last executing test programs: 1m4.159235515s ago: executing program 1 (id=1202): bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x89}, {0xb6e7, 0xf3c, 0x2, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x2000000000000, 0x4000000000001}, 0x0, 0x0, 0x3, 0x0, 0x3}, {{@in=@multicast2, 0x0, 0x33}, 0xa, @in6=@mcast1, 0xfffffffe, 0x1, 0x2, 0x0, 0x0, 0x0, 0x800}}, 0xe8) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 1m2.849670698s ago: executing program 3 (id=479): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000100020075"], 0x8) (async) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001280)=""/4079, 0xd96}, {&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f0000001140)=""/171, 0xb5}], 0x3}, 0x2) 54.094445085s ago: executing program 1 (id=1202): bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x89}, {0xb6e7, 0xf3c, 0x2, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x2000000000000, 0x4000000000001}, 0x0, 0x0, 0x3, 0x0, 0x3}, {{@in=@multicast2, 0x0, 0x33}, 0xa, @in6=@mcast1, 0xfffffffe, 0x1, 0x2, 0x0, 0x0, 0x0, 0x800}}, 0xe8) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 52.386146982s ago: executing program 3 (id=479): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000100020075"], 0x8) (async) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001280)=""/4079, 0xd96}, {&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f0000001140)=""/171, 0xb5}], 0x3}, 0x2) 48.067922821s ago: executing program 2 (id=2084): socket$kcm(0x2, 0x0, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711231000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r2, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x6, 0x0, 0x0, @broadcast}, 0x10) accept4$llc(r2, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc240}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x4}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r5, 0x2, 0x2, 0x0, @void, @value}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r6, &(0x7f0000000500), &(0x7f0000000200)=@tcp}, 0x20) socket$l2tp(0x2, 0x2, 0x73) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$PPPIOCGIDLE(r7, 0x8010743f, &(0x7f0000000440)) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x85, "1d23d02dde33568bd1b25cce74272c5b9b6eca391fe732bd778104dc64aceca56a99678677ffac94391dd3847272cfcec629f245e40f38bbd39d0048827cb4ca60d7748586ad29fd3c34cb7fa39c497f8d69993ff3a6d8806817cd8b1e8af5e535f065b3102afd49f6834aff7fec1729f4891fc7f68f1f24a27f824882a74ee1ed063c3ae0"}, &(0x7f0000000280)=0x8d) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000300)={r8, 0xe312}, &(0x7f00000003c0)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0xf6c52000) bpf$PROG_LOAD(0x1e, &(0x7f0000000840)={0x16, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_LEVEL={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 47.248022996s ago: executing program 2 (id=2095): close(0x3) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x1405, 0x800, 0x70bd2b, 0x25ffdbfc, "", [{{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8001}, 0x200448c4) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) close(0x3) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x1405, 0x800, 0x70bd2b, 0x25ffdbfc, "", [{{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8001}, 0x200448c4) (async) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async) 46.948879454s ago: executing program 2 (id=2098): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x181000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000800000000007000000080001"], 0x1c}}, 0x80) 42.889932639s ago: executing program 1 (id=1202): bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x89}, {0xb6e7, 0xf3c, 0x2, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x2000000000000, 0x4000000000001}, 0x0, 0x0, 0x3, 0x0, 0x3}, {{@in=@multicast2, 0x0, 0x33}, 0xa, @in6=@mcast1, 0xfffffffe, 0x1, 0x2, 0x0, 0x0, 0x0, 0x800}}, 0xe8) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 40.972488574s ago: executing program 3 (id=479): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000100020075"], 0x8) (async) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001280)=""/4079, 0xd96}, {&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f0000001140)=""/171, 0xb5}], 0x3}, 0x2) 37.601253138s ago: executing program 2 (id=2098): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x181000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000800000000007000000080001"], 0x1c}}, 0x80) 28.510686978s ago: executing program 1 (id=1202): bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x89}, {0xb6e7, 0xf3c, 0x2, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x2000000000000, 0x4000000000001}, 0x0, 0x0, 0x3, 0x0, 0x3}, {{@in=@multicast2, 0x0, 0x33}, 0xa, @in6=@mcast1, 0xfffffffe, 0x1, 0x2, 0x0, 0x0, 0x0, 0x800}}, 0xe8) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 26.26406017s ago: executing program 3 (id=479): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000100020075"], 0x8) (async) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001280)=""/4079, 0xd96}, {&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f0000001140)=""/171, 0xb5}], 0x3}, 0x2) 24.190850845s ago: executing program 2 (id=2098): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x181000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000800000000007000000080001"], 0x1c}}, 0x80) 16.194102957s ago: executing program 1 (id=1202): bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x89}, {0xb6e7, 0xf3c, 0x2, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x2000000000000, 0x4000000000001}, 0x0, 0x0, 0x3, 0x0, 0x3}, {{@in=@multicast2, 0x0, 0x33}, 0xa, @in6=@mcast1, 0xfffffffe, 0x1, 0x2, 0x0, 0x0, 0x0, 0x800}}, 0xe8) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 11.846945291s ago: executing program 3 (id=479): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000100020075"], 0x8) (async) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001280)=""/4079, 0xd96}, {&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f0000001140)=""/171, 0xb5}], 0x3}, 0x2) 10.85027063s ago: executing program 2 (id=2098): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x181000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000800000000007000000080001"], 0x1c}}, 0x80) 3.384017194s ago: executing program 4 (id=2326): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x9533}, &(0x7f0000000040)=0x8) 3.262613817s ago: executing program 4 (id=2328): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={0x14, r1, 0x603}, 0x14}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x0}, 0x10) r7 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x10010000004e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x2, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x0, 0x7}, {0x14, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) 3.065829489s ago: executing program 4 (id=2329): syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffff6487a2bed3d60800450000300100000000029078ac1e0001e000000114009078ac1e000178e1054910d8a0f0efd0d4c0ba321cff5db0aac6"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r3, 0x0, 0x0, 0x0, 0x0) write$tun(r1, &(0x7f0000002400)=ANY=[@ANYBLOB="000086dd000311000400000000006eec00be10a42f01fe8000000000000000000000000000aaff02000000000000000000000000000133"], 0x10da) 2.560286394s ago: executing program 4 (id=2331): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r2, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x99}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xe}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x850}, 0x40801) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000070000000500130000000000140008"], 0x44}}, 0x0) 2.498750711s ago: executing program 0 (id=2332): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="38010000100013"], 0x138}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000014060000400012800b00010067656e6576650000300002801400070000000000000000000000ffffac14140005000a0002000000050009"], 0x68}, 0x9}, 0x0) 2.382439613s ago: executing program 4 (id=2333): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/142, 0x8e}, {&(0x7f0000000080)=""/7, 0x7}, {&(0x7f00000000c0)=""/14, 0xe}, {&(0x7f0000000180)=""/91, 0x5b}], 0x4}, 0xff}, {{&(0x7f0000000380)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f0000000500)=""/15, 0xf}], 0x2}, 0x1}], 0x2, 0x400120e2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) (async, rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r2}, 0x20) (async, rerun: 64) recvmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r6 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xf}, 0x56, 0x0}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0xa2e}}) (async) recvmsg$unix(r0, &(0x7f0000000a80)={&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000840)=""/157, 0x9d}, {&(0x7f0000000900)=""/250, 0xfa}, {&(0x7f0000000680)=""/36, 0x24}, {&(0x7f0000001bc0)=""/207, 0xcf}], 0x5, &(0x7f00000006c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x1) 2.379630988s ago: executing program 0 (id=2334): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async, rerun: 64) r2 = socket$inet6(0xa, 0x5, 0x0) (rerun: 64) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) listen(r2, 0x732) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async, rerun: 32) syz_emit_ethernet(0x66, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x30, 0x0, 0x0, @private2, @mcast2, {[@routing={0x29}], "b2031bd5af02ed89faf1d01f64b7e4b1b4836f373ed8f09a380b61960d7cedd013ef27ee9fe4acf8"}}}}}, 0x0) (async, rerun: 32) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x0, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) 2.221752851s ago: executing program 0 (id=2335): r0 = socket(0x2b, 0x1, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@mcast1, 0x5, r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r3, 0x153ff25051509283, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x0, 0x21}, {0x9, 0x26}, {0xfa, 0x2}, {0x6, 0x3}], "eae33303d91f84ff"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x10000000) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000003c0)={'veth1_to_bridge\x00', &(0x7f0000001a40)=@ethtool_per_queue_op={0x4b, 0x4e}}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0xff, 0x4) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 2.022272101s ago: executing program 0 (id=2336): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="260a00000000000061119c0000000000881800000000000000000000000000000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1342, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x5, 0x3, 0x200000) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket(0x848000000015, 0x800, 0x1) (async) r3 = socket(0x848000000015, 0x800, 0x1) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) bind$netrom(r2, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000300)={&(0x7f0000000200)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x10000201}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xecab0f1899c166dd}, 0x0) (async) sendmsg$tipc(r4, &(0x7f0000000300)={&(0x7f0000000200)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x10000201}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xecab0f1899c166dd}, 0x0) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) (async) accept$netrom(r2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004100), 0x0, 0x12143, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRESDEC], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.865140952s ago: executing program 1 (id=1202): bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x89}, {0xb6e7, 0xf3c, 0x2, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x2000000000000, 0x4000000000001}, 0x0, 0x0, 0x3, 0x0, 0x3}, {{@in=@multicast2, 0x0, 0x33}, 0xa, @in6=@mcast1, 0xfffffffe, 0x1, 0x2, 0x0, 0x0, 0x0, 0x800}}, 0xe8) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 76.076955ms ago: executing program 0 (id=2337): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0x80, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000017c0)={r0, &(0x7f0000001700), &(0x7f0000001780), 0x3}, 0x20) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 74.416073ms ago: executing program 4 (id=2338): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x2, 0x0}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_emit_ethernet(0x55, &(0x7f0000000080)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60a70ddb00003a6cfe880000001000000000000000000001ff0200000000000000000000000000013a00000600000000fe80000000000000000000000000001cfe880000000000000000000000000001fc0100000000000000000000000000010000000000000000000000000000ac1414bb2f000000000000000001000000000000ff5c8117a0576a28506d0a4a67a62b6617f0069d3b544f27b0de32616ac8cf19fd229faab8432ff5adda3aacb4618fe92a8e39d8e9f88e1524c888a8c182d227f023749ec16ec75ab71fce44c4017aec37f24b5a3400"/243], 0x0) 5.017237ms ago: executing program 3 (id=479): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000100020075"], 0x8) (async) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001280)=""/4079, 0xd96}, {&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f0000001140)=""/171, 0xb5}], 0x3}, 0x2) 0s ago: executing program 0 (id=2339): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000000000000000086dd609a0d0000442ffffc000000000200000000000000000000fe8000000000000000000000000000aa042088be0091a4179b982610a23fa5e9d400000000000800000086dd080088be00000000100000020100000000000000080022eb00000000203200000000000000000000080065580000000000000000"], 0x0) kernel console output (not intermixed with test programs): ftover after parsing attributes in process `syz.2.1971'. [ 270.293975][T12827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 270.320098][T12827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 270.343592][T12827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 270.360608][T12827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 270.597224][T12827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.642691][T12782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.654631][T12827] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.695306][ T994] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.702545][ T994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.731561][T12964] netlink: 'syz.4.1975': attribute type 21 has an invalid length. [ 270.742394][T12964] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1975'. [ 270.768652][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.775882][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.881068][T12782] veth0_vlan: entered promiscuous mode [ 270.932603][T12782] veth1_vlan: entered promiscuous mode [ 271.081890][T12782] veth0_macvtap: entered promiscuous mode [ 271.103166][T12782] veth1_macvtap: entered promiscuous mode [ 271.126703][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1978'. [ 271.161975][T12782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.173114][T12782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.189703][T12782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.227675][T12782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.246907][T12782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.256406][T12979] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1979'. [ 271.269492][T12782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.295450][T12782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.312936][T12782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.329202][T12782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.363854][T12782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.377656][T12987] netlink: 'syz.2.1982': attribute type 11 has an invalid length. [ 271.392424][T12987] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1982'. [ 271.464487][T12827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.610526][ T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.626592][ T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.670692][T12827] veth0_vlan: entered promiscuous mode [ 271.691719][T13004] xt_nat: multiple ranges no longer supported [ 271.717926][T12827] veth1_vlan: entered promiscuous mode [ 271.737726][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.760707][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.797287][ T5832] Bluetooth: hci2: command tx timeout [ 271.848658][T12827] veth0_macvtap: entered promiscuous mode [ 271.864712][T12827] veth1_macvtap: entered promiscuous mode [ 