last executing test programs: 1m33.430973522s ago: executing program 3 (id=256): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1m32.696914792s ago: executing program 0 (id=239): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m17.562862306s ago: executing program 3 (id=256): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1m16.5990417s ago: executing program 0 (id=239): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 59.106563194s ago: executing program 3 (id=256): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 57.960484157s ago: executing program 0 (id=239): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 44.846197742s ago: executing program 3 (id=256): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 43.582646777s ago: executing program 0 (id=239): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 30.830451934s ago: executing program 3 (id=256): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 29.086216092s ago: executing program 0 (id=239): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 11.778202907s ago: executing program 0 (id=239): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 11.121089224s ago: executing program 3 (id=256): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 6.94869523s ago: executing program 2 (id=1680): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0xfffffffe, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 6.823753678s ago: executing program 2 (id=1682): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'rose0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x182804, 0x0) close(r1) socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)="895211", 0x3}, {&(0x7f0000001940)="9c74dfbf77572856c888a8", 0xb}], 0x2) 6.443066279s ago: executing program 4 (id=1685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x40004) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x84000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 6.366096848s ago: executing program 4 (id=1686): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6}, 0x20) syz_emit_ethernet(0x9e, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x61}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x63, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x6}, {"4adcda08f6e83e2aa00e133f88a8349f88a8d34258b7ce59c9f907afa16494c9529c474f408faf3b9f94bd27baf2da8080408833ba4d60cbac74d7"}}}}, 0x71) 4.682236505s ago: executing program 2 (id=1688): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 4.343532882s ago: executing program 4 (id=1691): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r2, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r3, 0x0, 0x0) 4.272887154s ago: executing program 2 (id=1693): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r0, 0x0, 0x0, 0x4004, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) 3.390276969s ago: executing program 4 (id=1695): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000010008000bfa3000000000000070300000dfeffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6403000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1000}, 0x10}, 0x94) epoll_create1(0x0) epoll_create1(0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a80200000800500040002000000140005"], 0x40}, 0x1, 0x0, 0x0, 0x24004001}, 0x10) 3.24806812s ago: executing program 1 (id=1696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x40004) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x84000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3.232761968s ago: executing program 4 (id=1697): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 3.141489981s ago: executing program 1 (id=1698): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f00000003c0)="84", 0x1}], 0x2}}], 0x1, 0x4400c800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300), 0xa6, 0x3b00, 0x0, 0xfffffffffffffdfd) 3.129173885s ago: executing program 4 (id=1699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet(0x2, 0xa, 0x400) sendmsg$NFT_BATCH(r0, 0x0, 0x40004) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x84000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3.022426544s ago: executing program 1 (id=1700): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40}, {0x1, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) 2.950750597s ago: executing program 1 (id=1701): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000000780)=0x7fff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6fb}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x0, 0x40, 0xfffffff7, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfd, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @empty}}}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000e40d000000400000e4eddc65d59eafaa6f254a68f45fe04ed45b6ae1862148b59f6271f3ff1c84d38bdb0f318ed7c909946f7c82800044ad2eec9905362f1dfaaee0b7e36c1d2857e97fb52946c5c14fc88689469262af361a043a107a", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xffffffea, 0x0}, 0x20040005) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) 2.020638932s ago: executing program 1 (id=1702): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0x2) 1.05842008s ago: executing program 1 (id=1703): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0xffe0}, {0x10, 0xfff1}, {0x5, 0x7}}}, 0x24}}, 0x4044000) 104.782681ms ago: executing program 2 (id=1704): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 0s ago: executing program 2 (id=1705): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x13, 0x0, 0x2}]}}, 0x0, 0x26}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): devsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.127725][ T8786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.136728][ T8786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.254547][ T3530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.270898][ T3530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.397847][ T2934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.411457][ T1106] bridge_slave_1: left allmulticast mode [ 189.419969][ T2934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.427937][ T1106] bridge_slave_1: left promiscuous mode [ 189.434851][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.447882][ T1106] bridge_slave_0: left allmulticast mode [ 189.453576][ T1106] bridge_slave_0: left promiscuous mode [ 189.459794][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.273742][ T5153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 190.297294][ T5153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 190.311606][ T5153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 190.322569][ T5153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 190.342616][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 190.540649][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.558182][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.573911][ T1106] bond0 (unregistering): Released all slaves [ 190.784248][ T9221] lo speed is unknown, defaulting to 1000 [ 191.836378][ T1106] hsr_slave_0: left promiscuous mode [ 191.842514][ T1106] hsr_slave_1: left promiscuous mode [ 191.849935][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.859117][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.869464][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.877336][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.906803][ T1106] veth1_macvtap: left promiscuous mode [ 191.912395][ T1106] veth0_macvtap: left promiscuous mode [ 191.918807][ T1106] veth1_vlan: left promiscuous mode [ 191.924173][ T1106] veth0_vlan: left promiscuous mode [ 192.445224][ T5153] Bluetooth: hci1: command tx timeout [ 192.825049][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 192.833485][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 192.843457][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 192.854373][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 192.868934][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 192.890458][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 192.934242][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 193.468177][ T9296] lo speed is unknown, defaulting to 1000 [ 193.496471][ T9301] netlink: 9 