last executing test programs: 1.668666746s ago: executing program 4 (id=9787): pipe(&(0x7f00000005c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) splice(r0, 0x0, r1, 0x0, 0x8001, 0x0) 1.033670081s ago: executing program 3 (id=9803): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001ff700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000140012800b000100626174616476"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) 1.007848452s ago: executing program 1 (id=9805): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0xf, 0x0, "0c9e089c1b4a01860b479037073d223b3c1b324debec40e57a050000007eb48821996aff1e7154e746be4d7606000000c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd352a000000988d13"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x2d, 0x0, "a1c1dd75a68473ba07d945c3b03e10951cd4b347113e55eb499419be4f7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f7"}, 0xd8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0xf, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519be4f7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0xf, 0x0, "0c9e089c1b4a01860b479037f43d223b3c1b324debec40e57a07f7bd417eb48821996aff1e7154e746be4d7686455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d13"}, 0xd8) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 897.106382ms ago: executing program 3 (id=9807): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c2337", 0x89}, {&(0x7f0000000d40)="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", 0x183}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff", 0xdc}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000340)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74b105c14411925a8ae24778d4111d2d9743b682d653bcf35d53fd33489a3a405042c0de5ec2cb4b991a31e1d76db8609d0bf66d8d723a6c28a50d42ab169de383345fbee97bea33e8bfb5d705852d360ab703fc956c1ea86157aedcff1782c784e074", 0xc5}, {&(0x7f0000000440)="03d54d8499", 0x5}, {&(0x7f0000000b80)="2a3ed204bd855fb67f6b94cfb2680c7352d91e366b2c80b512fcee9c7a398e630176e8b7f4d3bc19723cd52fbf9fb301e52334b5f8833cb7a1a94d63db20644e546b7511fb8fdf55754accdc7185c2b2cb384737f100d3aeaf5529ad", 0x5c}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 896.516411ms ago: executing program 2 (id=9808): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, 0xfffffffffffffffc) 825.30893ms ago: executing program 1 (id=9810): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b8, 0x111, 0x4b4, 0x1b8, 0xd4feffff, 0x310, 0x20a, 0x278, 0x310, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 773.003461ms ago: executing program 1 (id=9811): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/64, 0x40}], 0x1, &(0x7f0000000540)=""/27, 0x10}}], 0x1, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2000011a) 728.775953ms ago: executing program 3 (id=9812): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000006340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x9}}}}}}}, 0x0) 728.569708ms ago: executing program 4 (id=9813): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000180)='{', 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000940)="014bb6a68759182ab7e144f718ee0b9d487461d1891d71f57a540210b1b32e260da68c9e5042f43d8e39a995d58933e84e8f3166bcc26b57e038599805becad925bd3f30fe3ab8f293da067003b56ad9b15655", 0x53}, {&(0x7f0000002240)="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", 0x350}], 0x2}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)="9b9ffa26f4cb5171be632cdfd9a71ff9ed099e18b36a34d2a17950e0989d7c024fd3cbb14a0fd95d60b2b03e6642192be3902f01d756951c1bc7003ed2070f38b02a30c94a1d16ca530e9578d07134cfddbc2f367283c7fbd3741a95993d4f42826e1e", 0x63}, {&(0x7f00000004c0)="95b11c8e1ff282034a7a58132bae69a685b66b111596d9c8c9558b03ecdd5fa204544908edfef536fde8980f713668fa7a24ad67ccfd9e10f5bd6d", 0x3b}, {&(0x7f0000000580)="b482b58940b5ec27ceb16bb0a4f3cfb0846fac3e218013d3b5ea8486b1b903acb23d9bba0b74", 0x26}], 0x3}}], 0x2, 0x0) 725.516346ms ago: executing program 0 (id=9814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x44, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @private0}}}]}]}, 0x44}}, 0x0) 724.685539ms ago: executing program 2 (id=9815): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0x2}, 0x80, 0x0}, 0x0) 681.132003ms ago: executing program 3 (id=9816): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) 608.791745ms ago: executing program 0 (id=9817): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3}}, 0x26) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x111, 0x2, 0x0, 0x20000000) 608.66014ms ago: executing program 2 (id=9818): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 608.545649ms ago: executing program 4 (id=9819): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "865703b7e43b34e4"}, 0x28) write$binfmt_script(r0, &(0x7f0000001300), 0x8f) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfccf}, &(0x7f0000000240)=0x40) writev(0xffffffffffffffff, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0xfd88}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close(r0) 546.395864ms ago: executing program 3 (id=9820): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0xf, 0x0, "0c9e089c1b4a01860b479037073d223b3c1b324debec40e57a050000007eb48821996aff1e7154e746be4d7606000000c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd352a000000988d13"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x2d, 0x0, "a1c1dd75a68473ba07d945c3b03e10951cd4b347113e55eb499419be4f7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f7"}, 0xd8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0xf, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519be4f7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0xf, 0x0, "0c9e089c1b4a01860b479037f43d223b3c1b324debec40e57a07f7bd417eb48821996aff1e7154e746be4d7686455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d13"}, 0xd8) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 507.233767ms ago: executing program 0 (id=9821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 483.003362ms ago: executing program 4 (id=9822): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r5, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r3], 0x1c}}, 0x0) 428.788718ms ago: executing program 2 (id=9823): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000300)='@', 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r0, &(0x7f0000000400), 0x20000000}, 0x20) 394.762622ms ago: executing program 3 (id=9824): pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 374.995624ms ago: executing program 0 (id=9825): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, 0xfffffffffffffffc) 331.764461ms ago: executing program 2 (id=9826): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000006340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x9}}}}}}}, 0x0) 253.418729ms ago: executing program 1 (id=9827): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x52, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) 252.882512ms ago: executing program 0 (id=9828): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080), 0x4) 180.590971ms ago: executing program 2 (id=9829): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d2c651b101fa"}, 0x10) listen(r0, 0xfffffff7) 124.497882ms ago: executing program 0 (id=9830): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000040)=0x8) 115.573627ms ago: executing program 1 (id=9831): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3}}, 0x26) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) getsockopt$bt_BT_SECURITY(r0, 0x111, 0x2, 0x0, 0x20000000) 56.727434ms ago: executing program 4 (id=9832): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "865703b7e43b34e4"}, 0x28) write$binfmt_script(r0, &(0x7f0000001300), 0x8f) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfccf}, &(0x7f0000000240)=0x40) writev(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close(r0) 44.008639ms ago: executing program 1 (id=9833): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x50}}, 0x0) 0s ago: executing program 4 (id=9834): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0xf, 0x0, "0c9e089c1b4a01860b479037073d223b3c1b324debec40e57a050000007eb48821996aff1e7154e746be4d7606000000c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd352a000000988d13"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x2d, 0x0, "a1c1dd75a68473ba07d945c3b03e10951cd4b347113e55eb499419be4f7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f7"}, 0xd8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0xf, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519be4f7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0xf, 0x0, "0c9e089c1b4a01860b479037f43d223b3c1b324debec40e57a07f7bd417eb48821996aff1e7154e746be4d7686455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d13"}, 0xd8) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) kernel console output (not intermixed with test programs): dge_slave_1: left promiscuous mode [ 400.615862][ T2418] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.634489][ T2418] bridge_slave_0: left allmulticast mode [ 400.647140][ T2418] bridge_slave_0: left promiscuous mode [ 400.655829][ T2418] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.939506][ T2418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.951830][ T2418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.962711][ T2418] bond0 (unregistering): Released all slaves [ 401.158331][T20490] hsr_slave_0: entered promiscuous mode [ 401.164812][T20490] hsr_slave_1: entered promiscuous mode [ 401.173364][T20490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.181884][T20490] Cannot create hsr debugfs directory [ 401.629097][T20231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.810088][ T2418] hsr_slave_0: left promiscuous mode [ 401.815788][ T5096] Bluetooth: hci0: command tx timeout [ 401.822162][ T2418] hsr_slave_1: left promiscuous mode [ 401.835352][ T2418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.842785][ T2418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.859390][ T2418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.867568][ T2418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.910643][ T2418] veth1_macvtap: left promiscuous mode [ 401.919871][ T2418] veth0_macvtap: left promiscuous mode [ 401.930635][ T2418] veth1_vlan: left promiscuous mode [ 401.937385][ T2418] veth0_vlan: left promiscuous mode [ 402.528607][ T2418] team0 (unregistering): Port device team_slave_1 removed [ 402.573533][ T2418] team0 (unregistering): Port device team_slave_0 removed [ 402.930397][ T2418] lo (unregistering): left allmulticast mode [ 403.112619][T20291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.276506][T20231] veth0_vlan: entered promiscuous mode [ 403.332541][T20291] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.481028][T20231] veth1_vlan: entered promiscuous mode [ 403.490249][ T929] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.497469][ T929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.526267][ T929] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.533401][ T929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.630981][T20291] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 403.647827][T20291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 403.766700][T20231] veth0_macvtap: entered promiscuous mode [ 403.809647][T20231] veth1_macvtap: entered promiscuous mode [ 403.831519][T20490] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 403.860114][T20490] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 403.916821][T20490] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 403.966439][T20490] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 404.021200][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.034656][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.051841][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.064344][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.084484][T20231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.098041][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.125132][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.148069][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.168535][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.193574][T20231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.227983][T20231] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.239749][T20231] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.250132][T20231] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.259030][T20231] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.342055][T20291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.528582][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.535505][T20291] veth0_vlan: entered promiscuous mode [ 404.555137][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.647231][T20291] veth1_vlan: entered promiscuous mode [ 404.655357][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.667417][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.758967][T20490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.848522][T20490] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.867646][T20291] veth0_macvtap: entered promiscuous mode [ 404.930967][T20291] veth1_macvtap: entered promiscuous mode [ 404.955578][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.962735][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.043100][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.050289][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.080689][T20291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.115093][T20291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.145668][T20291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.166672][T20291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.200950][T20291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.224909][T20291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.255868][T20291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.284054][T20291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.319881][T20291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.348568][T20291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.369225][T20291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.383718][T20291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.400582][T20291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.450780][T20291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.488858][T20291] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.507240][T20291] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.534938][T20291] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.557018][T20291] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.752014][T20852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6248'. [ 405.779488][T20852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6248'. [ 405.891967][ T2418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.945449][ T2418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.066579][ T2418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.094015][ T2418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.278853][T20879] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 