271.901509][T12827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.916437][T12827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.940979][T12827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.952595][T12827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.975352][T12827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.989838][T12827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.001817][T12827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.011878][T12827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.027745][T12827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.045307][T12827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.108411][T12827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.118319][T12827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.127108][T12827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.137741][T12827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.392661][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.538035][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.601651][ T6530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.623469][ T6530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.660669][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.703356][ T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.713260][ T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.942964][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.120464][ T13] bridge_slave_1: left allmulticast mode [ 273.127271][ T13] bridge_slave_1: left promiscuous mode [ 273.133887][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.144330][ T13] bridge_slave_0: left allmulticast mode [ 273.150340][ T13] bridge_slave_0: left promiscuous mode [ 273.157061][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.424124][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.442012][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.455474][ T13] bond0 (unregistering): Released all slaves [ 273.589420][T13020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1990'. [ 273.604488][T13020] xfrm1: entered promiscuous mode [ 273.615796][T13020] xfrm1: entered allmulticast mode [ 273.628456][T13020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1990'. [ 273.815515][ T13] hsr_slave_0: left promiscuous mode [ 273.822859][ T13] hsr_slave_1: left promiscuous mode [ 273.832049][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.851953][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.860148][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.871455][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.889132][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.899005][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.908547][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 273.910366][ T13] veth1_macvtap: left promiscuous mode [ 273.918291][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 273.921914][ T13] veth0_macvtap: left promiscuous mode [ 273.929488][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.934237][ T13] veth1_vlan: left promiscuous mode [ 273.951716][ T13] veth0_vlan: left promiscuous mode [ 274.290290][ T13] team0 (unregistering): Port device team_slave_1 removed [ 274.324006][ T13] team0 (unregistering): Port device team_slave_0 removed [ 274.646420][T13022] lo speed is unknown, defaulting to 1000 [ 274.825346][T13022] chnl_net:caif_netlink_parms(): no params data found [ 274.911950][T13022] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.920085][T13022] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.928208][T13022] bridge_slave_0: entered allmulticast mode [ 274.935205][T13022] bridge_slave_0: entered promiscuous mode [ 274.944052][T13022] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.951424][T13022] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.958692][T13022] bridge_slave_1: entered allmulticast mode [ 274.965680][T13022] bridge_slave_1: entered promiscuous mode [ 274.998289][T13022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.010739][T13022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.050745][T13022] team0: Port device team_slave_0 added [ 275.078345][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.097247][T13022] team0: Port device team_slave_1 added [ 275.127020][T13022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.134032][T13022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.161104][T13022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.186913][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.201206][T13022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.211131][T13022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.272125][T13022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.297314][T13032] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1991'. [ 275.362870][T13038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1993'. [ 275.381248][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.434641][T13041] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1994'. [ 275.529091][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.590334][T13022] hsr_slave_0: entered promiscuous mode [ 275.624010][T13022] hsr_slave_1: entered promiscuous mode [ 275.640967][T13022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.663738][T13022] Cannot create hsr debugfs directory [ 275.713877][T13050] SET target dimension over the limit! [ 275.831431][T13055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 275.931213][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.941831][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.950247][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.961205][ T5140] Bluetooth: hci1: command tx timeout [ 275.974912][ T5140] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.983767][ T5140] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.162904][T13067] netlink: 'syz.0.2002': attribute type 1 has an invalid length. [ 276.170951][T13067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2002'. [ 276.181764][ T13] bridge_slave_1: left allmulticast mode [ 276.193304][ T13] bridge_slave_1: left promiscuous mode [ 276.200963][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.217970][ T13] bridge_slave_0: left allmulticast mode [ 276.223630][ T13] bridge_slave_0: left promiscuous mode [ 276.233929][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.305048][T13073] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 276.589075][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.600184][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.610278][ T13] bond0 (unregistering): Released all slaves [ 276.664516][T13059] lo speed is unknown, defaulting to 1000 [ 276.842915][T13089] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2006'. [ 277.059093][T13097] xt_bpf: check failed: parse error [ 277.129998][ T13] hsr_slave_0: left promiscuous mode [ 277.145894][ T13] hsr_slave_1: left promiscuous mode [ 277.151975][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.160081][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.168118][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.175728][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.203632][ T13] veth1_macvtap: left promiscuous mode [ 277.209351][ T13] veth0_macvtap: left promiscuous mode [ 277.215004][ T13] veth1_vlan: left promiscuous mode [ 277.220461][ T13] veth0_vlan: left promiscuous mode [ 277.653548][ T13] team0 (unregistering): Port device team_slave_1 removed [ 277.689829][ T13] team0 (unregistering): Port device team_slave_0 removed [ 278.025956][T13106] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2013'. [ 278.036208][ T5841] Bluetooth: hci1: command tx timeout [ 278.041803][ T5841] Bluetooth: hci2: command tx timeout [ 278.117761][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 278.439064][T13059] chnl_net:caif_netlink_parms(): no params data found [ 278.515693][T13144] netlink: 'syz.0.2022': attribute type 1 has an invalid length. [ 278.531097][T13022] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 278.561268][T13144] 8021q: adding VLAN 0 to HW filter on device bond10 [ 278.573061][T13150] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2022'. [ 278.597966][T13022] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 278.619324][T13022] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 278.652961][T13022] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 278.711319][T13059] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.726242][T13059] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.733424][T13059] bridge_slave_0: entered allmulticast mode [ 278.744829][T13059] bridge_slave_0: entered promiscuous mode [ 278.765364][T13059] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.786198][T13059] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.793369][T13059] bridge_slave_1: entered allmulticast mode [ 278.808678][T13059] bridge_slave_1: entered promiscuous mode [ 278.828463][T13157] netlink: 'syz.0.2025': attribute type 1 has an invalid length. [ 278.880948][T13157] 8021q: adding VLAN 0 to HW filter on device bond11 [ 278.897249][T13059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.920283][T13157] 8021q: adding VLAN 0 to HW filter on device bond11 [ 278.927566][T13157] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 278.939993][T13157] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 279.039074][T13162] veth13: entered promiscuous mode [ 279.050676][T13059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.151791][T13059] team0: Port device team_slave_0 added [ 279.189252][T13059] team0: Port device team_slave_1 added [ 279.259019][T13059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.268956][T13059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.301182][T13059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.314851][T13059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.328413][T13059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.357748][T13059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.502228][T13183] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2033'. [ 279.541826][T13059] hsr_slave_0: entered promiscuous mode [ 279.557535][T13059] hsr_slave_1: entered promiscuous mode [ 279.563725][T13059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.575019][T13059] Cannot create hsr debugfs directory [ 279.647691][T13022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.819986][T13022] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.899041][T13201] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2038'. [ 279.899044][T13200] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2038'. [ 279.928148][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.935254][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.958705][ T9847] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.965901][ T9847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.043842][T13203] xt_limit: Overflow, try lower: 2147483649/128 [ 280.116506][ T5140] Bluetooth: hci2: command tx timeout [ 280.121959][ T5140] Bluetooth: hci1: command tx timeout [ 280.238484][T13210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2041'. [ 280.391815][T13059] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 280.419478][T13059] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 280.443321][T13059] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 280.471133][T13059] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 280.544688][T13022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.640413][T13022] veth0_vlan: entered promiscuous mode [ 280.673164][T13059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.691763][T13022] veth1_vlan: entered promiscuous mode [ 280.718992][T13234] lo speed is unknown, defaulting to 1000 [ 280.723586][T13059] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.782095][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.789261][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.822005][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.829252][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.887265][T13022] veth0_macvtap: entered promiscuous mode [ 280.969860][T13022] veth1_macvtap: entered promiscuous mode [ 281.141754][T13022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.161239][T13022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.174143][T13022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.194195][T13022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.207593][T13022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.220035][T13022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.252402][T13022] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.263978][T13022] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.278019][T13022] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.287945][T13022] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.372388][T13249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2050'. [ 281.541348][ T6530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.586247][ T9836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.594097][ T9836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.601647][ T6530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.622162][T13257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2053'. [ 281.667265][T13259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2053'. [ 281.955652][T13059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.010322][T13059] veth0_vlan: entered promiscuous mode [ 282.042655][T13059] veth1_vlan: entered promiscuous mode [ 282.093739][T13059] veth0_macvtap: entered promiscuous mode [ 282.113824][T13277] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2058'. [ 282.127936][T13059] veth1_macvtap: entered promiscuous mode [ 282.138615][T13277] gre0: mtu less than device minimum [ 282.148239][T13277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'. [ 282.167081][T13277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2058'. [ 282.176658][T13059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.190779][T13277] netlink: 'syz.0.2058': attribute type 13 has an invalid length. [ 282.199081][ T5140] Bluetooth: hci2: command tx timeout [ 282.205726][T13059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.220336][T13059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.231541][T13059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.246872][T13059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.267199][T13059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.304785][T13059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.324997][T13059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.346433][T13059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.379678][T13059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.443918][ T994] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.508501][T13059] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.526301][T13059] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.545261][T13059] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.575627][T13059] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.659532][ T994] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.752292][ T994] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.773292][ T6530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.790627][ T6530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.828642][ T6530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.850235][ T6530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.962594][ T994] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.320924][ T994] bridge_slave_1: left allmulticast mode [ 283.326798][ T994] bridge_slave_1: left promiscuous mode [ 283.332492][ T994] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.342279][ T994] bridge_slave_0: left allmulticast mode [ 283.350626][ T994] bridge_slave_0: left promiscuous mode [ 283.356669][ T994] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.619425][ T994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.632034][ T994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.642882][ T994] bond0 (unregistering): Released all slaves [ 284.024078][T13308] netlink: 'syz.2.2068': attribute type 62 has an invalid length. [ 284.067811][T13308] netlink: 'syz.2.2068': attribute type 62 has an invalid length. [ 284.197873][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 284.219811][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 284.228306][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 284.241892][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 284.250378][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 