bytes leftover after parsing attributes in process `syz.2.913'. [ 193.540288][ T9301] gretap0: entered promiscuous mode [ 193.588034][ T9301] netlink: 5 bytes leftover after parsing attributes in process `syz.2.913'. [ 193.640360][ T9221] chnl_net:caif_netlink_parms(): no params data found [ 193.694488][ T9301] 0猉功D: renamed from gretap0 [ 193.734246][ T9301] 0猉功D: left promiscuous mode [ 193.751056][ T9301] 0猉功D: entered allmulticast mode [ 193.762275][ T9301] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 194.210507][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.367281][ T9221] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.405029][ T9221] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.412680][ T9221] bridge_slave_0: entered allmulticast mode [ 194.444157][ T9221] bridge_slave_0: entered promiscuous mode [ 194.526188][ T5839] Bluetooth: hci1: command 0x041b tx timeout [ 194.548214][ T1106] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.579705][ T9221] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.608351][ T9221] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.629175][ T9221] bridge_slave_1: entered allmulticast mode [ 194.650215][ T9221] bridge_slave_1: entered promiscuous mode [ 194.781143][ T1106] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.926949][ T5848] Bluetooth: hci3: command tx timeout [ 194.927675][ T9221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.007997][ T1106] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.050457][ T9221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.141518][ T1106] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.267140][ T9221] team0: Port device team_slave_0 added [ 195.322971][ T9221] team0: Port device team_slave_1 added [ 195.602425][ T9221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.625610][ T9221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.673977][ T9221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.761656][ T9221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.785978][ T9221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.836751][ T9221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.915427][ T9296] chnl_net:caif_netlink_parms(): no params data found [ 196.027665][ T9221] hsr_slave_0: entered promiscuous mode [ 196.034480][ T9221] hsr_slave_1: entered promiscuous mode [ 196.042405][ T9221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.050929][ T9221] Cannot create hsr debugfs directory [ 196.101499][ T1106] bridge_slave_1: left allmulticast mode [ 196.111955][ T1106] bridge_slave_1: left promiscuous mode [ 196.121283][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.144726][ T1106] bridge_slave_0: left allmulticast mode [ 196.167412][ T1106] bridge_slave_0: left promiscuous mode [ 196.173314][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.288785][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 196.605111][ T5837] Bluetooth: hci1: command 0x041b tx timeout [ 196.716118][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.727875][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.737768][ T1106] bond0 (unregistering): Released all slaves [ 196.850408][ T9424] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 196.871291][ T9429] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 197.008049][ T5837] Bluetooth: hci3: command 0x041b tx timeout [ 197.014416][ T9436] raw_sendmsg: syz.2.952 forgot to set AF_INET. Fix it! [ 197.174516][ T9445] netlink: 32 bytes leftover after parsing attributes in process `syz.1.956'. [ 197.206268][ T9447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.957'. [ 197.249909][ T9296] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.268454][ T9296] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.283549][ T9296] bridge_slave_0: entered allmulticast mode [ 197.293831][ T9449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.958'. [ 197.294303][ T9296] bridge_slave_0: entered promiscuous mode [ 197.311612][ T9296] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.318981][ T9296] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.327150][ T9296] bridge_slave_1: entered allmulticast mode [ 197.335338][ T9296] bridge_slave_1: entered promiscuous mode [ 197.508855][ T9296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.551554][ T9296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.868515][ T1106] hsr_slave_0: left promiscuous mode [ 197.888208][ T1106] hsr_slave_1: left promiscuous mode [ 197.904343][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.916588][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.960966][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.988776][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.048838][ T1106] veth1_macvtap: left promiscuous mode [ 198.054437][ T1106] veth0_macvtap: left promiscuous mode [ 198.066490][ T1106] veth1_vlan: left promiscuous mode [ 198.071875][ T1106] veth0_vlan: left promiscuous mode [ 198.686672][ T5837] Bluetooth: hci1: command 0x041b tx timeout [ 198.832857][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 198.832907][ T9488] netlink: 28 bytes leftover after parsing attributes in process `syz.4.968'. [ 198.856333][ T9488] netlink: 'syz.4.968': attribute type 7 has an invalid length. [ 198.864108][ T9488] netlink: 'syz.4.968': attribute type 8 has an invalid length. [ 198.875418][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.968'. [ 198.928777][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 198.941084][ T9490] netlink: 32 bytes leftover after parsing attributes in process `syz.2.969'. [ 199.085015][ T5837] Bluetooth: hci3: command 0x041b tx timeout [ 199.318358][ T9296] team0: Port device team_slave_0 added [ 199.380251][ T9488] erspan0: entered promiscuous mode [ 199.399855][ T9488] batadv_slave_1: entered promiscuous mode [ 199.422296][ T9488] erspan0: left promiscuous mode [ 199.428815][ T9488] batadv_slave_1: left promiscuous mode [ 199.458620][ T9296] team0: Port device team_slave_1 added [ 199.587577][ T9494] syzkaller1: entered promiscuous mode [ 199.603798][ T9494] syzkaller1: entered allmulticast mode [ 199.652039][ T9296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.660991][ T9296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.693094][ T9296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.820541][ T9296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.833978][ T9296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.869337][ T9296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.178869][ T9521] netlink: 32 bytes leftover after parsing attributes in process `syz.1.980'. [ 200.256767][ T9296] hsr_slave_0: entered promiscuous mode [ 200.279783][ T9296] hsr_slave_1: entered promiscuous mode [ 200.309532][ T9296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.328478][ T9296] Cannot create hsr debugfs directory [ 200.765644][ T5153] Bluetooth: hci1: command 0x041b tx timeout [ 201.166305][ T5153] Bluetooth: hci3: command 0x041b tx timeout [ 201.540687][ T9221] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 201.666489][ T9221] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 201.692551][ T9552] netlink: 32 bytes leftover after parsing attributes in process `syz.4.995'. [ 201.883746][ T9221] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 201.900062][ T9221] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 202.297167][ T9221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.363683][ T9221] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.403182][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.410430][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.427108][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.434339][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.542300][ T9296] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 202.559033][ T9296] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 202.589979][ T9296] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 202.643795][ T9296] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 203.000659][ T9296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.049821][ T9296] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.086537][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.093723][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.112424][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1006'. [ 203.114148][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.128552][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.246113][ T5837] Bluetooth: hci3: command 0x041b tx timeout [ 203.290742][ T9221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.297407][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1007'. [ 203.446116][ T9221] veth0_vlan: entered promiscuous mode [ 203.493473][ T9221] veth1_vlan: entered promiscuous mode [ 203.586902][ T9221] veth0_macvtap: entered promiscuous mode [ 203.616777][ T9221] veth1_macvtap: entered promiscuous mode [ 203.682990][ T9221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.749332][ T9221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.811012][ T9221] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.849065][ T9221] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.873372][ T9221] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.904477][ T9221] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.206927][ T9296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.426236][ T2934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.434126][ T2934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.700182][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.701977][ T9296] veth0_vlan: entered promiscuous mode [ 204.738521][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.763058][ T9296] veth1_vlan: entered promiscuous mode [ 205.006710][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1022'. [ 205.032009][ T9296] veth0_macvtap: entered promiscuous mode [ 205.081103][ T9296] veth1_macvtap: entered promiscuous mode [ 205.325369][ T5837] Bluetooth: hci3: command 0x041b tx timeout [ 205.390815][ T9296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.502429][ T9296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.621876][ T1106] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.729007][ T1106] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.787959][ T9296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.799734][ T9296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.810185][ T9296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.823012][ T9296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.888429][ T1106] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.981072][ T1106] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.044538][ T3530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.072061][ T3530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.117170][ T3530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.127265][ T3530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.349398][ T1106] bridge_slave_1: left allmulticast mode [ 206.355534][ T1106] bridge_slave_1: left promiscuous mode [ 206.361646][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.379043][ T1106] bridge_slave_0: left allmulticast mode [ 206.384757][ T1106] bridge_slave_0: left promiscuous mode [ 206.392852][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.206555][ T5153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.227721][ T5153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.248610][ T5153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.260759][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.276780][ T5153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.277328][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.293530][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.304883][ T1106] bond0 (unregistering): Released all slaves [ 207.393122][ T9729] lo speed is unknown, defaulting to 1000 [ 207.648213][ T9741] syzkaller1: entered promiscuous mode [ 207.653738][ T9741] syzkaller1: entered allmulticast mode [ 208.458579][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.468539][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.480833][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.495495][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.505931][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.704621][ T9754] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.722447][ T9754] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.732192][ T9754] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.742520][ T9754] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.946223][ T1106] hsr_slave_0: left promiscuous mode [ 208.952282][ T1106] hsr_slave_1: left promiscuous mode [ 208.966563][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.974054][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.998097][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.016223][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.041394][ T1106] veth1_macvtap: left promiscuous mode [ 209.047112][ T1106] veth0_macvtap: left promiscuous mode [ 209.053900][ T1106] veth1_vlan: left promiscuous mode [ 209.060440][ T1106] veth0_vlan: left promiscuous mode [ 209.327702][ T5153] Bluetooth: hci1: command tx timeout [ 209.470158][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 209.507510][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 210.012524][ T9763] lo speed is unknown, defaulting to 1000 [ 210.062747][ T9786] tls_set_device_offload_rx: netdev not found [ 210.608910][ T5153] Bluetooth: hci3: command tx timeout [ 210.691249][ T9729] chnl_net:caif_netlink_parms(): no params data found [ 211.262520][ T9729] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.275077][ T9729] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.282505][ T9729] bridge_slave_0: entered allmulticast mode [ 211.291115][ T9729] bridge_slave_0: entered promiscuous mode [ 211.321159][ T9729] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.328949][ T9729] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.332234][ T9834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1052'. [ 211.337270][ T9729] bridge_slave_1: entered allmulticast mode [ 211.350912][ T9834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1052'. [ 211.353076][ T9729] bridge_slave_1: entered promiscuous mode [ 211.406089][ T5153] Bluetooth: hci1: command tx timeout [ 211.424204][ T1106] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.508990][ T1106] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.576374][ T9729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.636545][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1054'. [ 211.668127][ T1106] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.718894][ T9729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.048159][ T1106] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.139211][ T9729] team0: Port device team_slave_0 added [ 212.197788][ T9729] team0: Port device team_slave_1 added [ 212.350151][ T9763] chnl_net:caif_netlink_parms(): no params data found [ 212.450745][ T9729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.460200][ T9729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.495376][ T9729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.565622][ T9729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.580276][ T9729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.594233][ T9890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1064'. [ 212.609189][ T9729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.626623][ T9890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1064'. [ 212.685325][ T5153] Bluetooth: hci3: command tx timeout [ 212.874062][ T9729] hsr_slave_0: entered promiscuous mode [ 212.888235][ T9729] hsr_slave_1: entered promiscuous mode [ 212.894415][ T9729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.909400][ T9729] Cannot create hsr debugfs directory [ 212.918526][ T1106] bridge_slave_1: left allmulticast mode [ 212.924186][ T1106] bridge_slave_1: left promiscuous mode [ 212.934181][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.944154][ T1106] bridge_slave_0: left allmulticast mode [ 212.951463][ T1106] bridge_slave_0: left promiscuous mode [ 