406.359256][T20490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.500607][T20490] veth0_vlan: entered promiscuous mode [ 406.521167][T20490] veth1_vlan: entered promiscuous mode [ 406.624229][T20490] veth0_macvtap: entered promiscuous mode [ 406.669727][T20490] veth1_macvtap: entered promiscuous mode [ 406.752493][T20490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.771988][T20490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.788536][T20490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.806728][T20490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.829058][T20490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.855469][T20490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.875033][T20490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.890060][T20490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.923477][T20490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.949080][T20905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6260'. [ 406.970400][T20905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6260'. [ 406.993714][T20490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.029876][T20490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.044638][T20490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.061208][T20490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.071445][T20490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.110025][T20490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.138568][T20490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.160410][T20490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.183592][T20490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.276878][T20490] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.303784][T20490] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.329055][T20490] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.354742][T20490] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.504770][ T6789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.524043][ T6789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.573409][ T2418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.592785][ T2418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.923672][T20945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6273'. [ 407.932955][T20945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6273'. [ 409.327550][T21013] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6305'. [ 410.949660][T21121] netlink: 'syz.0.6353': attribute type 8 has an invalid length. [ 410.962228][T21121] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6353'. [ 413.815385][ T5096] Bluetooth: hci0: command tx timeout [ 414.036389][T21284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6426'. [ 414.551619][T21317] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6441'. [ 415.124055][T21351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6458'. [ 415.451935][T21370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6466'. [ 415.943266][T21404] netlink: 'syz.2.6481': attribute type 1 has an invalid length. [ 416.809509][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 417.645193][T21527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6535'. [ 418.090415][T21560] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6550'. [ 419.375222][T21644] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6586'. [ 419.866940][T21679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6602'. [ 420.325266][T21715] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6620'. [ 420.761322][T21748] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6636'. [ 420.907937][T21759] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6641'. [ 421.092545][T21772] tipc: Started in network mode [ 421.118610][T21772] tipc: Node identity ac141441, cluster identity 4711 [ 421.132648][T21772] tipc: Enabled bearer , priority 10 [ 421.354745][T21788] openvswitch: netlink: Missing key (keys=44, expected=2000) [ 421.767656][T21809] syzkaller1: entered promiscuous mode [ 421.780843][T21809] syzkaller1: entered allmulticast mode [ 422.125326][ T5147] tipc: Node number set to 2886997057 [ 422.315924][T21843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6679'. [ 422.815949][ T5110] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 422.830927][ T5110] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 422.839396][ T5110] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 422.859547][ T5110] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 422.871504][ T5110] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 422.879404][ T5110] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 423.230821][ T2418] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.517517][ T2418] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.709257][ T2418] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.900660][ T2418] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.403278][T21870] chnl_net:caif_netlink_parms(): no params data found [ 424.537712][ T2418] bridge_slave_1: left allmulticast mode [ 424.549358][ T2418] bridge_slave_1: left promiscuous mode [ 424.563105][ T2418] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.595343][ T2418] bridge_slave_0: left allmulticast mode [ 424.609270][ T2418] bridge_slave_0: left promiscuous mode [ 424.633203][ T2418] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.935581][ T5110] Bluetooth: hci5: command tx timeout [ 425.487903][ T2418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.505784][ T2418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.521158][ T2418] bond0 (unregistering): Released all slaves [ 425.808931][ T2418] tipc: Disabling bearer [ 425.817371][ T2418] tipc: Left network mode [ 426.336876][T21870] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.372002][T21870] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.405135][T21870] bridge_slave_0: entered allmulticast mode [ 426.437413][T21870] bridge_slave_0: entered promiscuous mode [ 426.456485][T21870] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.492060][T21870] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.528686][T21870] bridge_slave_1: entered allmulticast mode [ 426.550539][T21870] bridge_slave_1: entered promiscuous mode [ 426.669599][T22042] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 426.876981][T21870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.980767][T21870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.028978][ T5110] Bluetooth: hci5: command tx timeout [ 427.074802][T22062] netlink: 'syz.1.6761': attribute type 1 has an invalid length. [ 427.286138][T21870] team0: Port device team_slave_0 added [ 427.371750][ T2418] hsr_slave_0: left promiscuous mode [ 427.411659][ T2418] hsr_slave_1: left promiscuous mode [ 427.443963][ T2418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.471929][ T2418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.497081][ T2418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.522994][ T2418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.583324][ T2418] veth1_macvtap: left promiscuous mode [ 427.595741][ T2418] veth0_macvtap: left promiscuous mode [ 427.615154][ T2418] veth1_vlan: left promiscuous mode [ 427.625277][ T2418] veth0_vlan: left promiscuous mode [ 428.790212][ T2418] team0 (unregistering): Port device team_slave_1 removed [ 428.847303][ T2418] team0 (unregistering): Port device team_slave_0 removed [ 429.105440][ T5110] Bluetooth: hci5: command tx timeout [ 429.451856][T21870] team0: Port device team_slave_1 added [ 429.465731][T22115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6786'. [ 429.533883][T22116] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 429.552817][T22116] bond1: (slave vcan1): Error -95 calling set_mac_address [ 429.571763][T22146] syz_tun: entered promiscuous mode [ 429.579623][T22146] syz_tun: left promiscuous mode [ 429.675696][T21870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.691017][T21870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.753069][T21870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.770029][T22155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6802'. [ 429.784815][T21870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.792058][T21870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.877584][T21870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.036390][T21870] hsr_slave_0: entered promiscuous mode [ 430.050135][T21870] hsr_slave_1: entered promiscuous mode [ 431.175298][ T5099] Bluetooth: hci5: command tx timeout [ 431.515332][T21870] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 431.547419][T21870] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 431.608435][T21870] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 431.641083][T21870] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 431.689010][T22239] netlink: 'syz.3.6835': attribute type 2 has an invalid length. [ 432.010996][T21870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.094808][T21870] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.145232][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.147013][ T5099] Bluetooth: hci3: command 0x0406 tx timeout [ 432.152409][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.277267][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.284477][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.429776][T22279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6847'. [ 432.504519][T22283] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6850'. [ 432.550912][T22283] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 432.593865][T22287] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6847'. [ 432.612201][T22287] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6847'. [ 432.798760][T22300] bridge_slave_1: left allmulticast mode [ 432.804459][T22300] bridge_slave_1: left promiscuous mode [ 432.831063][T22300] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.860625][T22300] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 433.212420][T21870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.316632][T22328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 433.483493][T21870] veth0_vlan: entered promiscuous mode [ 433.518815][T21870] veth1_vlan: entered promiscuous mode [ 433.606331][T21870] veth0_macvtap: entered promiscuous mode [ 433.623247][T21870] veth1_macvtap: entered promiscuous mode [ 433.706602][T21870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.731027][T21870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.762334][T21870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.794812][T21870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.834937][T21870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.873889][T21870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.902377][T21870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.927109][T21870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.952846][T21870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.992820][T21870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.032531][T21870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.054875][T21870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.088958][T21870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.112631][T21870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.140203][T21870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.170765][T21870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.194952][T21870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.227032][T21870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.327757][T21870] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.364172][T21870] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.388764][T21870] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.404903][T21870] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.688504][ T6799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.735312][ T6799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.870249][ T6782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.897741][ T6782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.893935][T22486] syz_tun: entered promiscuous mode [ 436.049895][T22498] xt_ecn: cannot match TCP bits for non-tcp packets [ 436.342667][T22516] syzkaller1: entered promiscuous mode [ 436.361293][T22516] syzkaller1: entered allmulticast mode [ 436.845511][T22555] syz_tun: entered promiscuous mode [ 436.874634][T22558] syzkaller1: entered promiscuous mode [ 436.883284][T22558] syzkaller1: entered allmulticast mode [ 437.036770][T22568] vlan0: entered promiscuous mode [ 437.044509][T22567] vlan0: left promiscuous mode [ 437.438080][T22599] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 437.683843][T22613] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6974'. [ 437.719265][T22613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6974'. [ 437.794081][T22619] syz_tun: entered promiscuous mode [ 438.243185][T22643] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6988'. [ 438.254048][T22643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6988'. [ 438.670542][T22664] netlink: 248 bytes leftover after parsing attributes in process `syz.1.6997'. [ 438.942699][ T5099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 438.953791][ T5099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 438.968387][ T5099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 438.987255][ T5099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 439.000947][ T5099] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 439.010171][ T5099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 439.210370][ T6799] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.426771][ T6799] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.439628][T22705] netlink: 6 bytes leftover after parsing attributes in process `syz.1.7014'. [ 439.547907][ T6799] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.757095][ T6799] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.006322][T22672] chnl_net:caif_netlink_parms(): no params data found [ 440.284649][ T6799] bridge_slave_1: left allmulticast mode [ 440.304923][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.314614][ T6799] bridge_slave_1: left promiscuous mode [ 440.331221][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.363282][ T6799] bridge_slave_0: left allmulticast mode [ 440.382369][ T6799] bridge_slave_0: left promiscuous mode [ 440.395234][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.981159][ T6799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.993099][ T6799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.005138][ T6799] bond0 (unregistering): Released all slaves [ 441.097846][ T5110] Bluetooth: hci1: command tx timeout [ 441.107811][ T6799] bond1 (unregistering): Released all slaves [ 441.200316][T22672] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.232286][T22672] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.261418][T22672] bridge_slave_0: entered allmulticast mode [ 441.278348][T22672] bridge_slave_0: entered promiscuous mode [ 