284.317028][T13313] lo speed is unknown, defaulting to 1000 [ 284.365325][ T994] hsr_slave_0: left promiscuous mode [ 284.372179][ T994] hsr_slave_1: left promiscuous mode [ 284.380263][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.387914][ T994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.397958][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.405359][ T994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.425044][ T994] veth1_macvtap: left promiscuous mode [ 284.431762][ T994] veth0_macvtap: left promiscuous mode [ 284.437514][ T994] veth1_vlan: left promiscuous mode [ 284.442847][ T994] veth0_vlan: left promiscuous mode [ 284.800019][ T994] team0 (unregistering): Port device team_slave_1 removed [ 284.841156][ T994] team0 (unregistering): Port device team_slave_0 removed [ 285.290344][T13313] chnl_net:caif_netlink_parms(): no params data found [ 285.376940][T13313] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.384172][T13313] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.392618][T13313] bridge_slave_0: entered allmulticast mode [ 285.400805][T13313] bridge_slave_0: entered promiscuous mode [ 285.409368][T13313] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.416651][T13313] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.423772][T13313] bridge_slave_1: entered allmulticast mode [ 285.431394][T13313] bridge_slave_1: entered promiscuous mode [ 285.470418][T13313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.483227][T13313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.539403][ T994] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.560260][T13313] team0: Port device team_slave_0 added [ 285.569722][T13313] team0: Port device team_slave_1 added [ 285.601078][ T994] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.628049][T13313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.635105][T13313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.662063][T13313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.675337][T13313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.682960][T13313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.709540][T13313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.731732][ T994] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.780267][T13313] hsr_slave_0: entered promiscuous mode [ 285.787384][T13313] hsr_slave_1: entered promiscuous mode [ 285.793436][T13313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.801880][T13313] Cannot create hsr debugfs directory [ 285.819386][ T994] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.979753][ T994] bridge_slave_1: left allmulticast mode [ 285.985436][ T994] bridge_slave_1: left promiscuous mode [ 285.991277][ T994] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.001578][ T994] bridge_slave_0: left allmulticast mode [ 286.008544][ T994] bridge_slave_0: left promiscuous mode [ 286.036220][ T994] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.092705][T13327] xt_CT: You must specify a L4 protocol and not use inversions on it [ 286.276059][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 286.293244][ T5140] Bluetooth: hci1: command tx timeout [ 286.496287][T13347] __nla_validate_parse: 3 callbacks suppressed [ 286.496305][T13347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2075'. [ 286.540399][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 286.556234][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 286.565254][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 286.578895][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 286.588054][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 286.709408][ T994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.720856][ T994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.731190][ T994] bond0 (unregistering): Released all slaves [ 286.993170][T13348] lo speed is unknown, defaulting to 1000 [ 287.253610][ T994] hsr_slave_0: left promiscuous mode [ 287.273567][ T994] hsr_slave_1: left promiscuous mode [ 287.284370][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.292827][ T994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.301432][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.310359][ T994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.341571][ T994] veth1_macvtap: left promiscuous mode [ 287.348113][ T994] veth0_macvtap: left promiscuous mode [ 287.354322][ T994] veth1_vlan: left promiscuous mode [ 287.366020][ T994] veth0_vlan: left promiscuous mode [ 287.464191][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2078'. [ 287.781407][ T994] team0 (unregistering): Port device team_slave_1 removed [ 287.815316][ T994] team0 (unregistering): Port device team_slave_0 removed [ 288.357266][ T5841] Bluetooth: hci1: command tx timeout [ 288.378881][T13313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 288.464846][T13313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 288.529106][T13313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 288.572793][T13313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 288.676920][ T5841] Bluetooth: hci2: command tx timeout [ 288.870173][T13413] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2092'. [ 288.887749][T13413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2092'. [ 288.910105][T13416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2091'. [ 288.913498][T13348] chnl_net:caif_netlink_parms(): no params data found [ 289.262805][T13348] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.275210][T13348] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.285054][T13348] bridge_slave_0: entered allmulticast mode [ 289.298117][T13348] bridge_slave_0: entered promiscuous mode [ 289.312824][T13313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.320473][T13348] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.340038][T13348] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.356925][T13348] bridge_slave_1: entered allmulticast mode [ 289.364929][T13348] bridge_slave_1: entered promiscuous mode [ 289.395884][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 289.458299][T13348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.482533][T13348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.511235][T13313] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.603320][T13437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2099'. [ 289.632012][T13348] team0: Port device team_slave_0 added [ 289.656881][T13348] team0: Port device team_slave_1 added [ 289.703445][ T9847] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.710661][ T9847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.762143][T13348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.770119][T13348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.799920][T13348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.815255][T13348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.822632][T13348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.853593][T13348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.877977][ T9847] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.885152][ T9847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.933660][T13313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 289.945483][T13313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.158094][T13348] hsr_slave_0: entered promiscuous mode [ 290.182290][T13348] hsr_slave_1: entered promiscuous mode [ 290.199912][T13348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.225858][T13348] Cannot create hsr debugfs directory [ 290.275438][ T30] audit: type=1107 audit(1746705001.246:3): pid=13448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 290.346528][T13459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2104'. [ 290.435842][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 290.445710][ T5140] Bluetooth: hci1: command tx timeout [ 290.496901][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 290.526595][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 290.543370][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 290.552897][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 290.563038][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 290.631769][T13465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2106'. [ 290.638064][T13458] lo speed is unknown, defaulting to 1000 [ 290.646077][T13313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.721866][T13468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2106'. [ 290.766335][ T5832] Bluetooth: hci2: command tx timeout [ 291.062455][T13313] veth0_vlan: entered promiscuous mode [ 291.125459][T13313] veth1_vlan: entered promiscuous mode [ 291.147430][T13458] chnl_net:caif_netlink_parms(): no params data found [ 291.209813][T13348] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 291.249145][T13348] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 291.324181][T13348] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 291.386317][T13348] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 291.404465][T13494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.460224][T13494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.475849][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 291.512668][T13313] veth0_macvtap: entered promiscuous mode [ 291.547264][T13458] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.555028][T13458] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.563930][T13458] bridge_slave_0: entered allmulticast mode [ 291.572094][T13458] bridge_slave_0: entered promiscuous mode [ 291.580393][T13458] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.589437][T13458] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.596920][T13458] bridge_slave_1: entered allmulticast mode [ 291.604436][T13458] bridge_slave_1: entered promiscuous mode [ 291.638117][T13313] veth1_macvtap: entered promiscuous mode [ 291.654701][T13458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.673634][T13458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.727495][T13458] team0: Port device team_slave_0 added [ 291.741988][T13458] team0: Port device team_slave_1 added [ 291.802317][T13458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.809852][T13458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.837841][T13458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.852095][T13458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.859489][T13458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.904343][T13458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.929658][T13313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.940522][T13313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.953461][T13313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.975258][T13313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.986954][T13313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.998812][T13313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.139298][T13458] hsr_slave_0: entered promiscuous mode [ 292.165586][T13458] hsr_slave_1: entered promiscuous mode [ 292.182801][T13458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.192685][T13458] Cannot create hsr debugfs directory [ 292.199311][T13313] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.208978][T13313] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.218102][T13313] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.245852][T13313] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.299347][T13523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2118'. [ 292.515806][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 292.516267][ T5832] Bluetooth: hci1: command tx timeout [ 292.543553][T13348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.597236][ T5832] Bluetooth: hci3: command tx timeout [ 292.662365][T13348] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.686509][T13539] netlink: 'syz.0.2125': attribute type 33 has an invalid length. [ 292.778710][ T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.797786][ T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.822413][ T9836] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.829629][ T9836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.837237][ T5832] Bluetooth: hci2: command tx timeout [ 292.885632][T13458] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.928052][ T6530] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.935240][ T6530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.962580][ T6530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.997097][ T6530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.047920][T13551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2130'. [ 293.064144][T13551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2130'. [ 293.086558][T13458] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.216263][T13558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2132'. [ 293.232113][T13458] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.309219][T13458] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.393232][T13348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.471222][T13348] veth0_vlan: entered promiscuous mode [ 293.528584][ T9836] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.555986][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 293.580141][T13348] veth1_vlan: entered promiscuous mode [ 293.592942][T13458] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 293.619414][T13458] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 293.663813][ T9836] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.684830][T13458] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 293.697445][T13458] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 293.754616][ T9836] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.780046][T13348] veth0_macvtap: entered promiscuous mode [ 293.802829][T13348] veth1_macvtap: entered promiscuous mode [ 293.838128][ T9836] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.868346][T13348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.879888][T13348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.891568][T13348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.902589][T13348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.913997][T13348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.935598][T13348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.947102][T13348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.959460][T13348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.970696][T13348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.982165][T13348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.995627][T13348] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.016205][T13348] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.025061][T13348] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.035196][T13348] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.137058][T13458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.171918][ T6530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.187950][ T6530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.224011][T13458] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.241661][ T9836] bridge_slave_1: left allmulticast mode [ 294.247554][ T9836] bridge_slave_1: left promiscuous mode [ 294.253254][ T9836] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.267557][ T9836] bridge_slave_0: left allmulticast mode [ 294.273237][ T9836] bridge_slave_0: left promiscuous mode [ 294.280926][ T9836] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.581275][ T9836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.592706][ T9836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.596114][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 294.613116][ T9836] bond0 (unregistering): Released all slaves [ 294.641130][ T6681] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.648250][ T6681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.664319][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.671564][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.684447][ T5832] Bluetooth: hci3: command tx timeout [ 294.695604][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.737649][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.934277][T13569] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2134'. [ 294.951965][T13572] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2134'. [ 295.131862][T13579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2135'. [ 