212.957738][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.287416][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.299795][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.311281][ T1106] bond0 (unregistering): Released all slaves [ 213.495679][ T5153] Bluetooth: hci1: command tx timeout [ 213.715552][ T9919] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 213.723010][ T9919] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 213.751011][ T9763] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.760813][ T9763] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.770586][ T9763] bridge_slave_0: entered allmulticast mode [ 213.780792][ T9763] bridge_slave_0: entered promiscuous mode [ 213.852810][ T9763] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.860178][ T9763] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.876660][ T9763] bridge_slave_1: entered allmulticast mode [ 213.884499][ T9763] bridge_slave_1: entered promiscuous mode [ 214.017466][ T9938] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1075'. [ 214.027013][ T9938] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1075'. [ 214.340004][ T9938] bond0: entered promiscuous mode [ 214.350881][ T9938] bond0: left promiscuous mode [ 214.547403][ T9763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.573543][ T9763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.765161][ T5153] Bluetooth: hci3: command tx timeout [ 214.889720][ T9763] team0: Port device team_slave_0 added [ 214.947825][ T9763] team0: Port device team_slave_1 added [ 214.983292][ T9963] geneve0: left promiscuous mode [ 215.093655][ T9963] team0 (unregistering): Port device geneve0 removed [ 215.137212][ T1106] hsr_slave_0: left promiscuous mode [ 215.144585][ T1106] hsr_slave_1: left promiscuous mode [ 215.152767][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.163394][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.190041][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.197982][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.218060][ T1106] veth1_macvtap: left promiscuous mode [ 215.223609][ T1106] veth0_macvtap: left promiscuous mode [ 215.229441][ T1106] veth1_vlan: left promiscuous mode [ 215.234734][ T1106] veth0_vlan: left promiscuous mode [ 215.564953][ T5153] Bluetooth: hci1: command tx timeout [ 215.669682][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 215.711378][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 216.091166][ T9763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.103152][ T9763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.134635][ T9763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.207321][ T9763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.214358][ T9763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.252682][ T9763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.311488][ T9968] lo speed is unknown, defaulting to 1000 [ 216.592164][ T9763] hsr_slave_0: entered promiscuous mode [ 216.612674][ T9763] hsr_slave_1: entered promiscuous mode [ 216.635825][ T9763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.655815][ T9763] Cannot create hsr debugfs directory [ 216.845040][ T5153] Bluetooth: hci3: command tx timeout [ 216.855862][ T9999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1092'. [ 216.867462][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1091'. [ 217.509410][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'. [ 217.521404][T10016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1096'. [ 217.597263][T10016] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.606821][T10016] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.615728][T10016] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.624432][T10016] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.815839][ T9729] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 217.947449][ T9729] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 218.007349][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1102'. [ 218.024124][ T9729] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 218.040183][ T9729] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 218.052881][T10029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1102'. [ 218.395473][ T9729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.501699][ T9729] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.562741][ T3530] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.569984][ T3530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.632751][ T2934] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.640062][ T2934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.693282][ T9763] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 218.714694][ T9763] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 218.730964][T10051] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1108'. [ 218.748588][ T9763] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 218.766513][ T9763] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 219.022511][ T9763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.089561][ T9763] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.121956][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.129332][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.158851][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.166090][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.284363][ T9729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.089430][T10083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1114'. [ 220.810657][T10080] tipc: Disabling bearer [ 220.822741][T10080] team0 (unregistering): Port device vlan0 removed [ 220.964734][ T9729] veth0_vlan: entered promiscuous mode [ 220.996525][ T9763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.040841][ T9729] veth1_vlan: entered promiscuous mode [ 221.213093][ T9763] veth0_vlan: entered promiscuous mode [ 221.227746][ T9729] veth0_macvtap: entered promiscuous mode [ 221.264283][ T9763] veth1_vlan: entered promiscuous mode [ 221.283631][ T9729] veth1_macvtap: entered promiscuous mode [ 221.395138][ T9729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.444593][ T9729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.509702][ T9763] veth0_macvtap: entered promiscuous mode [ 221.549103][ T9729] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.585180][ T9729] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.602437][ T9729] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.622961][ T9729] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.885196][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 221.933076][ T9763] veth1_macvtap: entered promiscuous mode [ 222.063288][ T9763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.120254][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1129'. [ 222.148192][ T9763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.213683][ T9763] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.258814][ T9763] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.279837][ T9763] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.299062][ T9763] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.331671][ T2934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.340925][ T2934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.575047][ T3536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.609827][ T3536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.701198][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.738375][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.879997][T10146] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1139'. [ 222.892092][ T3536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.907789][T10146] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1139'. [ 222.908661][ T3536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.180731][ T2934] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.380334][ T2934] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.490310][ T2934] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.639442][ T2934] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.036938][ T2934] bridge_slave_1: left allmulticast mode [ 