441.335315][T22672] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.342493][T22672] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.384480][T22672] bridge_slave_1: entered allmulticast mode [ 441.404526][T22672] bridge_slave_1: entered promiscuous mode [ 441.778830][T22672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.830764][T22672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.436966][T22672] team0: Port device team_slave_0 added [ 442.496122][T22672] team0: Port device team_slave_1 added [ 442.656966][ T6799] hsr_slave_0: left promiscuous mode [ 442.683083][ T6799] hsr_slave_1: left promiscuous mode [ 442.713703][T22845] netlink: 'syz.4.7061': attribute type 1 has an invalid length. [ 442.713799][ T6799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.744961][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.771558][ T6799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.782488][ T5099] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 442.804984][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.837080][ T5099] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 442.848570][ T5099] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 442.848675][ T6799] veth1_macvtap: left promiscuous mode [ 442.872444][ T6799] veth0_macvtap: left promiscuous mode [ 442.882968][ T5099] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 442.884794][ T6799] veth1_vlan: left promiscuous mode [ 442.896204][ T6799] veth0_vlan: left promiscuous mode [ 442.898065][ T5099] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 442.911395][ T5099] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 443.190557][ T5110] Bluetooth: hci1: command tx timeout [ 443.370271][ T6799] team0 (unregistering): Port device team_slave_1 removed [ 443.409411][ T6799] team0 (unregistering): Port device team_slave_0 removed [ 443.888116][T16568] syz_tun (unregistering): left allmulticast mode [ 443.955397][T22672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.962416][T22672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.993970][T22672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.013443][T22672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.021209][T22672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.047907][T22672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.237631][T22672] hsr_slave_0: entered promiscuous mode [ 444.263366][T22672] hsr_slave_1: entered promiscuous mode [ 444.273927][T22672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 444.282073][T22672] Cannot create hsr debugfs directory [ 444.935231][ T5110] Bluetooth: hci3: command tx timeout [ 445.260644][ T5110] Bluetooth: hci1: command tx timeout [ 445.300834][T22928] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7085'. [ 445.315135][ T6799] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.487901][ T6799] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.529764][T22847] chnl_net:caif_netlink_parms(): no params data found [ 445.663922][T22935] netlink: 'syz.0.7088': attribute type 10 has an invalid length. [ 445.691898][T22935] team0: Port device netdevsim0 added [ 445.769790][ T6799] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.797611][T22939] netlink: 'syz.0.7088': attribute type 10 has an invalid length. [ 445.846119][T22939] team0: Port device netdevsim0 removed [ 445.858882][T22939] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 445.977319][ T6799] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.417423][T22968] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7096'. [ 446.445270][T22847] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.462692][T22847] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.474390][T22847] bridge_slave_0: entered allmulticast mode [ 446.486016][T22847] bridge_slave_0: entered promiscuous mode [ 446.496505][T22847] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.503825][T22847] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.512643][T22847] bridge_slave_1: entered allmulticast mode [ 446.536626][T22847] bridge_slave_1: entered promiscuous mode [ 446.677848][T22847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.751308][T22672] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 446.778621][T22672] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 446.820451][T22847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.867107][T22985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7103'. [ 446.921609][T22672] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 446.987949][T22847] team0: Port device team_slave_0 added [ 447.015494][ T5110] Bluetooth: hci3: command tx timeout [ 447.030071][T22672] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 447.077947][T22847] team0: Port device team_slave_1 added [ 447.078531][T22992] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7107'. [ 447.101702][ T6799] bridge_slave_1: left allmulticast mode [ 447.108907][ T6799] bridge_slave_1: left promiscuous mode [ 447.114759][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.133017][ T6799] bridge_slave_0: left allmulticast mode [ 447.142249][ T6799] bridge_slave_0: left promiscuous mode [ 447.154503][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.338584][ T5110] Bluetooth: hci1: command tx timeout [ 447.559424][ T6799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.571637][ T6799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.582689][ T6799] bond0 (unregistering): Released all slaves [ 447.597359][ T6799] bond1 (unregistering): Released all slaves [ 447.651432][T22847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.667726][T22847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.695652][T22847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.710391][T22847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.718304][T22847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.756602][T22847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.073733][T22847] hsr_slave_0: entered promiscuous mode [ 448.094178][T22847] hsr_slave_1: entered promiscuous mode [ 448.104499][T22847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.126735][T22847] Cannot create hsr debugfs directory [ 448.777904][ T6799] hsr_slave_0: left promiscuous mode [ 448.819536][ T6799] hsr_slave_1: left promiscuous mode [ 448.845316][ T6799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.868205][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.886014][ T6799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.908087][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.949015][ T6799] veth1_macvtap: left promiscuous mode [ 448.954612][ T6799] veth0_macvtap: left promiscuous mode [ 448.993032][ T6799] veth1_vlan: left promiscuous mode [ 449.002588][ T6799] veth0_vlan: left promiscuous mode [ 449.095120][ T5110] Bluetooth: hci3: command tx timeout [ 451.015339][T22672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.090545][T22672] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.175263][ T5110] Bluetooth: hci3: command tx timeout [ 451.234606][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.241823][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.257174][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.264462][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.329019][T23140] syzkaller1: entered promiscuous mode [ 451.345759][T23140] syzkaller1: entered allmulticast mode [ 451.657809][T22847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 451.696657][T23160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7144'. [ 451.731079][T22847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 451.777204][T22847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 451.808572][T22847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 452.103275][T22672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.144538][T22847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.212418][T22847] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.252111][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.259362][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.310548][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.317764][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.356665][T23193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7155'. [ 452.501466][T22847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 452.523426][T22672] veth0_vlan: entered promiscuous mode [ 452.570566][T22672] veth1_vlan: entered promiscuous mode [ 452.709571][T22672] veth0_macvtap: entered promiscuous mode [ 452.764024][T22672] veth1_macvtap: entered promiscuous mode [ 452.824609][T22672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.864093][T22672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.900587][T22672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.947230][T22672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.978322][T22672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.000450][T22672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.028838][T22672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.133475][T22672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.151895][T22672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.168308][T22672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.189702][T22672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.200661][T22672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.214166][T22672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.227479][T22672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.246077][T22847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.253164][T23231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7165'. [ 453.292840][T22672] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.324759][T22672] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.352695][T22672] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.367605][T22672] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.520174][T22847] veth0_vlan: entered promiscuous mode [ 453.603794][T22847] veth1_vlan: entered promiscuous mode [ 453.641598][ T6799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.704700][ T6799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.787619][ T2460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.801525][T22847] veth0_macvtap: entered promiscuous mode [ 453.822373][ T2460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.842632][T22847] veth1_macvtap: entered promiscuous mode [ 453.907180][T23258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7175'. [ 453.940402][T22847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.983787][T22847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.017418][T22847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.040411][T22847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.071321][T22847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.094985][T22847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.119179][T22847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.144961][T22847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.165796][T23269] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7178'. [ 454.177615][T22847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.205532][T22847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.226934][T22847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.282704][T22847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.303645][T22847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.331139][T22847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.347023][T22847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.360237][T22847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.371239][T22847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.403457][T22847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.467928][T22847] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.504929][T22847] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.527013][T22847] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.546063][T22847] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.775233][T23285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7186'. [ 454.916039][ T5099] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 454.926922][ T5099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 454.942666][ T5099] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 454.959713][ T5099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 454.968602][ T5099] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 454.976510][ T5099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 455.057214][ T6806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.077911][ T6806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.191268][ T6799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.204942][ T6799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.305116][ T6806] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.567172][ T6806] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.701796][ T6806] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.740875][T23317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7197'. [ 455.859540][ T6806] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.402386][T23350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7210'. [ 456.543227][T23287] chnl_net:caif_netlink_parms(): no params data found [ 456.752146][ T6806] bridge_slave_1: left allmulticast mode [ 456.769021][ T6806] bridge_slave_1: left promiscuous mode [ 456.779709][ T6806] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.802525][ T6806] bridge_slave_0: left allmulticast mode [ 456.814997][ T6806] bridge_slave_0: left promiscuous mode [ 456.828798][ T6806] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.016284][ T5099] Bluetooth: hci0: command tx timeout [ 457.329844][ T6806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.342255][ T6806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.354120][ T6806] bond0 (unregistering): Released all slaves [ 457.738717][T23287] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.775117][T23287] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.809860][T23287] bridge_slave_0: entered allmulticast mode [ 457.842581][T23287] bridge_slave_0: entered promiscuous mode [ 457.877506][T23287] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.912449][T23287] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.941636][T23287] bridge_slave_1: entered allmulticast mode [ 457.968008][T23287] bridge_slave_1: entered promiscuous mode [ 458.122083][T23287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.191623][T23287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.332398][T23287] team0: Port device team_slave_0 added [ 458.360960][T23287] team0: Port device team_slave_1 added [ 458.513466][T23450] batadv_slave_0: entered allmulticast mode [ 458.597236][T23287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.622655][T23287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.664291][T23287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.694520][T23450] pim6reg: entered allmulticast mode [ 