295.268370][T13458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.330446][ T9836] hsr_slave_0: left promiscuous mode [ 295.338884][ T9836] hsr_slave_1: left promiscuous mode [ 295.355054][ T9836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.369356][ T9836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.379991][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 295.384597][ T9836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.398648][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 295.409236][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 295.416006][ T9836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.424347][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 295.436660][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 295.470723][ T9836] veth1_macvtap: left promiscuous mode [ 295.495976][ T9836] veth0_macvtap: left promiscuous mode [ 295.501585][ T9836] veth1_vlan: left promiscuous mode [ 295.534240][ T9836] veth0_vlan: left promiscuous mode [ 295.635872][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 295.967650][ T9836] team0 (unregistering): Port device team_slave_1 removed [ 296.003631][ T9836] team0 (unregistering): Port device team_slave_0 removed [ 296.346551][T13591] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2138'. [ 296.422198][T13458] veth0_vlan: entered promiscuous mode [ 296.454565][T13586] lo speed is unknown, defaulting to 1000 [ 296.455499][T13458] veth1_vlan: entered promiscuous mode [ 296.574993][T13458] veth0_macvtap: entered promiscuous mode [ 296.632825][T13458] veth1_macvtap: entered promiscuous mode [ 296.664406][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.675666][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.675819][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 296.687459][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.703467][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.714801][T13458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.734133][T13586] chnl_net:caif_netlink_parms(): no params data found [ 296.766170][ T5832] Bluetooth: hci3: command tx timeout [ 296.775402][ T9836] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.811171][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.822163][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.833902][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.844878][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.856278][T13458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.893487][T13458] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.902702][T13458] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.911649][T13458] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.920514][T13458] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.970792][T13586] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.978997][T13586] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.987083][T13586] bridge_slave_0: entered allmulticast mode [ 296.994506][T13586] bridge_slave_0: entered promiscuous mode [ 297.018373][ T9836] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.034945][T13586] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.044005][T13586] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.054569][T13586] bridge_slave_1: entered allmulticast mode [ 297.064526][T13586] bridge_slave_1: entered promiscuous mode [ 297.112483][ T9836] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.133186][T13586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.150141][T13586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.195582][ T9836] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.231548][T13586] team0: Port device team_slave_0 added [ 297.253355][T13586] team0: Port device team_slave_1 added [ 297.323191][T13586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.333547][T13586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.363641][T13586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.378560][T13586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.385504][T13586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.413146][T13586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.426427][ T6686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.434246][ T6686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.477124][ T5832] Bluetooth: hci1: command tx timeout [ 297.699504][ T6530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.708616][T13606] sctp: [Deprecated]: syz.4.2142 (pid 13606) Use of int in max_burst socket option. [ 297.708616][T13606] Use struct sctp_assoc_value instead [ 297.721527][T13586] hsr_slave_0: entered promiscuous mode [ 297.723393][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 297.733449][ T6530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.744862][T13586] hsr_slave_1: entered promiscuous mode [ 297.752401][T13586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.760557][T13586] Cannot create hsr debugfs directory [ 297.767099][T13604] netlink: 'syz.0.2141': attribute type 4 has an invalid length. [ 297.912779][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 297.922389][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 297.931637][ T9836] bridge_slave_1: left allmulticast mode [ 297.941888][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 297.941980][ T9836] bridge_slave_1: left promiscuous mode [ 297.966156][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 297.969224][ T9836] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.000760][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.041861][ T9836] bridge_slave_0: left allmulticast mode [ 298.059457][ T9836] bridge_slave_0: left promiscuous mode [ 298.066919][ T9836] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.549690][ T9836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.562923][ T9836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.582373][ T9836] bond0 (unregistering): Released all slaves [ 298.755962][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 299.349404][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.366363][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.378551][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.403124][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.419869][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.559388][ T5832] Bluetooth: hci1: command tx timeout [ 299.795966][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 300.039335][ T5832] Bluetooth: hci2: command tx timeout [ 300.213181][T13611] lo speed is unknown, defaulting to 1000 [ 300.454123][T13629] lo speed is unknown, defaulting to 1000 [ 300.463012][T13639] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 300.502130][T13639] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2149'. [ 300.537374][T13639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.560943][ T9836] hsr_slave_0: left promiscuous mode [ 300.568344][ T9836] hsr_slave_1: left promiscuous mode [ 300.574402][ T9836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.587909][ T9836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.596416][ T9836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.603864][ T9836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.631762][ T9836] veth1_macvtap: left promiscuous mode [ 300.637339][ T9836] veth0_macvtap: left promiscuous mode [ 300.642917][ T9836] veth1_vlan: left promiscuous mode [ 300.651639][ T9836] veth0_vlan: left promiscuous mode [ 300.835858][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 301.046883][ T9836] team0 (unregistering): Port device team_slave_1 removed [ 301.081969][ T9836] team0 (unregistering): Port device team_slave_0 removed [ 301.436094][T13632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2147'. [ 301.481183][ T5832] Bluetooth: hci3: command tx timeout [ 301.636802][ T5832] Bluetooth: hci1: command tx timeout [ 301.825411][T13611] chnl_net:caif_netlink_parms(): no params data found [ 301.867793][T13652] sctp: [Deprecated]: syz.0.2151 (pid 13652) Use of int in maxseg socket option. [ 301.867793][T13652] Use struct sctp_assoc_value instead [ 301.882291][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 302.006044][T13629] chnl_net:caif_netlink_parms(): no params data found [ 302.074162][T13662] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 302.116097][ T5832] Bluetooth: hci2: command tx timeout [ 302.171854][T13611] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.186342][T13611] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.193524][T13611] bridge_slave_0: entered allmulticast mode [ 302.205288][T13611] bridge_slave_0: entered promiscuous mode [ 302.279032][T13611] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.296689][T13611] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.304220][T13611] bridge_slave_1: entered allmulticast mode [ 302.319213][T13611] bridge_slave_1: entered promiscuous mode [ 302.482543][ T9836] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.495219][T13686] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2159'. [ 302.553579][T13586] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 302.622226][T13611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.658933][T13586] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 302.728779][ T9836] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.774916][T13611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.790800][T13629] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.814222][T13629] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.824272][T13629] bridge_slave_0: entered allmulticast mode [ 302.833362][T13629] bridge_slave_0: entered promiscuous mode [ 302.845450][T13586] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 302.885029][ T9836] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.916256][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 302.939978][T13629] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.956494][T13629] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.966744][T13629] bridge_slave_1: entered allmulticast mode [ 302.974345][T13629] bridge_slave_1: entered promiscuous mode [ 303.004833][T13586] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 303.050506][ T9836] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.071189][T13709] syzkaller1: entered promiscuous mode [ 303.081917][T13709] syzkaller1: entered allmulticast mode [ 303.106075][T13629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.124030][T13611] team0: Port device team_slave_0 added [ 303.193868][T13629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.228297][T13611] team0: Port device team_slave_1 added [ 303.385705][T13629] team0: Port device team_slave_0 added [ 303.415331][T13611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.422933][T13611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.450042][T13611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.477848][T13629] team0: Port device team_slave_1 added [ 303.489512][T13611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.497554][T13611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.523864][T13611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.555876][ T5832] Bluetooth: hci3: command tx timeout [ 303.655308][T13629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.675443][T13629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.716178][ T5832] Bluetooth: hci1: command tx timeout [ 303.724628][T13629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.823385][ T9836] bridge_slave_1: left allmulticast mode [ 303.836047][ T9836] bridge_slave_1: left promiscuous mode [ 303.847506][ T9836] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.863385][ T9836] bridge_slave_0: left allmulticast mode [ 303.869485][ T9836] bridge_slave_0: left promiscuous mode [ 303.875227][ T9836] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.901497][T13739] netlink: 'syz.0.2171': attribute type 1 has an invalid length. [ 303.955904][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 304.195911][ T5832] Bluetooth: hci2: command tx timeout [ 304.292083][ T9836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.310255][ T9836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.320510][ T9836] bond0 (unregistering): Released all slaves [ 304.334630][T13629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.342366][T13629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.370306][T13629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.500370][T13611] hsr_slave_0: entered promiscuous mode [ 304.510704][T13611] hsr_slave_1: entered promiscuous mode [ 304.523423][T13611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.531577][T13611] Cannot create hsr debugfs directory [ 304.687832][T13629] hsr_slave_0: entered promiscuous mode [ 304.695644][T13629] hsr_slave_1: entered promiscuous mode [ 304.704258][T13629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.712094][T13629] Cannot create hsr debugfs directory [ 304.758653][ T9836] hsr_slave_0: left promiscuous mode [ 304.764589][T13758] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2174'. [ 304.774486][ T9836] hsr_slave_1: left promiscuous mode [ 304.780516][T13758] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2174'. [ 304.780912][ T9836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.791189][T13758] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2174'. [ 304.798636][ T9836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.816125][T13758] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2174'. [ 304.825686][ T9836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.833310][ T9836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.869284][ T9836] veth1_macvtap: left promiscuous mode [ 304.874803][ T9836] veth0_macvtap: left promiscuous mode [ 304.881612][ T9836] veth1_vlan: left promiscuous mode [ 304.890419][ T9836] veth0_vlan: left promiscuous mode [ 304.995885][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 305.281801][ T9836] team0 (unregistering): Port device team_slave_1 removed [ 305.317080][ T9836] team0 (unregistering): Port device team_slave_0 removed [ 305.405418][T13768] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 305.648570][ T5832] Bluetooth: hci3: command tx timeout [ 305.822534][T13770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2177'. [ 305.844376][T13586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.965663][T13586] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.035857][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 306.074037][ T9849] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.081222][ T9849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.093940][ T9849] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.101206][ T9849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.252365][T13785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2182'. [ 306.276974][ T5832] Bluetooth: hci2: command tx timeout [ 306.480330][T13798] veth0: entered promiscuous mode [ 306.514454][T13798] geneve2: entered promiscuous mode [ 306.538494][T13798] geneve2: entered allmulticast mode [ 306.588731][T13586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.613018][T13797] veth0: left promiscuous mode [ 306.738261][T13586] veth0_vlan: entered promiscuous mode [ 306.800464][T13586] veth1_vlan: entered promiscuous mode [ 306.900287][T13611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 306.916822][T13611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 306.959290][T13586] veth0_macvtap: entered promiscuous mode [ 306.969323][T13611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 306.993086][T13611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 307.025465][T13586] veth1_macvtap: entered promiscuous mode [ 307.075954][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 307.099519][T13586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.123244][T13586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.134895][T13586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.145072][T13629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 307.165308][T13629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 307.180372][T13586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.191100][T13586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.202124][T13586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.210351][T13629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 307.233639][T13629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 