224.042677][ T2934] bridge_slave_1: left promiscuous mode [ 224.053087][ T2934] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.077787][ T2934] bridge_slave_0: left allmulticast mode [ 224.083495][ T2934] bridge_slave_0: left promiscuous mode [ 224.103577][ T2934] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.241591][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 224.262994][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 224.278607][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 224.288595][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 224.296335][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 224.712734][ T2934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.737836][ T2934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.763700][ T2934] bond0 (unregistering): Released all slaves [ 224.826278][T10199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1146'. [ 224.978759][T10204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1147'. [ 225.034184][T10179] lo speed is unknown, defaulting to 1000 [ 225.226674][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 225.236525][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 225.244485][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 225.258906][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 225.266639][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.703714][T10212] lo speed is unknown, defaulting to 1000 [ 226.228605][T10243] xt_CT: No such helper "syz0" [ 226.365232][ T5153] Bluetooth: hci1: command tx timeout [ 226.496161][T10179] chnl_net:caif_netlink_parms(): no params data found [ 226.755472][ T2934] hsr_slave_0: left promiscuous mode [ 226.761914][ T2934] hsr_slave_1: left promiscuous mode [ 226.769783][ T2934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.779421][ T2934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.788402][ T2934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.796614][ T2934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.818696][ T2934] veth1_macvtap: left promiscuous mode [ 226.824333][ T2934] veth0_macvtap: left promiscuous mode [ 226.830191][ T2934] veth1_vlan: left promiscuous mode [ 226.837933][ T2934] veth0_vlan: left promiscuous mode [ 227.309716][ T2934] team0 (unregistering): Port device team_slave_1 removed [ 227.328682][ T5153] Bluetooth: hci3: command tx timeout [ 227.364047][ T2934] team0 (unregistering): Port device team_slave_0 removed [ 227.777387][T10269] syzkaller0: entered promiscuous mode [ 227.782893][T10269] syzkaller0: entered allmulticast mode [ 227.880335][T10278] 0猉功D: left allmulticast mode [ 227.901508][T10278] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.913220][T10278] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.455090][ T5153] Bluetooth: hci1: command tx timeout [ 229.204083][T10273] lo speed is unknown, defaulting to 1000 [ 229.306106][T10179] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.330915][T10179] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.355094][T10179] bridge_slave_0: entered allmulticast mode [ 229.362856][T10179] bridge_slave_0: entered promiscuous mode [ 229.415247][ T5837] Bluetooth: hci3: command tx timeout [ 229.470344][T10179] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.478131][T10179] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.496811][T10179] bridge_slave_1: entered allmulticast mode [ 229.504551][T10179] bridge_slave_1: entered promiscuous mode [ 229.608774][T10179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.657899][T10179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.760231][T10277] lo speed is unknown, defaulting to 1000 [ 229.868955][T10179] team0: Port device team_slave_0 added [ 229.959641][T10179] team0: Port device team_slave_1 added [ 230.159940][T10179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.177265][T10179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.228237][T10179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.248950][T10212] chnl_net:caif_netlink_parms(): no params data found [ 230.336903][T10179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.343891][T10179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.395745][T10179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.480836][ T5497] veth0_vlan: left promiscuous mode [ 230.534866][ T5153] Bluetooth: hci1: command tx timeout [ 230.576022][ T5497] veth0_vlan: entered promiscuous mode [ 230.659849][ T2934] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.702789][T10321] netlink: 'syz.1.1170': attribute type 10 has an invalid length. [ 230.781645][ T2934] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.908516][T10179] hsr_slave_0: entered promiscuous mode [ 230.927733][T10179] hsr_slave_1: entered promiscuous mode [ 230.934284][T10179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.948520][T10179] Cannot create hsr debugfs directory [ 230.956909][T10212] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.968695][T10212] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.977716][T10212] bridge_slave_0: entered allmulticast mode [ 230.988982][T10212] bridge_slave_0: entered promiscuous mode [ 231.062139][ T2934] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.180704][T10212] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.196727][T10212] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.245538][T10212] bridge_slave_1: entered allmulticast mode [ 231.287882][T10212] bridge_slave_1: entered promiscuous mode [ 231.352130][ T2934] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.422623][T10338] netlink: 'syz.1.1172': attribute type 4 has an invalid length. [ 231.487868][ T5153] Bluetooth: hci3: command tx timeout [ 231.522057][T10344] netlink: 'syz.4.1174': attribute type 12 has an invalid length. [ 231.631069][T10212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.717986][T10212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.893123][T10212] team0: Port device team_slave_0 added [ 231.937786][T10212] team0: Port device team_slave_1 added [ 232.045643][ T2934] bridge_slave_1: left allmulticast mode [ 232.054540][ T2934] bridge_slave_1: left promiscuous mode [ 232.060737][ T2934] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.072831][ T2934] bridge_slave_0: left allmulticast mode [ 232.079338][ T2934] bridge_slave_0: left promiscuous mode [ 232.086448][ T2934] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.401429][ T2934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.412132][ T2934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.423090][ T2934] bond0 (unregistering): Released all slaves [ 232.441144][T10212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.451392][T10212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.488214][T10212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.519703][T10212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.527188][T10212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.554002][T10212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.589939][T10367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1182'. [ 232.606763][ T5153] Bluetooth: hci1: command tx timeout [ 232.870363][T10212] hsr_slave_0: entered promiscuous mode [ 232.879100][T10212] hsr_slave_1: entered promiscuous mode [ 232.890324][T10212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.898038][T10212] Cannot create hsr debugfs directory [ 233.011965][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1186'. [ 233.065742][T10384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1186'. [ 233.502652][ T2934] hsr_slave_0: left promiscuous mode [ 233.516418][ T2934] hsr_slave_1: left promiscuous mode [ 233.527228][ T2934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.545058][ T2934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.560909][ T2934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.568373][ T5153] Bluetooth: hci3: command tx timeout [ 233.584160][ T2934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.626587][ T2934] veth1_macvtap: left promiscuous mode [ 233.632126][ T2934] veth0_macvtap: left promiscuous mode [ 233.640014][ T2934] veth1_vlan: left