458.711180][T23287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.747009][T23287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.824063][T23287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.063617][T23471] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 459.095442][ T5099] Bluetooth: hci0: command tx timeout [ 459.132236][T23287] hsr_slave_0: entered promiscuous mode [ 459.167722][T23287] hsr_slave_1: entered promiscuous mode [ 459.193561][T23287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.216006][T23287] Cannot create hsr debugfs directory [ 459.560076][T23486] syzkaller1: entered promiscuous mode [ 459.575097][T23486] syzkaller1: entered allmulticast mode [ 459.595814][ T6806] hsr_slave_0: left promiscuous mode [ 459.651046][ T6806] hsr_slave_1: left promiscuous mode [ 459.679095][ T6806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.695756][ T6806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.743488][ T6806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.786781][ T6806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.842428][ T6806] veth1_macvtap: left promiscuous mode [ 459.877012][ T6806] veth0_macvtap: left promiscuous mode [ 459.882685][ T6806] veth1_vlan: left promiscuous mode [ 459.921683][ T6806] veth0_vlan: left promiscuous mode [ 460.183057][T23504] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 460.683411][ T6806] team0 (unregistering): Port device team_slave_1 removed [ 460.721121][ T6806] team0 (unregistering): Port device team_slave_0 removed [ 461.040829][T23495] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7256'. [ 461.175629][ T5099] Bluetooth: hci0: command tx timeout [ 461.245601][T23519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7264'. [ 461.499855][T23536] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 462.210143][T23570] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 462.761039][T23287] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 462.793391][T23604] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7292'. [ 462.809007][T23287] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 462.827111][T23287] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 462.847417][T23287] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 463.118508][T23287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.178640][T23287] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.208081][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.215315][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.249844][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.257074][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.258524][ T5099] Bluetooth: hci0: command tx timeout [ 463.769124][T23287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.874166][T23287] veth0_vlan: entered promiscuous mode [ 463.890968][T23287] veth1_vlan: entered promiscuous mode [ 463.997362][T23287] veth0_macvtap: entered promiscuous mode [ 464.037598][T23287] veth1_macvtap: entered promiscuous mode [ 464.104467][T23287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.143480][T23287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.174904][T23287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.208045][T23287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.234943][T23287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.252489][T23287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.263449][T23287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.275240][T23287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.296733][T23287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.400948][T23287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.452053][T23287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.484885][T23287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.514947][T23287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.535354][T23287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.549951][T23287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.585178][T23287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.616953][T23287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.637863][T23287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.697567][T23287] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.731493][T23287] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.773587][T23287] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.809868][T23287] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.012860][ T5110] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 465.030587][ T5110] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 465.040643][ T5110] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 465.059505][ T5110] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 465.075884][ T5110] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 465.087309][ T5110] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 465.190174][ T2418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.205117][ T2418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.474142][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.535494][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.575481][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.733556][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.037217][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.262580][ T51] bond0: (slave netdevsim0): Releasing backup interface [ 466.297634][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.841687][T23714] chnl_net:caif_netlink_parms(): no params data found [ 467.001757][ T51] bridge_slave_1: left allmulticast mode [ 467.011397][ T51] bridge_slave_1: left promiscuous mode [ 467.022249][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.063362][ T51] bridge_slave_0: left allmulticast mode [ 467.076993][ T51] bridge_slave_0: left promiscuous mode [ 467.090063][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.183731][ T5110] Bluetooth: hci4: command tx timeout [ 467.770336][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.792428][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.813525][ T51] bond0 (unregistering): Released all slaves [ 468.043764][T23714] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.078801][T23714] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.106832][T23714] bridge_slave_0: entered allmulticast mode [ 468.114277][T23714] bridge_slave_0: entered promiscuous mode [ 468.143118][T23714] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.165415][T23714] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.172679][T23714] bridge_slave_1: entered allmulticast mode [ 468.195385][T23714] bridge_slave_1: entered promiscuous mode [ 468.521092][T23714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.567986][T23714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.874098][T23714] team0: Port device team_slave_0 added [ 468.973940][T23714] team0: Port device team_slave_1 added [ 469.089942][ T51] hsr_slave_0: left promiscuous mode [ 469.121070][ T51] hsr_slave_1: left promiscuous mode [ 469.155839][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.179441][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.207075][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.214543][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.256050][ T5110] Bluetooth: hci4: command tx timeout [ 469.352034][ T51] veth1_macvtap: left promiscuous mode [ 469.392400][ T51] veth0_macvtap: left promiscuous mode [ 469.408435][ T51] veth1_vlan: left promiscuous mode [ 469.424086][ T51] veth0_vlan: left promiscuous mode [ 469.962286][ T51] team0 (unregistering): Port device team_slave_1 removed [ 470.008728][ T51] team0 (unregistering): Port device team_slave_0 removed [ 470.356497][T23714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.363481][T23714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.401574][T23714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.490876][T23714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.517250][T23714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.592321][T23714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.625309][T23983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7418'. [ 470.823550][T23714] hsr_slave_0: entered promiscuous mode [ 470.884562][T23714] hsr_slave_1: entered promiscuous mode [ 471.335003][ T5110] Bluetooth: hci4: command tx timeout [ 471.953369][T23714] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 472.002126][T23714] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 472.033071][T23714] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 472.111145][T23714] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 472.205020][T24085] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7457'. [ 472.331389][T23714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.414520][T23714] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.433185][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.440404][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.486772][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.493956][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.008757][T23714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.087121][T24139] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 473.128780][T24142] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7475'. [ 473.135524][T23714] veth0_vlan: entered promiscuous mode [ 473.181016][T23714] veth1_vlan: entered promiscuous mode [ 473.303417][T23714] veth0_macvtap: entered promiscuous mode [ 473.328039][T23714] veth1_macvtap: entered promiscuous mode [ 473.382616][T23714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.415060][ T5110] Bluetooth: hci4: command tx timeout [ 473.420574][T23714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.444668][T23714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.482556][T23714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.511122][T23714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.541833][T23714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.570736][T23714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.594848][T23714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.609932][T23714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.643226][T23714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.655881][T23714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.666368][T23714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.693305][T23714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.703688][T23714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.715061][T23714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.723660][T24174] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 473.727216][T23714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.747706][T23714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.759881][T23714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.804733][T23714] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.832180][T23714] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.853909][T23714] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.863271][T23714] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.875598][T24179] IPv6: Can't replace route, no match found [ 473.908012][T24180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7487'. [ 474.093251][T24194] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 474.116954][ T2460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.135834][ T2460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.238288][ T2418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.251862][ T2418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.425549][T24209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7503'. [ 474.447328][T24209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7503'. [ 474.678207][T24237] IPv6: Can't replace route, no match found [ 474.915237][T24252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7522'. [ 474.952838][T24252] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7522'. [ 475.617531][T24304] x_tables: unsorted underflow at hook 4 [ 475.972789][T24332] IPv6: Can't replace route, no match found [ 476.422017][T24364] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7569'. [ 476.491253][T24367] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7570'. [ 476.650616][T24375] netlink: 496 bytes leftover after parsing attributes in process `syz.4.7574'. [ 476.797193][T24389] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7581'. [ 477.306062][T24412] netlink: 496 bytes leftover after parsing attributes in process `syz.4.7589'. [ 477.389144][T24418] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7592'. [ 477.745889][T24443] netlink: 496 bytes leftover after parsing attributes in process `syz.0.7601'. [ 477.804093][T24447] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7603'. [ 477.826118][T24449] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7604'. [ 478.576832][T24470] netlink: 496 bytes leftover after parsing attributes in process `syz.4.7613'. [ 479.324332][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802d19ec00: rx timeout, send abort [ 479.333416][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802d19cc00: rx timeout, send abort [ 479.833085][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802d19ec00: abort rx timeout. Force session deactivation [ 479.844788][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802d19cc00: abort rx timeout. Force session deactivation [ 479.962405][T24515] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 481.118592][T24544] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 481.162079][T24546] netlink: 'syz.3.7648': attribute type 72 has an invalid length. [ 481.550346][T24572] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 481.551977][T24573] netlink: 'syz.0.7661': attribute type 72 has an invalid length. [ 481.590006][T24573] __nla_validate_parse: 9 callbacks suppressed [ 481.590027][T24573] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7661'. [ 481.683950][T24579] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7664'. [ 481.844643][T24588] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7668'. [ 481.982863][T24601] netlink: 'syz.3.7674': attribute type 72 has an invalid length. [ 481.992051][T24601] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7674'. [ 482.403758][T24628] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7683'. [ 482.640227][T24641] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7688'. [ 482.683773][T24644] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 482.874130][T24658] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7696'. [ 484.163512][T24740] syzkaller0: entered promiscuous mode [ 484.170636][T24740] syzkaller0: entered allmulticast mode [ 484.870749][T24774] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7738'. [ 486.678590][T24803] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7750'. [ 486.844094][T24811] netlink: 316 bytes leftover after parsing attributes in process `syz.2.7751'. [ 487.079023][T24824] syzkaller0: entered promiscuous mode [ 487.089717][T24824] syzkaller0: entered