307.252297][T13586] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.261913][T13586] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.271529][T13586] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.281596][T13586] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.403337][ T9847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.412550][ T9847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.460868][T13611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.476184][ T5832] Bluetooth: hci0: command tx timeout [ 307.488050][T13629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.503735][ T6686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.512558][ T6686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.515321][T13611] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.551791][ T9849] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.558980][ T9849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.594300][ T9847] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.601499][ T9847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.632638][T13629] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.663317][ T6686] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.670482][ T6686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.717405][ T5832] Bluetooth: hci3: command tx timeout [ 307.754591][ T9847] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.761797][ T9847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.790672][T13828] x_tables: duplicate underflow at hook 3 [ 307.805703][T13611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 307.825150][T13829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2196'. [ 307.999344][ T9849] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.115874][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 308.136700][ T9849] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.164105][T13833] xt_CT: You must specify a L4 protocol and not use inversions on it [ 308.280450][ T9849] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.365478][T13611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.398661][ T9849] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.462146][T13611] veth0_vlan: entered promiscuous mode [ 308.478511][T13611] veth1_vlan: entered promiscuous mode [ 308.495487][T13629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.548532][T13611] veth0_macvtap: entered promiscuous mode [ 308.574740][T13611] veth1_macvtap: entered promiscuous mode [ 308.584315][T13629] veth0_vlan: entered promiscuous mode [ 308.610912][T13629] veth1_vlan: entered promiscuous mode [ 308.627467][T13611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.638899][T13611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.649871][T13611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.661445][T13611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.673187][T13611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.693435][T13611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.708687][T13611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.720003][T13611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.730810][T13611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.742296][T13611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.759564][T13611] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.768520][T13611] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.778091][T13611] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.787212][T13611] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.827508][T13629] veth0_macvtap: entered promiscuous mode [ 308.856257][T13629] veth1_macvtap: entered promiscuous mode [ 308.917499][ T9847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.928964][ T9847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.953840][T13629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.965510][T13629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.976258][T13629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.986877][T13629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.997698][T13629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.008619][T13629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.019847][T13629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.048000][ T9849] bridge_slave_1: left allmulticast mode [ 309.053668][ T9849] bridge_slave_1: left promiscuous mode [ 309.062038][ T9849] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.071934][ T9849] bridge_slave_0: left allmulticast mode [ 309.078962][ T9849] bridge_slave_0: left promiscuous mode [ 309.084675][ T9849] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.155959][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 309.378152][ T9849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.389025][ T9849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.399594][ T9849] bond0 (unregistering): Released all slaves [ 309.422308][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.422687][T13629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.436435][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.441656][T13629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.458827][T13629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.472179][T13629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.482256][T13629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.493348][T13629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.511377][T13629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.548558][T13629] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.585649][T13629] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.600947][T13629] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.610372][T13629] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.039232][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 310.056791][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 310.064542][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 310.079729][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 310.089490][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 310.098101][ T9849] hsr_slave_0: left promiscuous mode [ 310.116186][ T9849] hsr_slave_1: left promiscuous mode [ 310.123543][ T9849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.131569][ T9849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.140565][ T9849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.153141][ T9849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.195109][ T9849] veth1_macvtap: left promiscuous mode [ 310.195848][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 310.203955][ T9849] veth0_macvtap: left promiscuous mode [ 310.219214][ T9849] veth1_vlan: left promiscuous mode [ 310.224753][ T9849] veth0_vlan: left promiscuous mode [ 310.654851][ T9849] team0 (unregistering): Port device team_slave_1 removed [ 310.699430][ T9849] team0 (unregistering): Port device team_slave_0 removed [ 311.055666][ T6686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.064450][ T6686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.129387][T13860] lo speed is unknown, defaulting to 1000 [ 311.175108][ T6686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.183982][ T6686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.235920][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 311.410054][T13860] chnl_net:caif_netlink_parms(): no params data found [ 311.516715][ T9849] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.543953][T13860] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.551827][T13860] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.559843][T13860] bridge_slave_0: entered allmulticast mode [ 311.568113][T13860] bridge_slave_0: entered promiscuous mode [ 311.575624][T13860] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.584261][T13860] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.591652][T13860] bridge_slave_1: entered allmulticast mode [ 311.599250][T13860] bridge_slave_1: entered promiscuous mode [ 311.631597][T13860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.644413][T13860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.678448][T13860] team0: Port device team_slave_0 added [ 311.688278][T13860] team0: Port device team_slave_1 added [ 311.717946][T13860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.724907][T13860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.751795][T13860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.768238][T13860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.775186][T13860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.804444][T13860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.849361][T13860] hsr_slave_0: entered promiscuous mode [ 311.856116][T13860] hsr_slave_1: entered promiscuous mode [ 311.862257][T13860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.870966][T13860] Cannot create hsr debugfs directory [ 312.054299][ T9849] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.116346][ T5841] Bluetooth: hci1: command tx timeout [ 312.151012][ T9849] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.275909][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 312.353443][ T9849] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.553455][T13860] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 312.599756][T13860] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 312.617683][T13860] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 312.626816][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 312.635831][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 312.645264][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 312.669171][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 312.679234][T13860] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 312.686739][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 312.767926][T13879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2204'. [ 312.799410][ T9849] bridge_slave_1: left allmulticast mode [ 312.805150][ T9849] bridge_slave_1: left promiscuous mode [ 312.817131][ T9849] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.820317][T13880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2204'. [ 312.848968][ T9849] bridge_slave_0: left allmulticast mode [ 312.854873][ T9849] bridge_slave_0: left promiscuous mode [ 312.864737][ T9849] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.046657][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 313.063124][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 313.079204][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 313.096483][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 313.105932][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 313.169428][T13884] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2205'. [ 313.169712][T13885] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2205'. [ 313.281635][ T9849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.293014][ T9849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.303853][ T9849] bond0 (unregistering): Released all slaves [ 313.315846][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 313.324107][T13875] lo speed is unknown, defaulting to 1000 [ 313.519945][T13881] lo speed is unknown, defaulting to 1000 [ 313.701222][T13898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2209'. [ 313.711171][T13898] netlink: 'syz.4.2209': attribute type 1 has an invalid length. [ 313.725268][T13898] netlink: 'syz.4.2209': attribute type 1 has an invalid length. [ 313.733910][T13898] netlink: 'syz.4.2209': attribute type 2 has an invalid length. [ 313.742222][T13898] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2209'. [ 313.742853][ T9849] hsr_slave_0: left promiscuous mode [ 313.764082][ T9849] hsr_slave_1: left promiscuous mode [ 313.770365][ T9849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.778205][ T9849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.802538][ T9849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.814504][T13902] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2210'. [ 313.815711][ T9849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.824536][T13902] netlink: 'syz.4.2210': attribute type 7 has an invalid length. [ 313.844468][T13902] netlink: 'syz.4.2210': attribute type 8 has an invalid length. [ 313.852706][T13902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2210'. [ 313.867120][ T9849] veth1_macvtap: left promiscuous mode [ 313.872759][ T9849] veth0_macvtap: left promiscuous mode [ 313.878599][ T9849] veth1_vlan: left promiscuous mode [ 313.884935][ T9849] veth0_vlan: left promiscuous mode [ 314.196170][ T5841] Bluetooth: hci1: command tx timeout [ 314.264733][ T9849] team0 (unregistering): Port device team_slave_1 removed [ 314.298882][ T9849] team0 (unregistering): Port device team_slave_0 removed [ 314.355867][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 314.756070][ T5841] Bluetooth: hci2: command tx timeout [ 314.785007][T13860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.838872][T13860] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.027479][ T6686] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.034588][ T6686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.131041][T13875] chnl_net:caif_netlink_parms(): no params data found [ 315.156631][ T5841] Bluetooth: hci3: command tx timeout [ 315.200576][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.207763][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.395865][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 315.466011][T13881] chnl_net:caif_netlink_parms(): no params data found [ 315.473055][T13941] Bluetooth: MGMT ver 1.23 [ 315.597420][T13875] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.604705][T13875] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.612246][T13875] bridge_slave_0: entered allmulticast mode [ 315.621094][T13875] bridge_slave_0: entered promiscuous mode [ 315.665682][ T6686] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.679176][T13952] openvswitch: netlink: IP tunnel dst address not specified [ 315.708441][T13952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2222'. [ 315.752219][T13875] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.764936][T13875] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.767096][T13959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2222'. [ 315.773170][T13875] bridge_slave_1: entered allmulticast mode [ 315.795655][T13875] bridge_slave_1: entered promiscuous mode [ 315.833820][T13860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 315.954088][ T6686] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.013089][T13950] syz_tun (unregistering): left allmulticast mode [ 316.068822][T13875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.107806][ T6686] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.163519][T13881] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.174781][T13881] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.183120][T13881] bridge_slave_0: entered allmulticast mode [ 316.191668][T13881] bridge_slave_0: entered promiscuous mode [ 316.202470][T13875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.252823][ T6686] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.274496][T13881] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.281721][ T5841] Bluetooth: hci1: command tx timeout [ 316.289429][T13881] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.298229][T13881] bridge_slave_1: entered allmulticast mode [ 316.315251][T13881] bridge_slave_1: entered promiscuous mode [ 316.333467][T13875] team0: Port device team_slave_0 added [ 316.344999][T13875] team0: Port device team_slave_1 added [ 316.435855][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 316.472754][T13875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.484996][T13875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.512041][T13875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.525249][T13875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.532748][T13875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.559120][T13875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.602737][T13881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.667836][T13881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.845278][ T5841] Bluetooth: hci2: command tx timeout [ 316.890276][T13875] hsr_slave_0: entered promiscuous mode [ 316.899310][T13875] hsr_slave_1: entered promiscuous mode [ 316.906294][T13875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.913857][T13875] Cannot