promiscuous mode [ 233.646520][ T2934] veth0_vlan: left promiscuous mode [ 234.081554][ T2934] team0 (unregistering): Port device team_slave_1 removed [ 234.122110][ T2934] team0 (unregistering): Port device team_slave_0 removed [ 234.542926][T10399] syzkaller1: entered promiscuous mode [ 234.552733][T10399] syzkaller1: entered allmulticast mode [ 234.725580][T10413] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1195'. [ 234.735454][T10411] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1195'. [ 234.789402][T10179] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 234.876914][T10179] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 234.921377][T10179] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 234.973131][T10421] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1198'. [ 235.002683][T10179] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 235.140862][T10424] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1198'. [ 235.585293][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1204'. [ 235.650051][T10179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.796175][T10179] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.832727][T10212] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 235.865103][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.872295][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.896797][T10212] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 235.913335][T10212] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 235.944610][T10212] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 235.970237][ T2934] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.977405][ T2934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.180668][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1211'. [ 236.241451][T10481] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 236.272147][T10481] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 236.394702][T10212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.418885][T10489] netlink: 'syz.1.1213': attribute type 13 has an invalid length. [ 236.474749][T10493] netlink: 'syz.2.1214': attribute type 9 has an invalid length. [ 236.488414][T10489] veth0_macvtap: left promiscuous mode [ 236.494099][T10493] netlink: 'syz.2.1214': attribute type 9 has an invalid length. [ 236.510829][T10489] macvtap0: entered allmulticast mode [ 236.526712][T10489] macvtap0: refused to change device tx_queue_len [ 236.537986][T10212] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.612981][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.620202][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.653008][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.660223][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.773620][T10179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.800882][T10506] syzkaller1: entered promiscuous mode [ 236.810942][T10506] syzkaller1: entered allmulticast mode [ 237.089361][T10179] veth0_vlan: entered promiscuous mode [ 237.132572][T10179] veth1_vlan: entered promiscuous mode [ 237.287491][T10179] veth0_macvtap: entered promiscuous mode [ 237.334400][T10179] veth1_macvtap: entered promiscuous mode [ 237.398397][T10179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.440374][T10179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.503675][T10179] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.521588][T10179] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.544856][T10179] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.570381][T10179] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.609824][T10212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.939410][T10212] veth0_vlan: entered promiscuous mode [ 237.998065][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.016319][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.049754][T10212] veth1_vlan: entered promiscuous mode [ 238.133100][T10556] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1228'. [ 238.164658][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.221811][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.441738][T10212] veth0_macvtap: entered promiscuous mode [ 238.482941][T10212] veth1_macvtap: entered promiscuous mode [ 238.558962][T10212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.614503][T10212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.741999][T10212] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.769583][T10212] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.790197][T10212] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.799750][T10212] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.003516][ T1106] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.100319][ T1106] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.150875][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.181396][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.212850][ T1106] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.258617][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.266677][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.335301][ T1106] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.547228][ T1106] bridge_slave_1: left allmulticast mode [ 239.552919][ T1106] bridge_slave_1: left promiscuous mode [ 239.563921][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.586187][ T1106] bridge_slave_0: left allmulticast mode [ 239.591914][ T1106] bridge_slave_0: left promiscuous mode [ 239.616090][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.077669][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.088977][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.099602][ T1106] bond0 (unregistering): Released all slaves [ 240.129577][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.139638][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.148158][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.159842][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.168094][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.300829][T10595] lo speed is unknown, defaulting to 1000 [ 241.079332][T10616] lo speed is unknown, defaulting to 1000 [ 241.159552][ T1106] hsr_slave_0: left promiscuous mode [ 241.171702][ T1106] hsr_slave_1: left promiscuous mode [ 241.186519][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.204446][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.257577][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.284939][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.376614][ T1106] veth1_macvtap: left promiscuous mode [ 241.385197][ T1106] veth0_macvtap: left promiscuous mode [ 241.396674][ T1106] veth1_vlan: left promiscuous mode [ 241.409071][ T1106] veth0_vlan: left promiscuous mode [ 241.432196][ T5153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 241.448837][ T5153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 241.457764][ T5153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 241.469605][ T5153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 241.478247][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 241.988725][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 242.023898][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 242.205683][ T5837] Bluetooth: hci1: command tx timeout [ 242.539992][T10640] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1249'. [ 242.823940][T10595] chnl_net:caif_netlink_parms(): no params data found [ 242.898699][T10629] lo speed is unknown, defaulting to 1000 [ 243.385863][T10595] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.394678][T10595] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.402291][T10595] bridge_slave_0: entered allmulticast mode [ 243.411259][T10595] bridge_slave_0: entered promiscuous mode [ 243.455203][T10595] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.472355][T10595] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.486495][T10595] bridge_slave_1: entered allmulticast mode [ 243.494285][T10595] bridge_slave_1: entered promiscuous mode [ 243.565144][ T5837] Bluetooth: hci3: command tx timeout [ 