allmulticast mode [ 488.377080][T24906] netlink: 316 bytes leftover after parsing attributes in process `syz.1.7793'. [ 488.900644][T24929] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 489.924133][T24895] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7788'. [ 490.583921][T24971] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7820'. [ 490.621825][ T5099] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 490.634464][ T5099] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 490.692683][ T5099] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 490.714380][ T5099] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 490.715719][T24978] netlink: 316 bytes leftover after parsing attributes in process `syz.0.7822'. [ 490.741197][ T5099] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 490.748872][ T5099] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 490.830297][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.008174][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.181369][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.259537][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.296985][T25003] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7833'. [ 491.529067][ T51] bridge_slave_1: left allmulticast mode [ 491.545585][ T51] bridge_slave_1: left promiscuous mode [ 491.552740][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.577658][ T51] bridge_slave_0: left allmulticast mode [ 491.586691][ T51] bridge_slave_0: left promiscuous mode [ 491.592485][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.599667][T25017] netlink: 316 bytes leftover after parsing attributes in process `syz.3.7837'. [ 492.237542][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.264017][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.276558][ T51] bond0 (unregistering): Released all slaves [ 492.289009][T24972] chnl_net:caif_netlink_parms(): no params data found [ 492.331412][T25046] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7844'. [ 492.480875][T25049] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7845'. [ 492.826631][T24972] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.840222][T24972] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.849804][T24972] bridge_slave_0: entered allmulticast mode [ 492.861929][ T5099] Bluetooth: hci3: command tx timeout [ 492.878397][T24972] bridge_slave_0: entered promiscuous mode [ 492.893302][T24972] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.902234][T24972] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.919284][T24972] bridge_slave_1: entered allmulticast mode [ 492.927028][T24972] bridge_slave_1: entered promiscuous mode [ 493.216198][T24972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.262690][T25088] netlink: 316 bytes leftover after parsing attributes in process `syz.3.7855'. [ 493.280237][T24972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.474673][T24972] team0: Port device team_slave_0 added [ 493.572804][ T51] hsr_slave_0: left promiscuous mode [ 493.597223][ T51] hsr_slave_1: left promiscuous mode [ 493.608176][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.615713][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.626618][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.639437][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.661698][ T51] veth1_macvtap: left promiscuous mode [ 493.667455][ T51] veth0_macvtap: left promiscuous mode [ 493.673403][ T51] veth1_vlan: left promiscuous mode [ 493.679259][ T51] veth0_vlan: left promiscuous mode [ 493.778528][ T51] pim6reg (unregistering): left allmulticast mode [ 494.089074][ T51] batadv_slave_0 (unregistering): left allmulticast mode [ 494.129932][ T51] team0 (unregistering): Port device team_slave_1 removed [ 494.174405][ T51] team0 (unregistering): Port device team_slave_0 removed [ 494.530618][T24972] team0: Port device team_slave_1 added [ 494.573599][T25102] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7860'. [ 494.713373][T24972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.747537][T24972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.760854][T25115] netlink: 316 bytes leftover after parsing attributes in process `syz.3.7865'. [ 494.777584][T24972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.810811][T24972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.835889][T24972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.907058][T24972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.935046][ T5099] Bluetooth: hci3: command tx timeout [ 495.084645][T24972] hsr_slave_0: entered promiscuous mode [ 495.103585][T24972] hsr_slave_1: entered promiscuous mode [ 495.120620][T24972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.134730][T24972] Cannot create hsr debugfs directory [ 495.148847][T25126] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7867'. [ 495.334703][T25144] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7871'. [ 495.572831][T25157] netlink: 316 bytes leftover after parsing attributes in process `syz.3.7877'. [ 495.782412][T25165] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7881'. [ 496.031314][T25172] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7883'. [ 496.516251][T24972] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 496.587564][T24972] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 496.664930][T24972] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 496.711096][T24972] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 497.015027][ T5099] Bluetooth: hci3: command tx timeout [ 497.052379][T24972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.142696][T24972] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.247717][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.254976][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.312156][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.319391][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.406240][T24972] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 497.428474][T24972] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 497.863496][T24972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.016091][T25283] syzkaller1: entered promiscuous mode [ 498.031423][T25283] syzkaller1: entered allmulticast mode [ 498.053370][T24972] veth0_vlan: entered promiscuous mode [ 498.190031][T24972] veth1_vlan: entered promiscuous mode [ 498.316699][T24972] veth0_macvtap: entered promiscuous mode [ 498.341121][T24972] veth1_macvtap: entered promiscuous mode [ 498.382980][T25295] __nla_validate_parse: 5 callbacks suppressed [ 498.382999][T25295] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7922'. [ 498.453432][T24972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.499310][T24972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.526129][T24972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.561222][T24972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.598522][T24972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.652743][T24972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.683721][T24972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.714681][T24972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.738071][T24972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.821137][T24972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.859136][T24972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.890146][T24972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.925440][T24972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.962701][T24972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.000527][T24972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.030389][T24972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.053844][T24972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.089165][T24972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.095036][ T5099] Bluetooth: hci3: command tx timeout [ 499.228939][T25319] syzkaller0: entered promiscuous mode [ 499.248114][T25319] syzkaller0: entered allmulticast mode [ 499.460173][T25350] syzkaller1: entered promiscuous mode [ 499.466697][T25350] syzkaller1: entered allmulticast mode [ 501.142245][T24972] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.151575][T24972] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.160429][T24972] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.169201][T24972] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.567248][ T6806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.589798][ T6806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.614955][ T6806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.635689][ T6806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.742626][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.862940][T25428] syzkaller0: entered promiscuous mode [ 501.879593][T25428] syzkaller0: entered allmulticast mode [ 504.127851][T25509] syzkaller1: entered promiscuous mode [ 504.133372][T25509] syzkaller1: entered allmulticast mode [ 504.638380][T25547] syz_tun: entered promiscuous mode [ 504.905242][T25564] syzkaller1: entered promiscuous mode [ 504.921395][T25564] syzkaller1: entered allmulticast mode [ 505.455819][T25607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8011'. [ 505.978250][T25638] netlink: 504 bytes leftover after parsing attributes in process `syz.0.8022'. [ 506.005097][T25641] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8024'. [ 506.619338][T25678] netlink: 504 bytes leftover after parsing attributes in process `syz.2.8038'. [ 507.458770][T25706] syzkaller0: entered promiscuous mode [ 507.480079][T25706] syzkaller0: entered allmulticast mode [ 509.646277][T25771] netlink: 496 bytes leftover after parsing attributes in process `syz.2.8073'. [ 510.325971][T25807] netlink: 496 bytes leftover after parsing attributes in process `syz.1.8085'. [ 510.767459][T25837] netlink: 496 bytes leftover after parsing attributes in process `syz.0.8098'. [ 511.912399][T25916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8135'. [ 512.451273][T25951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8147'. [ 512.924559][T25981] syzkaller1: entered promiscuous mode [ 512.931307][T25981] syzkaller1: entered allmulticast mode [ 514.364504][T26066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8195'. [ 514.950096][T26106] syzkaller1: entered promiscuous mode [ 514.969572][T26106] syzkaller1: entered allmulticast mode [ 515.109693][T26109] syzkaller1: entered promiscuous mode [ 515.115516][T26109] syzkaller1: entered allmulticast mode [ 515.495347][T26132] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8223'. [ 516.028821][T26174] vlan2: entered promiscuous mode [ 516.034056][T26174] batadv0: entered promiscuous mode [ 516.040325][T26174] vlan2: entered allmulticast mode [ 516.052828][T26174] batadv0: entered allmulticast mode [ 516.072345][T26174] batadv0: left allmulticast mode [ 516.082230][T26174] batadv0: left promiscuous mode [ 516.850230][T26225] vlan2: entered promiscuous mode [ 516.872856][T26225] batadv0: entered promiscuous mode [ 516.905193][T26225] vlan2: entered allmulticast mode [ 516.910361][T26225] batadv0: entered allmulticast mode [ 516.943672][T26225] batadv0: left allmulticast mode [ 516.961728][T26225] batadv0: left promiscuous mode [ 517.558126][T26287] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8288'. [ 517.900452][T26314] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8301'. [ 518.597564][ T5110] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 518.609839][ T5110] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 518.620425][ T5110] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 518.633033][ T5110] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 518.641753][ T5110] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 518.649246][ T5110] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 518.843477][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.986511][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.118794][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.278204][T26387] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8330'. [ 519.282840][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.552203][T26351] chnl_net:caif_netlink_parms(): no params data found [ 519.624926][ T51] bridge_slave_1: left allmulticast mode [ 519.630617][ T51] bridge_slave_1: left promiscuous mode [ 519.646293][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.664473][ T51] bridge_slave_0: left allmulticast mode [ 519.670429][ T51] bridge_slave_0: left promiscuous mode [ 519.678665][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.861036][T26413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8341'. [ 520.111101][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.122173][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.133572][ T51] bond0 (unregistering): Released all slaves [ 520.441141][T26351] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.468848][T26351] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.496533][T26440] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8351'. [ 520.512545][T26351] bridge_slave_0: entered allmulticast mode [ 520.528056][T26351] bridge_slave_0: entered promiscuous mode [ 520.587569][T26351] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.604293][T26351] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.646912][T26351] bridge_slave_1: entered allmulticast mode [ 520.654342][T26351] bridge_slave_1: entered promiscuous mode [ 520.704245][ T5099] Bluetooth: hci4: command tx timeout [ 520.890813][T26351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.003269][T26351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.201372][T26351] team0: Port device team_slave_0 added [ 521.302943][T26351] team0: Port device team_slave_1 added [ 521.374552][ T51] hsr_slave_0: left promiscuous mode [ 521.381016][ T51] hsr_slave_1: left promiscuous mode [ 521.394454][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.403864][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.412564][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.421913][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.444561][ T51] veth1_macvtap: left promiscuous mode [ 521.450462][ T51] veth0_macvtap: left promiscuous mode [ 521.456834][ T51] veth1_vlan: left promiscuous mode [ 521.462289][ T51] veth0_vlan: left promiscuous mode [ 521.638226][T26494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8365'. [ 522.222878][ T51] team0 (unregistering): Port device team_slave_1 removed [ 522.266383][ T51] team0 (unregistering): Port device team_slave_0 removed [ 522.577405][T26351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.584488][T26351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.643515][T26351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.682159][T26351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.689570][T26351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.723757][T26522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8377'. [ 522.730275][T26351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.779787][ T5099] Bluetooth: hci4: command tx timeout [ 