create hsr debugfs directory [ 316.960976][T13881] team0: Port device team_slave_0 added [ 316.971058][T13881] team0: Port device team_slave_1 added [ 317.078131][T13881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.085226][T13881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.112480][T13881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.151315][T13881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.158469][T13881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.185123][T13881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.222665][T13860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.240343][ T5841] Bluetooth: hci3: command tx timeout [ 317.279481][ T6686] bridge_slave_1: left allmulticast mode [ 317.285518][ T6686] bridge_slave_1: left promiscuous mode [ 317.291473][ T6686] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.318266][ T6686] bridge_slave_0: left allmulticast mode [ 317.324016][ T6686] bridge_slave_0: left promiscuous mode [ 317.333080][ T6686] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.475830][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 317.737419][T14015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.748676][ T6686] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.759808][ T6686] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.772766][ T6686] bond0 (unregistering): Released all slaves [ 317.794869][T13881] hsr_slave_0: entered promiscuous mode [ 317.803677][T13881] hsr_slave_1: entered promiscuous mode [ 317.829434][T13881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.842634][T13881] Cannot create hsr debugfs directory [ 318.055094][T14024] netlink: 'syz.0.2240': attribute type 1 has an invalid length. [ 318.070400][T14024] __nla_validate_parse: 2 callbacks suppressed [ 318.070415][T14024] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2240'. [ 318.103832][T14022] vlan1: entered allmulticast mode [ 318.109327][T14022] gretap0: entered allmulticast mode [ 318.158729][T14027] netlink: 'syz.0.2240': attribute type 1 has an invalid length. [ 318.176468][T14027] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2240'. [ 318.198824][T13860] veth0_vlan: entered promiscuous mode [ 318.214218][T13860] veth1_vlan: entered promiscuous mode [ 318.282447][ T6686] hsr_slave_0: left promiscuous mode [ 318.290538][ T6686] hsr_slave_1: left promiscuous mode [ 318.296795][ T6686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.304188][ T6686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.314027][ T6686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.321912][ T6686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.343704][ T6686] veth1_macvtap: left promiscuous mode [ 318.349624][ T6686] veth0_macvtap: left promiscuous mode [ 318.355199][ T6686] veth1_vlan: left promiscuous mode [ 318.360725][ T5841] Bluetooth: hci1: command tx timeout [ 318.366347][ T6686] veth0_vlan: left promiscuous mode [ 318.515799][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 318.731047][ T6686] team0 (unregistering): Port device team_slave_1 removed [ 318.767737][ T6686] team0 (unregistering): Port device team_slave_0 removed [ 318.918928][ T5841] Bluetooth: hci2: command tx timeout [ 319.261411][T13860] veth0_macvtap: entered promiscuous mode [ 319.290920][T13860] veth1_macvtap: entered promiscuous mode [ 319.326263][ T5841] Bluetooth: hci3: command tx timeout [ 319.399609][T13860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.422908][T13860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.434866][T13860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.459437][T13860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.484359][T13860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.500459][T13860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.535441][T13860] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.545537][T13860] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.555967][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 319.563268][T13860] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.572333][T13860] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.624242][T14050] sctp: [Deprecated]: syz.0.2247 (pid 14050) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.624242][T14050] Use struct sctp_sack_info instead [ 319.732149][ T9849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.759393][ T9849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.805057][ T9849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.820243][ T9849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.893142][T14056] IPv6: Can't replace route, no match found [ 319.961632][T13875] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 320.028839][T13875] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 320.045680][T13875] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 320.101142][T13875] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 320.248855][T14066] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2254'. [ 320.294947][ T9836] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.321618][T13881] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 320.349979][T13881] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 320.368930][T13881] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 320.389466][T13881] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 320.425232][ T9836] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.527767][ T9836] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.595819][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 320.608877][T13875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.630548][T13875] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.645524][ T9849] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.652660][ T9849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.669549][ T9847] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.676716][ T9847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.691437][T13881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.716750][ T9836] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.770230][T13881] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.795260][ T6686] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.802435][ T6686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.826424][ T9849] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.833565][ T9849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.924666][ T9836] bridge_slave_1: left allmulticast mode [ 320.932630][ T9836] bridge_slave_1: left promiscuous mode [ 320.939061][ T9836] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.956300][ T9836] bridge_slave_0: left allmulticast mode [ 320.961982][ T9836] bridge_slave_0: left promiscuous mode [ 320.968244][ T9836] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.996402][ T5841] Bluetooth: hci2: command tx timeout [ 321.252718][ T9836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.263573][ T9836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.273955][ T9836] bond0 (unregistering): Released all slaves [ 321.396157][ T5841] Bluetooth: hci3: command tx timeout [ 321.459224][T13875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.565438][T13875] veth0_vlan: entered promiscuous mode [ 321.608219][ T9836] hsr_slave_0: left promiscuous mode [ 321.614319][ T9836] hsr_slave_1: left promiscuous mode [ 321.624282][ T9836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.633258][ T9836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.635947][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 321.648336][ T9836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.656399][ T9836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.678307][ T9836] veth1_macvtap: left promiscuous mode [ 321.683812][ T9836] veth0_macvtap: left promiscuous mode [ 321.690260][ T9836] veth1_vlan: left promiscuous mode [ 321.695562][ T9836] veth0_vlan: left promiscuous mode [ 322.144773][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 322.158352][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 322.170253][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 322.183392][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 322.191267][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 322.264951][ T9836] team0 (unregistering): Port device team_slave_1 removed [ 322.303535][ T9836] team0 (unregistering): Port device team_slave_0 removed [ 322.650628][T13875] veth1_vlan: entered promiscuous mode [ 322.675800][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 322.743239][T13881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.822861][T14082] lo speed is unknown, defaulting to 1000 [ 322.879025][T13875] veth0_macvtap: entered promiscuous mode [ 322.917878][T14094] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 322.954117][T14092] gtp0: entered promiscuous mode [ 322.959965][T14092] gtp0: entered allmulticast mode [ 322.969716][T14092] xt_NFQUEUE: number of total queues is 0 [ 322.996483][T13875] veth1_macvtap: entered promiscuous mode [ 323.003186][T14094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2260'. [ 323.094947][T13881] veth0_vlan: entered promiscuous mode [ 323.163896][T14099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.168089][T13881] veth1_vlan: entered promiscuous mode [ 323.189381][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.200699][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.212466][T13875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.281123][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.294171][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.307825][T13875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.365695][T13875] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.375680][T13875] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.384569][T13875] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.394507][T13875] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.422243][T13881] veth0_macvtap: entered promiscuous mode [ 323.444380][T14112] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 323.469542][T13881] veth1_macvtap: entered promiscuous mode [ 323.524079][T14082] chnl_net:caif_netlink_parms(): no params data found [ 323.587480][T13881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.600999][T13881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.611280][T13881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.622173][T13881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.634179][T14117] xt_recent: Unsupported userspace flags (00000061) [ 323.637799][T13881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.659773][T14117] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2266'. [ 323.669667][T14117] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2266'. [ 323.715912][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 323.724574][T13881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.741893][T13881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.753456][T13881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.764878][T13881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.778871][T13881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.840775][ T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.854481][ T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.879497][T13881] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.888909][T13881] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.897811][T13881] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.906713][T13881] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.950512][T14082] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.959712][T14082] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.971216][T14082] bridge_slave_0: entered allmulticast mode [ 323.979665][T14082] bridge_slave_0: entered promiscuous mode [ 324.020742][T14082] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.033639][T14082] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.045687][T14082] bridge_slave_1: entered allmulticast mode [ 324.055650][T14082] bridge_slave_1: entered promiscuous mode [ 324.067383][ T6686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.075602][ T6686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.117125][T14135] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2271'. [ 324.131882][T14135] openvswitch: netlink: Actions may not be safe on all matching packets [ 324.167281][T14082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.177606][T14135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2271'. [ 324.196414][T14082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.287124][ T5832] Bluetooth: hci1: command tx timeout [ 324.348481][T14082] team0: Port device team_slave_0 added [ 324.378309][T14082] team0: Port device team_slave_1 added [ 324.417451][ T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.435496][ T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.510477][T14082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.537999][T14082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.593201][T14082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.689090][ T994] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.711575][T14082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.718749][T14082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.749177][T14082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.759771][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 324.797793][ T6686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.819638][ T6686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.870351][ T994] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.917921][T14082] hsr_slave_0: entered promiscuous mode [ 324.924480][T14082] hsr_slave_1: entered promiscuous mode [ 324.939582][T14082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.952467][T14082] Cannot create hsr debugfs directory [ 324.979169][ T994] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.063420][ T994] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.211880][ T994] bridge_slave_1: left allmulticast mode [ 325.217746][ T994] bridge_slave_1: left promiscuous mode [ 325.223506][ T994] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.242200][ T994] bridge_slave_0: left allmulticast mode [ 325.249125][ T994] bridge_slave_0: left promiscuous mode [ 325.254847][ T994] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.720387][ T994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.732297][ T994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.743526][ T994] bond0 (unregistering): Released all slaves [ 325.800536][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 325.893062][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 325.905607][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 325.920427][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 325.937019][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 325.946789][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 326.056137][T14162] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2278'. [ 326.225502][T14162] bond0 (unregistering): Released all slaves [ 326.314165][ T994] hsr_slave_0: left promiscuous mode [ 326.328086][ T994] hsr_slave_1: left promiscuous mode [ 326.344247][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.355512][ T994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.363240][ T5832] Bluetooth: hci1: command tx timeout [ 326.372627][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.380185][ T994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.395486][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 326.410816][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 326.419535][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 326.420940][ T994] veth1_macvtap: left promiscuous mode [ 326.432728][ T994] veth0_macvtap: left promiscuous mode [ 326.444787][ T994] veth1_vlan: left promiscuous mode [ 326.444797][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 326.450247][ T994] veth0_vlan: left promiscuous mode [ 326.463692][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 326.835883][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 326.923696][ T994] team0 (unregistering): Port device team_slave_1 removed [ 326.963337][ T994] team0 (unregistering): Port device team_slave_0 removed [ 327.349556][T14157] lo speed is unknown, defaulting to 1000 [ 327.568847][T14169] lo speed is unknown, defaulting to 1000 [ 