243.650734][T10595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.773619][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.821230][T10595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.971732][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.997309][T10686] netlink: 'syz.1.1259': attribute type 1 has an invalid length. [ 244.028621][T10595] team0: Port device team_slave_0 added [ 244.093848][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.211958][T10595] team0: Port device team_slave_1 added [ 244.239368][T10691] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 244.270255][T10695] 8021q: adding VLAN 0 to HW filter on device bond5 [ 244.278983][ T13] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 244.285068][ T5837] Bluetooth: hci1: command tx timeout [ 244.343559][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.387330][T10704] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1263'. [ 244.404963][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1263'. [ 244.416542][ T3536] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 244.491066][T10595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.508929][T10595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.569807][T10595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.605728][T10595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.613442][T10595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.640619][T10595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.826883][T10595] hsr_slave_0: entered promiscuous mode [ 244.845836][T10595] hsr_slave_1: entered promiscuous mode [ 244.852272][T10595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.884861][T10595] Cannot create hsr debugfs directory [ 245.036429][T10721] macvtap2: entered allmulticast mode [ 245.060131][T10721] veth0_macvtap: entered allmulticast mode [ 245.172890][T10629] chnl_net:caif_netlink_parms(): no params data found [ 245.286215][T10731] tipc: Enabled bearer , priority 0 [ 245.468121][ T59] bridge_slave_1: left allmulticast mode [ 245.492581][ T59] bridge_slave_1: left promiscuous mode [ 245.510943][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.603729][ T59] bridge_slave_0: left allmulticast mode [ 245.637160][ T59] bridge_slave_0: left promiscuous mode [ 245.650686][ T5837] Bluetooth: hci3: command tx timeout [ 245.656557][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.184075][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.197570][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.208760][ T59] bond0 (unregistering): Released all slaves [ 246.248585][T10732] syzkaller0: entered promiscuous mode [ 246.254079][T10732] syzkaller0: entered allmulticast mode [ 246.260358][T10732] tipc: Resetting bearer [ 246.354373][ T3530] tipc: Resetting bearer [ 246.363575][T10730] tipc: Resetting bearer [ 246.369591][ T5837] Bluetooth: hci1: command tx timeout [ 246.517181][ T5945] tipc: Node number set to 1082731101 [ 247.611394][T10730] tipc: Disabling bearer [ 247.735325][ T5837] Bluetooth: hci3: command tx timeout [ 247.841045][T10629] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.868146][T10629] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.887011][T10629] bridge_slave_0: entered allmulticast mode [ 247.907214][T10629] bridge_slave_0: entered promiscuous mode [ 247.980857][T10629] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.995193][T10629] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.011013][T10629] bridge_slave_1: entered allmulticast mode [ 248.024445][T10629] bridge_slave_1: entered promiscuous mode [ 248.400285][T10629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.445090][ T5153] Bluetooth: hci1: command tx timeout [ 248.453003][T10793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1281'. [ 248.557873][T10629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.677371][T10800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1283'. [ 248.781129][ T59] hsr_slave_0: left promiscuous mode [ 248.839738][ T59] hsr_slave_1: left promiscuous mode [ 248.848048][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.860685][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.890520][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.904702][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.908573][T10808] netlink: 'syz.2.1284': attribute type 1 has an invalid length. [ 248.944366][ T59] veth1_macvtap: left promiscuous mode [ 248.950359][ T59] veth0_macvtap: left promiscuous mode [ 248.957629][ T59] veth1_vlan: left promiscuous mode [ 248.963201][ T59] veth0_vlan: left promiscuous mode [ 249.372020][ T59] team0 (unregistering): Port device team_slave_1 removed [ 249.436828][ T59] team0 (unregistering): Port device team_slave_0 removed [ 249.815052][ T5153] Bluetooth: hci3: command tx timeout [ 249.929473][T10808] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 250.015295][T10810] gretap0: entered promiscuous mode [ 250.101419][T10629] team0: Port device team_slave_0 added [ 250.111361][T10629] team0: Port device team_slave_1 added [ 250.131614][T10824] netlink: 'syz.4.1287': attribute type 4 has an invalid length. [ 250.341380][T10629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.344209][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1290'. [ 250.354414][T10629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.384014][T10629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.491375][T10629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.499507][T10629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.527913][T10629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.595511][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1290'. [ 250.709149][T10629] hsr_slave_0: entered promiscuous mode [ 250.718989][T10629] hsr_slave_1: entered promiscuous mode [ 250.729274][T10629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.738720][T10629] Cannot create hsr debugfs directory [ 250.880224][T10839] lo speed is unknown, defaulting to 1000 [ 250.952304][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1292'. [ 251.197961][T10595] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 251.280546][T10595] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 251.324945][T10595] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 251.359113][T10595] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 251.373077][T10852] tipc: Enabled bearer , priority 0 [ 251.382442][T10854] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 251.453684][T10858] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1298'. [ 251.496786][T10852] syzkaller0: entered promiscuous mode [ 251.502310][T10852] syzkaller0: entered allmulticast mode [ 251.525497][T10862] tipc: Resetting bearer [ 251.842343][T10851] tipc: Resetting bearer [ 251.885276][ T5153] Bluetooth: hci3: command 0x0405 tx timeout [ 251.990973][T10879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1302'. [ 252.427189][ T5945] tipc: Node number set to 3166405784 [ 253.301834][T10851] tipc: Disabling bearer [ 253.335119][T10883] bridge4: port 1(veth0_to_bond) entered blocking state [ 253.342321][T10883] bridge4: port 1(veth0_to_bond) entered disabled state [ 253.349980][T10883] veth0_to_bond: entered allmulticast mode [ 253.358695][T10883] veth0_to_bond: entered promiscuous mode [ 253.375071][T10884] vlan4: entered allmulticast mode [ 253.380327][T10884] veth1: entered allmulticast mode [ 253.389162][T10884] bridge4: port 2(vlan4) entered blocking state [ 253.395831][T10884] bridge4: port 2(vlan4) entered disabled state [ 253.404307][T10884] vlan4: entered promiscuous mode [ 253.418074][T10884] veth1: entered promiscuous mode [ 253.529168][T10890] netlink: 'syz.2.1303': attribute type 10 has an invalid length. [ 253.533108][T10894] 0猉功D: left promiscuous mode [ 253.544056][T10894] bridge0: port 1(30猉功D) entered disabled state [ 253.554910][T10894] syz_tun: left allmulticast mode [ 253.561842][T10894] syz_tun: left promiscuous mode [ 253.572240][T10894] bridge0: port 2(syz_tun) entered disabled state [ 253.581127][T10894] veth0_to_bond: left allmulticast mode [ 253.586898][T10894] veth0_to_bond: left promiscuous mode [ 253.592492][T10894] bridge4: port 1(veth0_to_bond) entered disabled state [ 253.604024][T10894] bond2: (slave