522.857106][T26351] hsr_slave_0: entered promiscuous mode [ 522.879415][T26351] hsr_slave_1: entered promiscuous mode [ 523.659178][T26572] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8387'. [ 523.922953][T26351] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 523.944416][T26351] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 523.962827][T26351] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 523.975511][T26351] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 524.148201][T26351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.208053][T26351] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.231795][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.239026][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.248283][T26600] netlink: 'syz.1.8393': attribute type 3 has an invalid length. [ 524.267802][T26600] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8393'. [ 524.288162][T23000] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.295437][T23000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.691996][T26351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.807053][T26351] veth0_vlan: entered promiscuous mode [ 524.827848][T26351] veth1_vlan: entered promiscuous mode [ 524.865564][ T5099] Bluetooth: hci4: command tx timeout [ 524.888650][T26351] veth0_macvtap: entered promiscuous mode [ 524.901872][T26351] veth1_macvtap: entered promiscuous mode [ 524.923785][T26351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.938489][T26351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.950366][T26351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.961295][T26351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.971640][T26351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.982671][T26351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.005130][T26351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.016995][T26351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.038814][T26351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.083797][T26351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.103425][T26351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.125369][T26351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.140457][T26351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.154385][T26351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.169185][T26351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.179840][T26351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.192092][T26351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.212659][T26351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.233637][T26351] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.250737][T26351] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.267176][T26351] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.289629][T26351] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.462078][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.478595][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.540255][ T6789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.559905][ T6789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.028031][ T5110] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 526.043870][ T5110] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 526.053688][ T5110] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 526.079661][ T5110] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 526.096657][ T5110] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 526.104068][ T5110] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 526.213691][ T6799] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.346542][ T6799] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.479923][ T6799] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.583298][ T6799] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.897161][ T6799] bridge_slave_1: left allmulticast mode [ 526.921305][ T6799] bridge_slave_1: left promiscuous mode [ 526.934116][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.945698][ T5099] Bluetooth: hci4: command tx timeout [ 526.955082][ T6799] bridge_slave_0: left allmulticast mode [ 526.976812][ T6799] bridge_slave_0: left promiscuous mode [ 526.985323][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.544422][ T6799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.557226][ T6799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.570551][ T6799] bond0 (unregistering): Released all slaves [ 527.867219][T26668] chnl_net:caif_netlink_parms(): no params data found [ 528.215468][ T5099] Bluetooth: hci0: command tx timeout [ 528.700833][T26668] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.721732][T26668] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.732609][T26668] bridge_slave_0: entered allmulticast mode [ 528.742636][T26668] bridge_slave_0: entered promiscuous mode [ 528.787097][T26668] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.795666][T26668] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.803014][T26668] bridge_slave_1: entered allmulticast mode [ 528.813611][T26668] bridge_slave_1: entered promiscuous mode [ 529.125174][T26668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.138461][T26668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.414148][ T6799] hsr_slave_0: left promiscuous mode [ 529.430860][ T6799] hsr_slave_1: left promiscuous mode [ 529.442331][ T6799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.455913][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.474425][ T6799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.482480][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.525588][ T6799] veth1_macvtap: left promiscuous mode [ 529.535501][ T6799] veth0_macvtap: left promiscuous mode [ 529.551689][ T6799] veth1_vlan: left promiscuous mode [ 529.557264][ T6799] veth0_vlan: left promiscuous mode [ 530.032765][ T6799] team0 (unregistering): Port device team_slave_1 removed [ 530.071428][ T6799] team0 (unregistering): Port device team_slave_0 removed [ 530.306750][ T5099] Bluetooth: hci0: command tx timeout [ 530.350475][T26668] team0: Port device team_slave_0 added [ 530.373644][T26668] team0: Port device team_slave_1 added [ 530.407954][T26810] netlink: 'syz.4.8437': attribute type 27 has an invalid length. [ 530.654585][T26810] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.950599][T26810] infiniband syz2: set down [ 531.014470][T26810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.064396][T26810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.405140][T26810] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.414074][T26810] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.484850][T26810] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.493774][T26810] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.617603][T26810] ipip0: left promiscuous mode [ 531.723477][T26844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8445'. [ 531.810295][T26888] syzkaller1: entered promiscuous mode [ 531.816678][T26888] syzkaller1: entered allmulticast mode [ 531.838384][T26668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.858962][T26668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.888884][T26668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.968944][T26668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.986189][T26668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.015429][T26668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.262696][T26668] hsr_slave_0: entered promiscuous mode [ 532.290999][T26668] hsr_slave_1: entered promiscuous mode [ 532.319947][T26668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 532.337267][T26668] Cannot create hsr debugfs directory [ 532.374985][ T5099] Bluetooth: hci0: command tx timeout [ 533.308255][T26668] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 533.335723][T26668] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 533.359148][T26668] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 533.390403][T26960] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8465'. [ 533.408030][T26668] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 533.609040][T26668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.664963][T26668] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.694509][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.701745][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.748999][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.756200][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.240654][T26668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.328721][T26668] veth0_vlan: entered promiscuous mode [ 534.340121][T27010] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8476'. [ 534.361092][T26668] veth1_vlan: entered promiscuous mode [ 534.403827][T26668] veth0_macvtap: entered promiscuous mode [ 534.434070][T26668] veth1_macvtap: entered promiscuous mode [ 534.455988][ T5099] Bluetooth: hci0: command tx timeout [ 534.480873][T26668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.505254][T26668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.543915][T26668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.589349][T26668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.607272][T26668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.619069][T26668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.659488][T26668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.699749][T26668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.734922][T26668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.764089][T26668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.784845][T26668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.794887][T26668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.812557][T26668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.825879][T26668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.838563][T26668] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.847653][T26668] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.856849][T26668] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.874167][T26668] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.090622][ T6782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.125535][ T6782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.164514][T27045] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8486'. [ 535.177850][ T6782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.188436][ T6782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.780229][T27085] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8496'. [ 536.306548][T27124] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8508'. [ 539.609497][T27333] syzkaller1: entered promiscuous mode [ 539.623788][T27333] syzkaller1: entered allmulticast mode [ 540.247207][T27365] syzkaller1: entered promiscuous mode [ 540.256506][T27365] syzkaller1: entered allmulticast mode [ 540.885806][T27394] syzkaller1: entered promiscuous mode [ 540.891319][T27394] syzkaller1: entered allmulticast mode [ 541.051723][T27407] netlink: 'syz.1.8619': attribute type 21 has an invalid length. [ 541.470184][T27429] syzkaller1: entered promiscuous mode [ 541.482157][T27429] syzkaller1: entered allmulticast mode [ 541.783740][T27446] openvswitch: netlink: Missing key (keys=44, expected=200000) [ 542.066963][T27465] syzkaller1: entered promiscuous mode [ 542.073180][T27465] syzkaller1: entered allmulticast mode [ 542.188968][T27473] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 542.582973][T27501] syzkaller1: entered promiscuous mode [ 542.600860][T27501] syzkaller1: entered allmulticast mode [ 542.803976][T27516] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 543.074716][T27537] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 543.133380][T27539] syzkaller1: entered promiscuous mode [ 543.143249][T27539] syzkaller1: entered allmulticast mode [ 543.622039][T27575] Bluetooth: MGMT ver 1.22 [ 543.703471][T27577] syzkaller1: entered promiscuous mode [ 543.722292][T27577] syzkaller1: entered allmulticast mode [ 544.200443][T27619] syzkaller1: entered promiscuous mode [ 544.207626][T27619] syzkaller1: entered allmulticast mode [ 544.788682][T27667] syzkaller1: entered promiscuous mode [ 544.798663][T27667] syzkaller1: entered allmulticast mode [ 544.942106][T27677] syzkaller1: entered promiscuous mode [ 544.955048][T27677] syzkaller1: entered allmulticast mode [ 545.248330][T27699] syzkaller1: entered promiscuous mode [ 545.266096][T27699] syzkaller1: entered allmulticast mode [ 545.544471][T27715] syzkaller1: entered promiscuous mode [ 545.552141][T27715] syzkaller1: entered allmulticast mode [ 545.925477][T27739] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8761'. [ 546.210246][ T5110] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 546.226291][ T5110] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 546.238990][ T5110] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 546.249211][ T5110] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 546.258553][ T5110] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 546.267619][ T5110] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 546.471810][ T6799] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.623389][ T6799] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.662862][T27773] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8772'. [ 546.786809][ T6799] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.984209][ T6799] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.254977][T27754] chnl_net:caif_netlink_parms(): no params data found [ 547.323936][ T6799] bridge_slave_1: left allmulticast mode [ 547.343289][ T6799] bridge_slave_1: left promiscuous mode [ 547.349404][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.362145][ T6799] bridge_slave_0: left allmulticast mode [ 547.369648][ T6799] bridge_slave_0: left promiscuous mode [ 547.376606][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.776756][ T6799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.792151][ T6799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.802907][ T6799] bond0 (unregistering): Released all slaves [ 547.936089][T27754] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.943349][T27754] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.953503][T27754] bridge_slave_0: entered allmulticast mode [ 547.960956][T27754] bridge_slave_0: entered promiscuous mode [ 547.975735][T27754] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.988444][T27754] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.996105][T27754] bridge_slave_1: entered allmulticast mode [ 548.005559][T27754] bridge_slave_1: entered promiscuous mode [ 548.157803][T27754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.182760][T27754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.297066][ T5099] Bluetooth: hci1: command tx timeout [ 548.363580][T27754] team0: Port device team_slave_0 added [ 548.376780][T27754] team0: Port device team_slave_1 added [ 