6.10.0-rc4-syzkaller-00936-g50b70845fc5c #0 [ 145.059212][ T5381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 145.069257][ T5381] Workqueue: l2tp l2tp_tunnel_del_work [ 145.074717][ T5381] Call Trace: [ 145.077980][ T5381] [ 145.080897][ T5381] dump_stack_lvl+0x241/0x360 [ 145.085567][ T5381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.090754][ T5381] ? __pfx__printk+0x10/0x10 [ 145.095339][ T5381] ? vscnprintf+0x5d/0x90 [ 145.099653][ T5381] panic+0x349/0x860 [ 145.103540][ T5381] ? check_panic_on_warn+0x21/0xb0 [ 145.108645][ T5381] ? __pfx_panic+0x10/0x10 [ 145.113056][ T5381] ? mark_lock+0x9a/0x350 [ 145.117375][ T5381] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 145.123265][ T5381] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 145.129143][ T5381] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 145.135453][ T5381] ? print_report+0x502/0x550 [ 145.140121][ T5381] check_panic_on_warn+0x86/0xb0 [ 145.145049][ T5381] ? l2tp_tunnel_del_work+0xe5/0x330 [ 145.150385][ T5381] end_report+0x77/0x160 [ 145.154634][ T5381] kasan_report+0x154/0x180 [ 145.159127][ T5381] ? l2tp_tunnel_del_work+0xe5/0x330 [ 145.164420][ T5381] l2tp_tunnel_del_work+0xe5/0x330 [ 145.169536][ T5381] ? process_scheduled_works+0x945/0x1830 [ 145.175278][ T5381] process_scheduled_works+0xa2c/0x1830 [ 145.180824][ T5381] ? __pfx_process_scheduled_works+0x10/0x10 [ 145.186792][ T5381] ? assign_work+0x364/0x3d0 [ 145.191373][ T5381] worker_thread+0x86d/0xd70 [ 145.195976][ T5381] ? __kthread_parkme+0x169/0x1d0 [ 145.200988][ T5381] ? __pfx_worker_thread+0x10/0x10 [ 145.206083][ T5381] kthread+0x2f0/0x390 [ 145.210143][ T5381] ? __pfx_worker_thread+0x10/0x10 [ 145.215241][ T5381] ? __pfx_kthread+0x10/0x10 [ 145.219817][ T5381] ret_from_fork+0x4b/0x80 [ 145.224225][ T5381] ? __pfx_kthread+0x10/0x10 [ 145.228800][ T5381] ret_from_fork_asm+0x1a/0x30 [ 145.233557][ T5381] [ 145.236818][ T5381] Kernel Offset: disabled [ 145.241132][ T5381] Rebooting in 86400 seconds..