327.660773][T14082] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 327.683537][T14082] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 327.715197][T14193] veth0: entered promiscuous mode [ 327.738844][T14082] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 327.775610][T14082] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 327.823734][T14193] netlink: 'syz.4.2285': attribute type 1 has an invalid length. [ 327.843861][T14193] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2285'. [ 327.869503][T14193] netlink: 'syz.4.2285': attribute type 1 has an invalid length. [ 327.877425][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 328.046610][ T5832] Bluetooth: hci2: command tx timeout [ 328.050611][T14157] chnl_net:caif_netlink_parms(): no params data found [ 328.104451][ T994] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.239269][ T994] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.342996][ T994] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.386315][T14157] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.393452][T14157] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.404579][T14157] bridge_slave_0: entered allmulticast mode [ 328.412728][T14157] bridge_slave_0: entered promiscuous mode [ 328.446793][ T5832] Bluetooth: hci1: command tx timeout [ 328.461566][ T994] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.475630][T14157] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.499804][T14157] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.510092][T14157] bridge_slave_1: entered allmulticast mode [ 328.524220][T14157] bridge_slave_1: entered promiscuous mode [ 328.527948][ T5832] Bluetooth: hci3: command tx timeout [ 328.574554][T14187] veth0: left promiscuous mode [ 328.676693][T14169] chnl_net:caif_netlink_parms(): no params data found [ 328.699606][T14082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.741793][T14157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.785055][T14228] Bluetooth: MGMT ver 1.23 [ 328.800690][T14157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.891978][T14157] team0: Port device team_slave_0 added [ 328.915827][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 328.964962][T14157] team0: Port device team_slave_1 added [ 329.152236][T14082] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.190682][T14157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.199497][T14157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.231699][T14157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.250807][T14157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.258020][T14157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.284758][T14157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.309932][ T994] bridge_slave_1: left allmulticast mode [ 329.315602][ T994] bridge_slave_1: left promiscuous mode [ 329.322583][ T994] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.369146][ T994] bridge_slave_0: left allmulticast mode [ 329.374805][ T994] bridge_slave_0: left promiscuous mode [ 329.385359][ T994] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.690598][ T994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.701988][ T994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.712764][ T994] bond0 (unregistering): Released all slaves [ 329.727269][T14169] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.734459][T14169] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.746201][T14169] bridge_slave_0: entered allmulticast mode [ 329.753544][T14169] bridge_slave_0: entered promiscuous mode [ 329.772548][ T9836] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.779726][ T9836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.805177][T14252] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2302'. [ 329.815056][T14252] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2302'. [ 329.824904][T14169] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.834510][T14169] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.847850][T14169] bridge_slave_1: entered allmulticast mode [ 329.861170][T14169] bridge_slave_1: entered promiscuous mode [ 329.883407][ T9836] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.890618][ T9836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.955968][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 330.116076][ T5832] Bluetooth: hci2: command tx timeout [ 330.339158][T14169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.403840][T14157] hsr_slave_0: entered promiscuous mode [ 330.420246][T14157] hsr_slave_1: entered promiscuous mode [ 330.438600][T14157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.451311][T14267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2306'. [ 330.455926][T14157] Cannot create hsr debugfs directory [ 330.516200][ T5832] Bluetooth: hci1: command tx timeout [ 330.520513][T14169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.564209][T14271] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2308'. [ 330.610886][ T5832] Bluetooth: hci3: command tx timeout [ 330.712132][ T994] hsr_slave_0: left promiscuous mode [ 330.720748][ T994] hsr_slave_1: left promiscuous mode [ 330.730046][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.737712][ T994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.746466][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.753932][ T994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.781093][ T994] veth1_macvtap: left promiscuous mode [ 330.787247][ T994] veth0_macvtap: left promiscuous mode [ 330.795876][ T994] veth1_vlan: left promiscuous mode [ 330.801314][ T994] veth0_vlan: left promiscuous mode [ 330.922810][T14283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2311'. [ 330.995874][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 331.203826][ T994] team0 (unregistering): Port device team_slave_1 removed [ 331.235384][ T994] team0 (unregistering): Port device team_slave_0 removed [ 331.573789][T14169] team0: Port device team_slave_0 added [ 331.584040][T14169] team0: Port device team_slave_1 added [ 331.776057][T14290] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 331.795640][T14169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.803290][T14169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.833746][T14290] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2312'. [ 331.843196][T14169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.859917][T14169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.867068][T14169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.893882][T14169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.922485][T14290] 8021q: VLANs not supported on sit0 [ 332.035852][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 332.089901][T14169] hsr_slave_0: entered promiscuous mode [ 332.099622][T14169] hsr_slave_1: entered promiscuous mode [ 332.106590][T14169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.114372][T14169] Cannot create hsr debugfs directory [ 332.195970][ T5832] Bluetooth: hci2: command tx timeout [ 332.218123][T14300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2315'. [ 332.477446][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2317'. [ 332.494248][T14311] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2317'. [ 332.573577][T14082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.682435][ T5832] Bluetooth: hci3: command tx timeout [ 332.694980][T14157] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 332.714510][T14157] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 332.758183][T14323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2322'. [ 332.773797][T14157] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 332.862995][T14157] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 332.923423][T14082] veth0_vlan: entered promiscuous mode [ 332.983392][T14082] veth1_vlan: entered promiscuous mode [ 332.992727][T14334] tipc: New replicast peer: 255.255.255.255 [ 333.002324][T14334] tipc: Enabled bearer , priority 10 [ 333.075786][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 333.141637][T14082] veth0_macvtap: entered promiscuous mode [ 333.160233][T14082] veth1_macvtap: entered promiscuous mode [ 333.211269][T14082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.234105][T14082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.250913][T14082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.259070][T14343] openvswitch: netlink: IP tunnel TTL not specified. [ 333.298328][T14082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.326074][T14082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.350496][T14082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.376341][T14157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.386724][T14082] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.403404][T14082] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.414539][T14082] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.427821][T14082] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.503598][T14169] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 333.541873][T14169] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 333.573082][T14169] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 333.612270][T14169] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 333.680357][T14157] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.740926][ T6681] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.748146][ T6681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.780502][ T6681] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.787689][ T6681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.844598][ T9849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.865061][ T9849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.976609][ T6686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.985200][ T6686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.995947][ T5472] tipc: Node number set to 16385 [ 334.089695][T14169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.116012][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 334.247842][T14169] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.271346][ T6681] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.278538][ T6681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.286687][ T5832] Bluetooth: hci2: command tx timeout [ 334.304817][ T6681] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.312026][ T6681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.473803][T14157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.584874][ T9836] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.630761][T14157] veth0_vlan: entered promiscuous mode [ 334.695446][ T9836] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.741154][T14157] veth1_vlan: entered promiscuous mode [ 334.757895][ T5832] Bluetooth: hci3: command tx timeout [ 334.793450][ T9836] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.843605][T14169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.922394][ T9836] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.949236][T14157] veth0_macvtap: entered promiscuous mode [ 334.967709][T14157] veth1_macvtap: entered promiscuous mode [ 334.994591][T14157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.006005][T14157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.016973][T14157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.027745][T14157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.042157][T14157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.050006][T14169] veth0_vlan: entered promiscuous mode [ 335.068470][T14157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.084798][T14157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.094783][T14157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.105640][T14157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.117185][T14157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.134162][T14157] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.145273][T14157] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.154221][T14157] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.163118][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 335.171159][T14157] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.196548][T14169] veth1_vlan: entered promiscuous mode [ 335.291142][ T9836] bridge_slave_1: left allmulticast mode [ 335.297275][ T9836] bridge_slave_1: left promiscuous mode [ 335.302957][ T9836] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.314319][ T9836] bridge_slave_0: left allmulticast mode [ 335.320576][ T9836] bridge_slave_0: left promiscuous mode [ 335.326565][ T9836] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.629414][ T9836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.641661][ T9836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.652152][ T9836] bond0 (unregistering): Released all slaves [ 335.676391][ T6681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.684227][ T6681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.686259][T14169] veth0_macvtap: entered promiscuous mode [ 335.741191][T14169] veth1_macvtap: entered promiscuous mode [ 335.783929][ T9849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.803204][ T9849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.809438][T14169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.821826][T14169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.833191][T14169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.843880][T14169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.854348][T14169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.865118][T14169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.878124][T14169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.938109][T14169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.949771][T14169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.960997][T14169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.971805][T14169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.981943][T14169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.992512][T14169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.009610][T14169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.040598][T14169] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.051973][T14169] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.063001][T14169] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.072105][T14169] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.108018][ T9836] hsr_slave_0: left promiscuous mode [ 336.114011][ T9836] hsr_slave_1: left promiscuous mode [ 336.120607][ T9836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.129045][ T9836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.137739][ T9836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.145171][ T9836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.169908][ T9836] veth1_macvtap: left promiscuous mode [ 336.175423][ T9836] veth0_macvtap: left promiscuous mode [ 336.181320][ T9836] veth1_vlan: left promiscuous mode [ 336.186888][ T9836] veth0_vlan: left promiscuous mode [ 336.195804][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 336.813748][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 336.823236][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 336.833300][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 336.860930][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 336.870597][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 336.943306][ T9836] team0 (unregistering): Port device team_slave_1 removed [ 336.979917][ T9836] team0 (unregistering): Port device team_slave_0 removed [ 337.235789][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 337.399294][T14392] lo speed is unknown, defaulting to 1000 [ 337.478646][ C1] ================================================================== [ 337.486767][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 337.494713][ C1] Read of size 2 at addr ffff888027344c2a by task syz-executor/14392 [ 337.502770][ C1] [ 337.505132][ C1] CPU: 1 UID: 0 PID: 14392 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00178-g9540984da649 #0 PREEMPT(full) [ 337.505148][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 337.505158][ C1] Call Trace: [ 337.505165][ C1] [ 337.505171][ C1] dump_stack_lvl+0x189/0x250 [ 337.505192][ C1] ? __virt_addr_valid+0x18c/0x540 [ 337.505209][ C1] ? rcu_is_watching+0x15/0xb0 [ 337.505228][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.505245][ C1] ? rcu_is_watching+0x15/0xb0 [ 337.505263][ C1] ? lock_release+0x4b/0x3e0 [ 337.505282][ C1] ? __virt_addr_valid+0x18c/0x540 [ 337.505297][ C1] ? __virt_addr_valid+0x469/0x540 [ 337.505313][ C1] print_report+0xb4/0x290 [ 337.505328][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 337.505346][ C1] kasan_report+0x118/0x150 [ 337.505363][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 337.505383][ C1] rose_timer_expiry+0x471/0x4b0 [ 337.505401][ C1] call_timer_fn+0x17b/0x5f0 [ 337.505418][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 337.505435][ C1] ? call_timer_fn+0xbe/0x5f0 [ 337.505450][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 337.505469][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 337.505481][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.505494][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 337.505512][ C1] __run_timer_base+0x61a/0x860 [ 337.505525][ C1] ? ktime_get+0x3e/0x1f0 [ 337.505541][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 337.505555][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 337.505574][ C1] run_timer_softirq+0xb7/0x180 [ 337.505589][ C1] handle_softirqs+0x283/0x870 [ 337.505610][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 337.505622][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 337.505645][ C1] __irq_exit_rcu+0xca/0x1f0 [ 337.505655][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 337.505669][ C1] irq_exit_rcu+0x9/0x30 [ 337.505678][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 337.505691][ C1] [ 337.505695][ C1] [ 337.505700][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 337.505716][ C1] RIP: 0010:lock_is_held_type+0x137/0x190 [ 337.505736][ C1] Code: 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 05 89 44 1f 07 <48> 3b 44 24 08 75 43 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 337.505769][ C1] RSP: 0018:ffffc900041d75a8 EFLAGS: 00000206 [ 337.505784][ C1] RAX: 95bda59a146fd600 RBX: 0000000000000001 RCX: 95bda59a146fd600 [ 337.505796][ C1] RDX: 0000000000000003 RSI: ffffffff8d93517b RDI: ffffffff8bc1cde0 [ 337.505808][ C1] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 337.505818][ C1] R10: 0000000000000000 R11: ffffffff825afd8c R12: 0000000000000246 [ 337.505829][ C1] R13: ffff888030515a00 R14: ffff88801aef7148 R15: 0000000000000002 [ 337.505844][ C1] ? kernfs_root+0x1c/0x230 [ 337.505877][ C1] kernfs_activate_one+0xd9/0x370 [ 337.505904][ C1] kernfs_add_one+0x3d6/0x520 [ 337.505931][ C1] __kernfs_create_file+0x22b/0x2e0 [ 337.505950][ C1] sysfs_add_file_mode_ns+0x238/0x300 [ 337.505974][ C1] internal_create_group+0x66d/0x1110 [ 337.506004][ C1] ? register_netdevice+0x126c/0x1af0 [ 337.506026][ C1] ? register_netdev+0x40/0x60 [ 337.506047][ C1] ? vti6_init_net+0x238/0x370 [ 337.506065][ C1] ? ops_init+0x359/0x5c0 [ 337.506083][ C1] ? __pfx_internal_create_group+0x10/0x10 [ 337.506105][ C1] ? __x64_sys_unshare+0x38/0x50 [ 337.506130][ C1] sysfs_create_groups+0x59/0x120 [ 337.506154][ C1] netdev_queue_update_kobjects+0x2a6/0x6c0 [ 337.506182][ C1] netdev_register_kobject+0x236/0x2f0 [ 337.506207][ C1] register_netdevice+0x126c/0x1af0 [ 337.506229][ C1] ? __mutex_lock+0x51b/0xe80 [ 337.506255][ C1] ? __pfx_register_netdevice+0x10/0x10 [ 337.506274][ C1] ? net_generic+0x1e/0x240 [ 337.506285][ C1] ? net_generic+0x1e/0x240 [ 337.506296][ C1] ? net_generic+0x1e/0x240 [ 337.506309][ C1] register_netdev+0x40/0x60 [ 337.506324][ C1] vti6_init_net+0x238/0x370 [ 337.506339][ C1] ops_init+0x359/0x5c0 [ 337.506355][ C1] setup_net+0x238/0x830 [ 337.506367][ C1] ? __pfx_setup_net+0x10/0x10 [ 337.506381][ C1] ? down_read_killable+0x1d1/0x350 [ 337.506398][ C1] copy_net_ns+0x32e/0x590 [ 337.506412][ C1] create_new_namespaces+0x3d3/0x700 [ 337.506436][ C1] unshare_nsproxy_namespaces+0x11c/0x170 [ 337.506456][ C1] ksys_unshare+0x4c8/0x8c0 [ 337.506472][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 337.506485][ C1] ? dnotify_flush+0x1db/0x5e0 [ 337.506501][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 337.506524][ C1] __x64_sys_unshare+0x38/0x50 [ 337.506538][ C1] do_syscall_64+0xf6/0x210 [ 337.506553][ C1] ? clear_bhb_loop+0x45/0xa0 [ 337.506567][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.506579][ C1] RIP: 0033:0x7fd2c4f90167 [ 337.506590][ C1] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.506601][ C1] RSP: 002b:00007fffb4f68018 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 337.506613][ C1] RAX: ffffffffffffffda RBX: 00007fd2c51b5f40 RCX: 00007fd2c4f90167 [ 337.506622][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 337.506630][ C1] RBP: 00007fd2c51b6738 R08: 0000000000000000 R09: 0000000000000000 [ 337.506637][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 337.506645][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 337.506658][ C1] [ 337.506662][ C1] [ 338.041154][ C1] Allocated by task 14082: [ 338.045576][ C1] kasan_save_track+0x3e/0x80 [ 338.050250][ C1] __kasan_kmalloc+0x93/0xb0 [ 338.054881][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 338.060279][ C1] __ipv6_dev_mc_inc+0x420/0xaf0 [ 338.065240][ C1] ipv6_add_dev+0xe54/0x1370 [ 338.069828][ C1] addrconf_notify+0x794/0x1010 [ 338.074678][ C1] notifier_call_chain+0x1b3/0x3e0 [ 338.079787][ C1] register_netdevice+0x1608/0x1af0 [ 338.085017][ C1] register_vlan_dev+0x3cb/0x800 [ 338.089950][ C1] vlan_newlink+0x4b2/0x610 [ 338.094481][ C1] rtnl_newlink_create+0x305/0xaf0 [ 338.099614][ C1] rtnl_newlink+0x16d6/0x1c70 [ 338.104309][ C1] rtnetlink_rcv_msg+0x7cc/0xb70 [ 338.109261][ C1] netlink_rcv_skb+0x219/0x490 [ 338.114011][ C1] netlink_unicast+0x758/0x8d0 [ 338.118780][ C1] netlink_sendmsg+0x805/0xb30 [ 338.123548][ C1] __sock_sendmsg+0x219/0x270 [ 338.128221][ C1] __sys_sendto+0x3bd/0x520 [ 338.132710][ C1] __x64_sys_sendto+0xde/0x100 [ 338.137478][ C1] do_syscall_64+0xf6/0x210 [ 338.141988][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.147875][ C1] [ 338.150184][ C1] Freed by task 6681: [ 338.154145][ C1] kasan_save_track+0x3e/0x80 [ 338.158819][ C1] kasan_save_free_info+0x46/0x50 [ 338.163872][ C1] __kasan_slab_free+0x62/0x70 [ 338.168624][ C1] kmem_cache_free_bulk+0x2d1/0x520 [ 338.173810][ C1] kvfree_rcu_bulk+0xe5/0x1e0 [ 338.178491][ C1] kfree_rcu_monitor+0x211/0x2a0 [ 338.183510][ C1] process_scheduled_works+0xadb/0x17a0 [ 338.189104][ C1] worker_thread+0x8a0/0xda0 [ 338.193682][ C1] kthread+0x70e/0x8a0 [ 338.197749][ C1] ret_from_fork+0x4b/0x80 [ 338.202171][ C1] ret_from_fork_asm+0x1a/0x30 [ 338.206928][ C1] [ 338.209257][ C1] Last potentially related work creation: [ 338.214952][ C1] kasan_save_stack+0x3e/0x60 [ 338.219626][ C1] kasan_record_aux_stack+0xbc/0xd0 [ 338.224832][ C1] kvfree_call_rcu+0xbb/0x410 [ 338.229512][ C1] ipv6_mc_destroy_dev+0x3c5/0x5a0 [ 338.234631][ C1] addrconf_ifdown+0x139e/0x1880 [ 338.239571][ C1] addrconf_notify+0x1bc/0x1010 [ 338.244465][ C1] notifier_call_chain+0x1b3/0x3e0 [ 338.249569][ C1] unregister_netdevice_many_notify+0x15d8/0x2330 [ 338.255991][ C1] default_device_exit_batch+0x819/0x890 [ 338.261638][ C1] cleanup_net+0x7a9/0xbd0 [ 338.266058][ C1] process_scheduled_works+0xadb/0x17a0 [ 338.271617][ C1] worker_thread+0x8a0/0xda0 [ 338.275893][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 338.276194][ C1] kthread+0x70e/0x8a0 [ 338.287113][ C1] ret_from_fork+0x4b/0x80 [ 338.291552][ C1] ret_from_fork_asm+0x1a/0x30 [ 338.296333][ C1] [ 338.298666][ C1] The buggy address belongs to the object at ffff888027344c00 [ 338.298666][ C1] which belongs to the cache kmalloc-512 of size 512 [ 338.312736][ C1] The buggy address is located 42 bytes inside of [ 338.312736][ C1] freed 512-byte region [ffff888027344c00, ffff888027344e00) [ 338.326447][ C1] [ 338.328756][ C1] The buggy address belongs to the physical page: [ 338.335156][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27344 [ 338.343936][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 338.352421][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 338.359967][ C1] page_type: f5(slab) [ 338.363949][ C1] raw: 00fff00000000040 ffff88801a041c80 ffffea00018bb100 dead000000000002 [ 338.372522][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 338.381100][ C1] head: 00fff00000000040 ffff88801a041c80 ffffea00018bb100 dead000000000002 [ 338.389763][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 338.398446][ C1] head: 00fff00000000002 ffffea00009cd101 00000000ffffffff 00000000ffffffff [ 338.407123][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 338.415790][ C1] page dumped because: kasan: bad access detected [ 338.422211][ C1] page_owner tracks the page as allocated [ 338.427914][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 5827, tgid 5827 (syz-executor), ts 87618609357, free_ts 87240901142 [ 338.447437][ C1] post_alloc_hook+0x1d8/0x230 [ 338.452200][ C1] get_page_from_freelist+0x21ce/0x22b0 [ 338.457754][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 338.463572][ C1] allocate_slab+0x65/0x3b0 [ 338.468060][ C1] ___slab_alloc+0xbfc/0x1480 [ 338.472729][ C1] __kmalloc_node_noprof+0x2fd/0x4e0 [ 338.478016][ C1] alloc_slab_obj_exts+0x39/0xa0 [ 338.482959][ C1] __memcg_slab_post_alloc_hook+0x332/0x820 [ 338.488861][ C1] kmem_cache_alloc_noprof+0x2bf/0x3c0 [ 338.494308][ C1] anon_vma_clone+0xb8/0x4f0 [ 338.498898][ C1] anon_vma_fork+0x79/0x500 [ 338.503449][ C1] copy_mm+0xcbc/0x2100 [ 338.507591][ C1] copy_process+0x16d3/0x3b80 [ 338.512261][ C1] kernel_clone+0x21e/0x870 [ 338.516772][ C1] __x64_sys_clone+0x18b/0x1e0 [ 338.521542][ C1] do_syscall_64+0xf6/0x210 [ 338.526037][ C1] page last free pid 5916 tgid 5915 stack trace: [ 338.532372][ C1] __free_frozen_pages+0xb0e/0xcd0 [ 338.537499][ C1] stack_depot_save_flags+0x447/0x910 [ 338.542889][ C1] kasan_save_track+0x4f/0x80 [ 338.547554][ C1] __kasan_slab_alloc+0x6c/0x80 [ 338.552423][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 338.557879][ C1] skb_clone+0x212/0x3a0 [ 338.562126][ C1] dev_queue_xmit_nit+0x416/0xcc0 [ 338.567139][ C1] dev_hard_start_xmit+0x1d5/0x880 [ 338.572239][ C1] __dev_queue_xmit+0x1adf/0x3a70 [ 338.577268][ C1] __netlink_deliver_tap+0x5ad/0x850 [ 338.582575][ C1] netlink_deliver_tap+0x19c/0x1b0 [ 338.587677][ C1] netlink_sendskb+0x68/0x140 [ 338.592348][ C1] ctrl_getfamily+0x499/0x590 [ 338.597027][ C1] genl_family_rcv_msg_doit+0x212/0x300 [ 338.602595][ C1] genl_rcv_msg+0x60e/0x790 [ 338.607089][ C1] netlink_rcv_skb+0x219/0x490 [ 338.611879][ C1] [ 338.614210][ C1] Memory state around the buggy address: [ 338.619843][ C1] ffff888027344b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 338.627938][ C1] ffff888027344b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 338.635992][ C1] >ffff888027344c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 338.644045][ C1] ^ [ 338.649422][ C1] ffff888027344c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 338.657477][ C1] ffff888027344d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 338.665530][ C1] ================================================================== [ 338.673660][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 338.680880][ C1] CPU: 1 UID: 0 PID: 14392 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00178-g9540984da649 #0 PREEMPT(full) [ 338.693118][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 338.703167][ C1] Call Trace: [ 338.706454][ C1] [ 338.709287][ C1] dump_stack_lvl+0x99/0x250 [ 338.713874][ C1] ? __asan_memcpy+0x40/0x70 [ 338.718471][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.723682][ C1] ? __pfx__printk+0x10/0x10 [ 338.728267][ C1] panic+0x2db/0x790 [ 338.732159][ C1] ? __pfx_panic+0x10/0x10 [ 338.736581][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 338.742484][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 338.748373][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 338.754686][ C1] ? print_memory_metadata+0x314/0x400 [ 338.760157][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 338.765293][ C1] check_panic_on_warn+0x89/0xb0 [ 338.770222][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 338.775348][ C1] end_report+0x78/0x160 [ 338.779613][ C1] kasan_report+0x129/0x150 [ 338.784144][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 338.789277][ C1] rose_timer_expiry+0x471/0x4b0 [ 338.794228][ C1] call_timer_fn+0x17b/0x5f0 [ 338.798852][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 338.804338][ C1] ? call_timer_fn+0xbe/0x5f0 [ 338.809022][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 338.814136][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 338.819366][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.824580][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 338.830048][ C1] __run_timer_base+0x61a/0x860 [ 338.834894][ C1] ? ktime_get+0x3e/0x1f0 [ 338.839232][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 338.844612][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 338.850871][ C1] run_timer_softirq+0xb7/0x180 [ 338.855746][ C1] handle_softirqs+0x283/0x870 [ 338.860523][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 338.865308][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 338.870608][ C1] __irq_exit_rcu+0xca/0x1f0 [ 338.875187][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 338.880389][ C1] irq_exit_rcu+0x9/0x30 [ 338.884642][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 338.890271][ C1] [ 338.893193][ C1] [ 338.896125][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 338.902117][ C1] RIP: 0010:lock_is_held_type+0x137/0x190 [ 338.907853][ C1] Code: 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 05 89 44 1f 07 <48> 3b 44 24 08 75 43 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 338.927452][ C1] RSP: 0018:ffffc900041d75a8 EFLAGS: 00000206 [ 338.933541][ C1] RAX: 95bda59a146fd600 RBX: 0000000000000001 RCX: 95bda59a146fd600 [ 338.941540][ C1] RDX: 0000000000000003 RSI: ffffffff8d93517b RDI: ffffffff8bc1cde0 [ 338.949506][ C1] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 338.957473][ C1] R10: 0000000000000000 R11: ffffffff825afd8c R12: 0000000000000246 [ 338.965443][ C1] R13: ffff888030515a00 R14: ffff88801aef7148 R15: 0000000000000002 [ 338.973406][ C1] ? kernfs_root+0x1c/0x230 [ 338.977937][ C1] kernfs_activate_one+0xd9/0x370 [ 338.982974][ C1] kernfs_add_one+0x3d6/0x520 [ 338.987648][ C1] __kernfs_create_file+0x22b/0x2e0 [ 338.992851][ C1] sysfs_add_file_mode_ns+0x238/0x300 [ 338.998244][ C1] internal_create_group+0x66d/0x1110 [ 339.003667][ C1] ? register_netdevice+0x126c/0x1af0 [ 339.009031][ C1] ? register_netdev+0x40/0x60 [ 339.013814][ C1] ? vti6_init_net+0x238/0x370 [ 339.018578][ C1] ? ops_init+0x359/0x5c0 [ 339.022913][ C1] ? __pfx_internal_create_group+0x10/0x10 [ 339.028712][ C1] ? __x64_sys_unshare+0x38/0x50 [ 339.033643][ C1] sysfs_create_groups+0x59/0x120 [ 339.038674][ C1] netdev_queue_update_kobjects+0x2a6/0x6c0 [ 339.044596][ C1] netdev_register_kobject+0x236/0x2f0 [ 339.050048][ C1] register_netdevice+0x126c/0x1af0 [ 339.055238][ C1] ? __mutex_lock+0x51b/0xe80 [ 339.059914][ C1] ? __pfx_register_netdevice+0x10/0x10 [ 339.065457][ C1] ? net_generic+0x1e/0x240 [ 339.069971][ C1] ? net_generic+0x1e/0x240 [ 339.074464][ C1] ? net_generic+0x1e/0x240 [ 339.078964][ C1] register_netdev+0x40/0x60 [ 339.083559][ C1] vti6_init_net+0x238/0x370 [ 339.088141][ C1] ops_init+0x359/0x5c0 [ 339.092302][ C1] setup_net+0x238/0x830 [ 339.096547][ C1] ? __pfx_setup_net+0x10/0x10 [ 339.101312][ C1] ? down_read_killable+0x1d1/0x350 [ 339.106501][ C1] copy_net_ns+0x32e/0x590 [ 339.110907][ C1] create_new_namespaces+0x3d3/0x700 [ 339.116221][ C1] unshare_nsproxy_namespaces+0x11c/0x170 [ 339.121960][ C1] ksys_unshare+0x4c8/0x8c0 [ 339.126473][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 339.131521][ C1] ? dnotify_flush+0x1db/0x5e0 [ 339.136291][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 339.141613][ C1] __x64_sys_unshare+0x38/0x50 [ 339.146487][ C1] do_syscall_64+0xf6/0x210 [ 339.150982][ C1] ? clear_bhb_loop+0x45/0xa0 [ 339.155648][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.161583][ C1] RIP: 0033:0x7fd2c4f90167 [ 339.165993][ C1] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.185586][ C1] RSP: 002b:00007fffb4f68018 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 339.193988][ C1] RAX: ffffffffffffffda RBX: 00007fd2c51b5f40 RCX: 00007fd2c4f90167 [ 339.201957][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 339.210012][ C1] RBP: 00007fd2c51b6738 R08: 0000000000000000 R09: 0000000000000000 [ 339.218068][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 339.226039][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 339.234010][ C1] [ 339.237441][ C1] Kernel Offset: disabled [ 339.241775][ C1] Rebooting in 86400 seconds..