548.546432][T27754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.553415][T27754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.580658][T27754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.674746][T27754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.702279][T27754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.754308][T27754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.793125][T27859] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8793'. [ 548.931274][ T6799] hsr_slave_0: left promiscuous mode [ 548.939302][ T6799] hsr_slave_1: left promiscuous mode [ 548.965330][ T6799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.972780][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.986079][ T6799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.993519][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.039538][ T6799] veth1_macvtap: left promiscuous mode [ 549.047343][ T6799] veth0_macvtap: left promiscuous mode [ 549.053758][ T6799] veth1_vlan: left promiscuous mode [ 549.060560][ T6799] veth0_vlan: left promiscuous mode [ 549.483903][ T6799] team0 (unregistering): Port device team_slave_1 removed [ 549.520982][ T6799] team0 (unregistering): Port device team_slave_0 removed [ 549.884195][T27864] syzkaller1: entered promiscuous mode [ 549.891113][T27864] syzkaller1: entered allmulticast mode [ 550.038319][T27754] hsr_slave_0: entered promiscuous mode [ 550.058727][T27754] hsr_slave_1: entered promiscuous mode [ 550.071280][T27754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 550.100601][T27754] Cannot create hsr debugfs directory [ 550.193202][T27892] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8804'. [ 550.235333][T27892] team_slave_0: entered promiscuous mode [ 550.248413][T27892] team_slave_0: entered allmulticast mode [ 550.375698][ T5099] Bluetooth: hci1: command tx timeout [ 550.704647][T27924] syz_tun: entered promiscuous mode [ 550.715827][T27924] macsec1: entered promiscuous mode [ 550.729430][T27924] macsec1: entered allmulticast mode [ 550.743396][T27924] syz_tun: entered allmulticast mode [ 550.761352][T27924] syz_tun: left allmulticast mode [ 550.770992][T27924] syz_tun: left promiscuous mode [ 551.075843][T27932] syzkaller1: entered promiscuous mode [ 551.084047][T27932] syzkaller1: entered allmulticast mode [ 551.149965][T27944] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8817'. [ 551.159202][T27944] team_slave_0: entered promiscuous mode [ 551.166869][T27944] team_slave_0: entered allmulticast mode [ 551.332361][T27754] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 551.400687][T27754] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 551.459152][T27754] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 551.477796][T27754] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 551.796151][T27754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.828333][T27754] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.859197][ T929] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.866416][ T929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.913562][ T929] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.920771][ T929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.023181][T27990] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8827'. [ 552.033993][T27991] syzkaller1: entered promiscuous mode [ 552.040805][T27991] syzkaller1: entered allmulticast mode [ 552.455028][ T5099] Bluetooth: hci1: command tx timeout [ 552.540810][T27754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.694137][T27754] veth0_vlan: entered promiscuous mode [ 552.770717][T28029] syzkaller0: entered promiscuous mode [ 552.785448][T28029] syzkaller0: entered allmulticast mode [ 552.828751][T27754] veth1_vlan: entered promiscuous mode [ 552.926613][T27754] veth0_macvtap: entered promiscuous mode [ 552.939508][T27754] veth1_macvtap: entered promiscuous mode [ 553.024213][T27754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.042873][T27754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.053664][T27754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.074656][T27754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.086304][T27754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.097461][T27754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.110569][T27754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.136752][T28047] syz_tun: entered promiscuous mode [ 553.177031][T27754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.204822][T27754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.214676][T27754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.254954][T27754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.272422][T27754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.292148][T27754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.312820][T27754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.341162][T27754] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.355824][T27754] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.364691][T27754] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.374466][T27754] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.392310][T28057] syzkaller1: entered promiscuous mode [ 553.398090][T28057] syzkaller1: entered allmulticast mode [ 554.545016][ T5099] Bluetooth: hci1: command tx timeout [ 555.362388][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.381032][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.490287][ T6799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.502496][ T6799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.916680][T28132] syzkaller0: entered promiscuous mode [ 555.922582][T28132] syzkaller0: entered allmulticast mode [ 556.174527][T28162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8867'. [ 556.304103][T28168] syz_tun: entered promiscuous mode [ 558.927276][T28273] syzkaller0: entered promiscuous mode [ 558.933053][T28273] syzkaller0: entered allmulticast mode [ 562.177314][T28394] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 562.272629][T28398] syzkaller1: entered promiscuous mode [ 562.292016][T28398] syzkaller1: entered allmulticast mode [ 563.178801][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.342158][T28472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8999'. [ 564.108764][T28502] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9014'. [ 564.683920][T28544] netlink: 'syz.1.9033': attribute type 11 has an invalid length. [ 565.041894][T28559] batadv_slave_0: entered promiscuous mode [ 565.103642][T28558] batadv_slave_0: left promiscuous mode [ 565.235794][T28567] syzkaller1: entered promiscuous mode [ 565.245380][T28567] syzkaller1: entered allmulticast mode [ 565.750308][T28604] syzkaller1: entered promiscuous mode [ 565.756035][T28604] syzkaller1: entered allmulticast mode [ 565.932770][T28614] netlink: 'syz.3.9062': attribute type 10 has an invalid length. [ 565.958100][T28614] team0: Port device netdevsim0 added [ 565.967979][T28614] netlink: 'syz.3.9062': attribute type 10 has an invalid length. [ 565.987436][T28614] team0: Port device netdevsim0 removed [ 565.996779][T28614] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 566.104747][T28623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9065'. [ 566.434177][T28633] syzkaller1: entered promiscuous mode [ 566.440008][T28633] syzkaller1: entered allmulticast mode [ 566.748179][T20801] IPVS: starting estimator thread 0... [ 566.845883][T28655] IPVS: using max 16 ests per chain, 38400 per kthread [ 567.241185][T28683] syzkaller1: entered promiscuous mode [ 567.247152][T28683] syzkaller1: entered allmulticast mode [ 567.359430][T23000] IPVS: starting estimator thread 0... [ 567.659403][T28693] IPVS: using max 19 ests per chain, 45600 per kthread [ 567.982415][T28729] syzkaller1: entered promiscuous mode [ 567.991530][T28729] syzkaller1: entered allmulticast mode [ 568.577938][T28763] syzkaller1: entered promiscuous mode [ 568.580891][T28766] netlink: 'syz.1.9117': attribute type 11 has an invalid length. [ 568.632283][T28763] syzkaller1: entered allmulticast mode [ 569.465407][T28812] syzkaller1: entered promiscuous mode [ 569.471008][T28812] syzkaller1: entered allmulticast mode [ 569.835682][T28831] IPVS: sed: SCTP 127.0.0.1:0 - no destination available [ 569.905903][T28833] netlink: 112 bytes leftover after parsing attributes in process `syz.2.9140'. [ 570.072604][T20801] IPVS: starting estimator thread 0... [ 570.089371][T28841] IPVS: sed: SCTP 127.0.0.1:0 - no destination available [ 570.126885][T28845] syzkaller1: entered promiscuous mode [ 570.139173][T28845] syzkaller1: entered allmulticast mode [ 570.185079][T28842] IPVS: using max 20 ests per chain, 48000 per kthread [ 570.495515][ T5110] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 570.514220][ T5110] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 570.522976][ T5110] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 570.537974][ T5110] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 570.546621][ T5110] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 570.561802][ T5110] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 570.602626][T28866] netlink: 112 bytes leftover after parsing attributes in process `syz.0.9152'. [ 570.710100][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.812207][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.908399][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.026476][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.071769][T28859] chnl_net:caif_netlink_parms(): no params data found [ 571.151938][T28859] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.159761][T28859] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.167816][T28859] bridge_slave_0: entered allmulticast mode [ 571.174600][T28859] bridge_slave_0: entered promiscuous mode [ 571.183868][T28859] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.191401][T28859] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.198742][T28859] bridge_slave_1: entered allmulticast mode [ 571.206168][T28859] bridge_slave_1: entered promiscuous mode [ 571.315762][T28859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.329893][T28859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.349996][T28890] syzkaller1: entered promiscuous mode [ 571.356756][T28890] syzkaller1: entered allmulticast mode [ 571.387164][ T11] bridge_slave_1: left allmulticast mode [ 571.393094][ T11] bridge_slave_1: left promiscuous mode [ 571.399668][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.409747][ T11] bridge_slave_0: left allmulticast mode [ 571.415703][ T11] bridge_slave_0: left promiscuous mode [ 571.421579][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.775130][T28901] netlink: 112 bytes leftover after parsing attributes in process `syz.4.9163'. [ 571.902936][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.924005][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.942900][ T11] bond0 (unregistering): Released all slaves [ 572.032728][T28859] team0: Port device team_slave_0 added [ 572.080674][T28859] team0: Port device team_slave_1 added [ 572.237741][T28859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.257674][T28859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.295026][T28859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.315074][T28859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.322056][T28859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.356334][T28859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.506092][T28930] netlink: 112 bytes leftover after parsing attributes in process `syz.4.9173'. [ 572.518673][T28931] IPVS: sed: SCTP 127.0.0.1:0 - no destination available [ 572.617877][ T5110] Bluetooth: hci3: command tx timeout [ 572.649690][T28859] hsr_slave_0: entered promiscuous mode [ 572.671440][T28859] hsr_slave_1: entered promiscuous mode [ 572.693428][T28859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 572.716570][T28859] Cannot create hsr debugfs directory [ 572.904502][T28945] syzkaller1: entered promiscuous mode [ 572.922431][T28945] syzkaller1: entered allmulticast mode [ 573.128085][ T11] hsr_slave_0: left promiscuous mode [ 573.139193][ T11] hsr_slave_1: left promiscuous mode [ 573.169049][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.184923][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.201564][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.218296][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.270863][ T11] veth1_macvtap: left promiscuous mode [ 573.283084][ T11] veth0_macvtap: left promiscuous mode [ 573.293778][ T11] veth1_vlan: left promiscuous mode [ 573.313944][ T11] veth0_vlan: left promiscuous mode [ 573.378649][T28974] netlink: 112 bytes leftover after parsing attributes in process `syz.2.9184'. [ 573.441390][T28976] IPVS: sed: SCTP 127.0.0.1:0 - no destination available [ 573.873091][ T11] team0 (unregistering): Port device team_slave_1 removed [ 573.924430][ T11] team0 (unregistering): Port device team_slave_0 removed [ 574.396824][T28994] netlink: 112 bytes leftover after parsing attributes in process `syz.0.9194'. [ 574.457353][T28998] netlink: 'syz.2.9195': attribute type 11 has an invalid length. [ 574.698580][ T5110] Bluetooth: hci3: command tx timeout [ 574.941269][T29027] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9206'. [ 575.554486][T29066] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9216'. [ 575.571305][T29067] netlink: 'syz.0.9215': attribute type 11 has an invalid length. [ 575.590543][T28859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 575.645847][T28859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 575.681776][T28859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 575.789445][T28859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 576.068293][T28859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.118175][T29094] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9227'. [ 576.134552][T28859] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.175688][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.182888][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.243355][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.250658][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.777705][ T5110] Bluetooth: hci3: command tx timeout [ 576.869692][T29141] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9239'. [ 576.903513][T28859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.037790][T28859] veth0_vlan: entered promiscuous mode [ 577.063802][T28859] veth1_vlan: entered promiscuous mode [ 577.221872][T28859] veth0_macvtap: entered promiscuous mode [ 577.261022][T28859] veth1_macvtap: entered promiscuous mode [ 577.311102][T28859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.332166][T28859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.367548][T28859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.382609][T29175] IPVS: sed: SCTP 127.0.0.1:0 - no destination available [ 577.404858][T28859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.421996][T28859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.442215][T28859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.467853][T28859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.514213][T28859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.534405][T28859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.549344][T29185] IPVS: sed: SCTP 127.0.0.1:0 - no destination available [ 577.551456][T28859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.573780][T28859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.591357][T28859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.614218][T28859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.626731][T28859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.648967][T28859] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.683812][T28859] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.691704][T29192] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9254'. [ 577.698997][T28859] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.711997][T28859] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.009254][ T6782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.031922][ T6782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.114059][ T2418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.145117][ T2418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.298832][T29225] netlink: 'syz.4.9263': attribute type 11 has an invalid length. [ 578.600463][T29246] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9266'. [ 578.855498][ T5110] Bluetooth: hci3: command tx timeout [ 579.351176][T29300] netlink: 116 bytes leftover after parsing attributes in process `syz.2.9287'. [ 579.929488][T29345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9310'. [ 580.857321][T29410] netlink: 'syz.2.9336': attribute type 11 has an invalid length. [ 581.455654][T29455] netlink: 'syz.4.9354': attribute type 11 has an invalid length. [ 581.903765][T29489] syzkaller1: entered promiscuous mode [ 581.921782][T29489] syzkaller1: entered allmulticast mode [ 581.971760][T29495] netlink: 'syz.3.9371': attribute type 11 has an invalid length. [ 582.446883][T29529] syzkaller1: entered promiscuous mode [ 582.460134][T29529] syzkaller1: entered allmulticast mode [ 582.557396][T29538] netlink: 'syz.0.9383': attribute type 11 has an invalid length. [ 582.803671][T29554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9392'. [ 582.843044][T29554] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 582.850294][T29554] IPv6: NLM_F_CREATE should be set when creating new route [ 582.932957][T29561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9392'. [ 583.065854][T29567] syzkaller1: entered promiscuous mode [ 583.071376][T29567] syzkaller1: entered allmulticast mode [ 583.146224][T29571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9399'. [ 583.207204][T29575] netlink: 'syz.3.9401': attribute type 11 has an invalid length. [ 583.541707][T29599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9412'. [ 583.670791][T29605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9413'. [ 583.723575][T29605] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 583.730925][T29605] IPv6: NLM_F_CREATE should be set when creating new route [ 583.824258][T29615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9413'. [ 584.251717][T29642] syzkaller1: entered promiscuous mode [ 584.261072][T29642] syzkaller1: entered allmulticast mode [ 584.473903][T29656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9434'. [ 584.491712][T29656] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 584.499033][T29656] IPv6: NLM_F_CREATE should be set when creating new route [ 584.577350][T29659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9434'. [ 584.907151][T29675] syzkaller1: entered promiscuous mode [ 584.922624][T29675] syzkaller1: entered allmulticast mode [ 585.370156][T29710] syzkaller1: entered promiscuous mode [ 585.376732][T29710] syzkaller1: entered allmulticast mode [ 585.923178][T29740] syzkaller1: entered promiscuous mode [ 585.929239][T29740] syzkaller1: entered allmulticast mode [ 586.205763][T29754] IPVS: sed: SCTP 127.0.0.1:0 - no destination available [ 586.428499][T29775] syzkaller1: entered promiscuous mode [ 586.434146][T29775] syzkaller1: entered allmulticast mode [ 586.860927][T29803] netlink: 'syz.1.9499': attribute type 11 has an invalid length. [ 586.872138][T29805] syzkaller1: entered promiscuous mode [ 586.878027][T29805] syzkaller1: entered allmulticast mode [ 587.394239][T29837] syzkaller1: entered promiscuous mode [ 587.402836][T29837] syzkaller1: entered allmulticast mode [ 587.973132][T29873] syzkaller1: entered promiscuous mode [ 587.979901][T29873] syzkaller1: entered allmulticast mode [ 588.757068][T29921] bond0: (slave netdevsim0): Releasing backup interface [ 591.238055][T30037] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9597'. [ 591.663817][T30060] netlink: 1276 bytes leftover after parsing attributes in process `syz.0.9607'. [ 592.938234][T30147] netlink: 1276 bytes leftover after parsing attributes in process `syz.2.9643'. [ 592.961218][T30149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9645'. [ 594.293431][T30250] wireguard0: entered promiscuous mode [ 594.309977][T30250] wireguard0: entered allmulticast mode [ 595.767708][T30360] netlink: 'syz.4.9727': attribute type 1 has an invalid length. [ 595.798646][T30360] netlink: 9392 bytes leftover after parsing attributes in process `syz.4.9727'. [ 596.360668][T30403] netlink: 'syz.3.9744': attribute type 11 has an invalid length. [ 596.522942][T30412] netlink: 5296 bytes leftover after parsing attributes in process `syz.2.9747'. [ 596.639097][T30420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9751'. [ 598.648640][T30549] xt_TCPMSS: Only works on TCP SYN packets [ 598.664963][T30547] syz.2.9808 uses old SIOCAX25GETINFO [ 599.096387][T30574] netlink: 'syz.4.9822': attribute type 11 has an invalid length. [ 599.426961][ T11] ================================================================== [ 599.435060][ T11] BUG: KASAN: slab-use-after-free in l2tp_tunnel_del_work+0xe5/0x330 [ 599.443158][ T11] Read of size 8 at addr ffff8880123e48b8 by task kworker/u8:0/11 [ 599.450968][ T11] [ 599.453305][ T11] CPU: 1 PID: 11 Comm: kworker/u8:0 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0 [ 599.463378][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 599.473446][ T11] Workqueue: l2tp l2tp_tunnel_del_work [ 599.478946][ T11] Call Trace: [ 599.482241][ T11] [ 599.485178][ T11] dump_stack_lvl+0x241/0x360 [ 599.489879][ T11] ? __pfx_dump_stack_lvl+0x10/0x10 [ 599.495090][ T11] ? __pfx__printk+0x10/0x10 [ 599.499703][ T11] ? _printk+0xd5/0x120 [ 599.503882][ T11] ? __virt_addr_valid+0x183/0x520 [ 599.509005][ T11] ? __virt_addr_valid+0x183/0x520 [ 599.514111][ T11] print_report+0x169/0x550 [ 599.518614][ T11] ? __virt_addr_valid+0x183/0x520 [ 599.523717][ T11] ? __virt_addr_valid+0x183/0x520 [ 599.528830][ T11] ? __virt_addr_valid+0x44e/0x520 [ 599.533950][ T11] ? __phys_addr+0xba/0x170 [ 599.538463][ T11] ? l2tp_tunnel_del_work+0xe5/0x330 [ 599.543746][ T11] kasan_report+0x143/0x180 [ 599.548250][ T11] ? l2tp_tunnel_del_work+0xe5/0x330 [ 599.553528][ T11] l2tp_tunnel_del_work+0xe5/0x330 [ 599.558634][ T11] ? process_scheduled_works+0x945/0x1830 [ 599.564436][ T11] process_scheduled_works+0xa2c/0x1830 [ 599.569983][ T11] ? __pfx_process_scheduled_works+0x10/0x10 [ 599.575955][ T11] ? assign_work+0x364/0x3d0 [ 599.580535][ T11] worker_thread+0x86d/0xd50 [ 599.585149][ T11] ? __kthread_parkme+0x169/0x1d0 [ 599.590161][ T11] ? __pfx_worker_thread+0x10/0x10 [ 599.595258][ T11] kthread+0x2f0/0x390 [ 599.599315][ T11] ? __pfx_worker_thread+0x10/0x10 [ 599.604414][ T11] ? __pfx_kthread+0x10/0x10 [ 599.608993][ T11] ret_from_fork+0x4b/0x80 [ 599.613398][ T11] ? __pfx_kthread+0x10/0x10 [ 599.617986][ T11] ret_from_fork_asm+0x1a/0x30 [ 599.622757][ T11] [ 599.625763][ T11] [ 599.628074][ T11] Allocated by task 30601: [ 599.632486][ T11] kasan_save_track+0x3f/0x80 [ 599.637247][ T11] __kasan_kmalloc+0x98/0xb0 [ 599.641830][ T11] __kmalloc_noprof+0x1f9/0x400 [ 599.646672][ T11] l2tp_session_create+0x3b/0xc20 [ 599.651692][ T11] pppol2tp_connect+0xca3/0x17a0 [ 599.656619][ T11] __sys_connect+0x2df/0x310 [ 599.661198][ T11] __x64_sys_connect+0x7a/0x90 [ 599.665946][ T11] do_syscall_64+0xf3/0x230 [ 599.670433][ T11] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.676316][ T11] [ 599.678626][ T11] Freed by task 30604: [ 599.682672][ T11] kasan_save_track+0x3f/0x80 [ 599.687342][ T11] kasan_save_free_info+0x40/0x50 [ 599.692356][ T11] poison_slab_object+0xe0/0x150 [ 599.697279][ T11] __kasan_slab_free+0x37/0x60 [ 599.702026][ T11] kfree+0x149/0x360 [ 599.705909][ T11] __sk_destruct+0x58/0x5f0 [ 599.710402][ T11] rcu_core+0xafd/0x1830 [ 599.714633][ T11] handle_softirqs+0x2c4/0x970 [ 599.719380][ T11] __irq_exit_rcu+0xf4/0x1c0 [ 599.723953][ T11] irq_exit_rcu+0x9/0x30 [ 599.728193][ T11] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 599.733855][ T11] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 599.739832][ T11] [ 599.742141][ T11] Last potentially related work creation: [ 599.747844][ T11] kasan_save_stack+0x3f/0x60 [ 599.752510][ T11] __kasan_record_aux_stack+0xac/0xc0 [ 599.757875][ T11] call_rcu+0x167/0xa70 [ 599.762019][ T11] pppol2tp_release+0x24b/0x350 [ 599.766854][ T11] sock_close+0xbc/0x240 [ 599.771081][ T11] __fput+0x24a/0x8a0 [ 599.775045][ T11] task_work_run+0x24f/0x310 [ 599.779621][ T11] syscall_exit_to_user_mode+0x168/0x360 [ 599.785242][ T11] do_syscall_64+0x100/0x230 [ 599.789815][ T11] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.795694][ T11] [ 599.798004][ T11] The buggy address belongs to the object at ffff8880123e4800 [ 599.798004][ T11] which belongs to the cache kmalloc-1k of size 1024 [ 599.812040][ T11] The buggy address is located 184 bytes inside of [ 599.812040][ T11] freed 1024-byte region [ffff8880123e4800, ffff8880123e4c00) [ 599.825909][ T11] [ 599.828217][ T11] The buggy address belongs to the physical page: [ 599.834615][ T11] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x123e0 [ 599.843360][ T11] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 599.851840][ T11] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 599.859811][ T11] page_type: 0xffffefff(slab) [ 599.864478][ T11] raw: 00fff00000000040 ffff888015041dc0 0000000000000000 dead000000000001 [ 599.873044][ T11] raw: 0000000000000000 0000000080100010 00000001ffffefff 0000000000000000 [ 599.881614][ T11] head: 00fff00000000040 ffff888015041dc0 0000000000000000 dead000000000001 [ 599.890264][ T11] head: 0000000000000000 0000000080100010 00000001ffffefff 0000000000000000 [ 599.898917][ T11] head: 00fff00000000003 ffffea000048f801 ffffffffffffffff 0000000000000000 [ 599.907570][ T11] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 599.916216][ T11] page dumped because: kasan: bad access detected [ 599.922622][ T11] page_owner tracks the page as allocated [ 599.928314][ T11] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5088, tgid 5088 (syz-executor), ts 61850369025, free_ts 61847528265 [ 599.949062][ T11] post_alloc_hook+0x1f3/0x230 [ 599.953820][ T11] get_page_from_freelist+0x2e4c/0x2f10 [ 599.959355][ T11] __alloc_pages_noprof+0x256/0x6c0 [ 599.964542][ T11] alloc_slab_page+0x5f/0x120 [ 599.969202][ T11] allocate_slab+0x5a/0x2f0 [ 599.973697][ T11] ___slab_alloc+0xcd1/0x14b0 [ 599.978362][ T11] __slab_alloc+0x58/0xa0 [ 599.982683][ T11] kmalloc_node_track_caller_noprof+0x281/0x440 [ 599.988915][ T11] kmalloc_reserve+0x111/0x2a0 [ 599.993664][ T11] __alloc_skb+0x1f3/0x440 [ 599.998064][ T11] inet6_rt_notify+0xdf/0x290 [ 600.002723][ T11] fib6_add+0x1e33/0x4430 [ 600.007037][ T11] ip6_route_add+0x8b/0x160 [ 600.011532][ T11] addrconf_add_dev+0x35b/0x540 [ 600.016373][ T11] addrconf_init_auto_addrs+0x85f/0xeb0 [ 600.021901][ T11] addrconf_notify+0xaff/0x1020 [ 600.026732][ T11] page last free pid 5088 tgid 5088 stack trace: [ 600.033034][ T11] free_unref_page+0xd22/0xea0 [ 600.037788][ T11] __put_partials+0xeb/0x130 [ 600.042364][ T11] put_cpu_partial+0x17c/0x250 [ 600.047120][ T11] __slab_free+0x2ea/0x3d0 [ 600.051608][ T11] qlist_free_all+0x9e/0x140 [ 600.056185][ T11] kasan_quarantine_reduce+0x14f/0x170 [ 600.061627][ T11] __kasan_slab_alloc+0x23/0x80 [ 600.066464][ T11] kmalloc_node_track_caller_noprof+0x1cd/0x440 [ 600.072693][ T11] kmemdup_noprof+0x2a/0x60 [ 600.077187][ T11] neigh_sysctl_register+0xb4/0x4e0 [ 600.082366][ T11] addrconf_sysctl_register+0xb2/0x1c0 [ 600.087813][ T11] ipv6_add_dev+0xcf6/0x1220 [ 600.092393][ T11] ipv6_find_idev+0xc2/0x1e0 [ 600.096969][ T11] inet6_rtm_newaddr+0x684/0xc80 [ 600.101893][ T11] rtnetlink_rcv_msg+0x89b/0x1180 [ 600.106919][ T11] netlink_rcv_skb+0x1e3/0x430 [ 600.111666][ T11] [ 600.113970][ T11] Memory state around the buggy address: [ 600.119580][ T11] ffff8880123e4780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 600.127625][ T11] ffff8880123e4800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 600.135669][ T11] >ffff8880123e4880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 600.144082][ T11] ^ [ 600.149956][ T11] ffff8880123e4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 600.157999][ T11] ffff8880123e4980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 600.166045][ T11] ================================================================== [ 600.174280][ T11] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 600.181488][ T11] CPU: 1 PID: 11 Comm: kworker/u8:0 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0 [ 600.191649][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 600.201716][ T11] Workqueue: l2tp l2tp_tunnel_del_work [ 600.207207][ T11] Call Trace: [ 600.210486][ T11] [ 600.213406][ T11] dump_stack_lvl+0x241/0x360 [ 600.218082][ T11] ? __pfx_dump_stack_lvl+0x10/0x10 [ 600.223273][ T11] ? __pfx__printk+0x10/0x10 [ 600.227860][ T11] ? vscnprintf+0x5d/0x90 [ 600.232268][ T11] panic+0x349/0x860 [ 600.236163][ T11] ? check_panic_on_warn+0x21/0xb0 [ 600.241310][ T11] ? __pfx_panic+0x10/0x10 [ 600.245811][ T11] ? mark_lock+0x9a/0x350 [ 600.250133][ T11] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 600.256018][ T11] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 600.261900][ T11] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 600.268214][ T11] ? print_report+0x502/0x550 [ 600.272883][ T11] check_panic_on_warn+0x86/0xb0 [ 600.277810][ T11] ? l2tp_tunnel_del_work+0xe5/0x330 [ 600.283080][ T11] end_report+0x77/0x160 [ 600.287313][ T11] kasan_report+0x154/0x180 [ 600.291813][ T11] ? l2tp_tunnel_del_work+0xe5/0x330 [ 600.297185][ T11] l2tp_tunnel_del_work+0xe5/0x330 [ 600.302291][ T11] ? process_scheduled_works+0x945/0x1830 [ 600.308000][ T11] process_scheduled_works+0xa2c/0x1830 [ 600.313543][ T11] ? __pfx_process_scheduled_works+0x10/0x10 [ 600.319511][ T11] ? assign_work+0x364/0x3d0 [ 600.324088][ T11] worker_thread+0x86d/0xd50 [ 600.328673][ T11] ? __kthread_parkme+0x169/0x1d0 [ 600.333686][ T11] ? __pfx_worker_thread+0x10/0x10 [ 600.338785][ T11] kthread+0x2f0/0x390 [ 600.342841][ T11] ? __pfx_worker_thread+0x10/0x10 [ 600.347939][ T11] ? __pfx_kthread+0x10/0x10 [ 600.352543][ T11] ret_from_fork+0x4b/0x80 [ 600.356956][ T11] ? __pfx_kthread+0x10/0x10 [ 600.361540][ T11] ret_from_fork_asm+0x1a/0x30 [ 600.366305][ T11] [ 600.369531][ T11] Kernel Offset: disabled [ 600.373879][ T11] Rebooting in 86400 seconds..