gretap1): Releasing active interface [ 253.614629][T10894] bond4: (slave geneve2): Releasing active interface [ 253.621481][T10894] bond4: (slave geneve2): the permanent HWaddr of slave - 3e:33:fb:4d:c3:51 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 253.639210][T10894] bond4: (slave ip6gretap1): making interface the new active one [ 253.649354][T10894] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 253.658907][T10894] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 253.667490][T10894] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 253.676001][T10894] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 253.690972][T10894] bond4: (slave ip6gretap1): Releasing active interface [ 253.704322][T10894] bond5: (slave gretap0): Releasing active interface [ 253.724359][T10894] vlan4: left promiscuous mode [ 253.729616][T10894] veth1: left promiscuous mode [ 253.734618][T10894] bridge4: port 2(vlan4) entered disabled state [ 253.752779][T10890] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 253.976721][T10595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.976956][ T5153] Bluetooth: hci3: command 0x0405 tx timeout [ 254.032443][T10595] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.070258][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.077476][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.143815][T10629] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 254.172609][T10629] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 254.210073][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.217306][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.254052][T10902] lo speed is unknown, defaulting to 1000 [ 254.254195][T10629] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 254.285963][T10629] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 254.686044][T10629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.893551][T10629] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.036502][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.043669][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.119956][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.127176][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.176826][T10595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.301799][T10629] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.507789][T10595] veth0_vlan: entered promiscuous mode [ 255.549981][T10595] veth1_vlan: entered promiscuous mode [ 255.713319][T10595] veth0_macvtap: entered promiscuous mode [ 255.780143][T10595] veth1_macvtap: entered promiscuous mode [ 255.846235][T10595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.864289][T10595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.927940][T10595] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.949101][T10595] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.972551][T10595] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.995229][T10595] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.131082][T10629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.345572][T10629] veth0_vlan: entered promiscuous mode [ 256.388289][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.392476][T10629] veth1_vlan: entered promiscuous mode [ 256.446759][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.554664][ T2934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.572669][ T2934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.637518][T10629] veth0_macvtap: entered promiscuous mode [ 256.698950][T10629] veth1_macvtap: entered promiscuous mode [ 256.761936][T10629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.775286][T10629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.841422][T10629] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.873934][T10629] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.894329][T10629] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.913469][T10629] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.122607][T11017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1339'. [ 257.225713][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.233579][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.310156][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.335174][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.430527][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.634369][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.837753][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.949263][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.181996][ T36] bridge_slave_1: left allmulticast mode [ 258.195340][ T36] bridge_slave_1: left promiscuous mode [ 258.216534][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.230225][ T36] bridge_slave_0: left allmulticast mode [ 258.245176][ T36] bridge_slave_0: left promiscuous mode [ 258.250992][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.748689][ T5153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 258.757728][ T5153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 258.768110][ T5153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 258.782983][ T5153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 258.802201][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 258.870544][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.881484][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.892056][ T36] bond0 (unregistering): Released all slaves [ 258.947032][T11056] lo speed is unknown, defaulting to 1000 [ 259.652719][ T36] hsr_slave_0: left promiscuous mode [ 259.671318][ T36] hsr_slave_1: left promiscuous mode [ 259.688666][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.706517][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.727468][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.755118][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.806074][ T36] veth1_macvtap: left promiscuous mode [ 259.814636][ T36] veth0_macvtap: left promiscuous mode [ 259.825982][ T36] veth1_vlan: left promiscuous mode [ 259.831346][ T36] veth0_vlan: left promiscuous mode [ 260.071523][ T5153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 260.082145][ T5153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 260.095793][ T5153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 260.114070][ T5153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 260.122352][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 260.446111][ T36] team0 (unregistering): Port device team_slave_1 removed [ 260.489629][ T36] team0 (unregistering): Port device team_slave_0 removed [ 260.855851][ T5837] Bluetooth: hci1: command tx timeout [ 260.867963][T11074] bridge0: port 1(30猉功D) entered blocking state [ 260.874689][T11074] bridge0: port 1(30猉功D) entered disabled state [ 260.882925][T11074] 0猉功D: entered allmulticast mode [ 260.890279][T11074] 0猉功D: entered promiscuous mode [ 260.897589][T11074] bridge0: port 1(30猉功D) entered blocking state [ 260.904981][T11074] bridge0: port 1(30猉功D) entered forwarding state [ 261.049108][T11087] lo speed is unknown, defaulting to 1000 [ 261.107453][T11056] chnl_net:caif_netlink_parms(): no params data found [ 261.375266][T11101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1354'. [ 261.749688][T11056] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.765203][T11056] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.778540][T11056] bridge_slave_0: entered allmulticast mode [ 261.796868][T11056] bridge_slave_0: entered promiscuous mode [ 261.840985][T11056] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.865287][T11056] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.882806][T11056] bridge_slave_1: entered allmulticast mode [ 261.899963][T11056] bridge_slave_1: entered promiscuous mode [ 262.000710][T11056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.055792][T11135] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1363'. [ 262.069408][T11056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.103969][T11133] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1363'. [ 262.146919][T11056] team0: Port device team_slave_0 added [ 262.158036][T11056] team0: Port device team_slave_1 added [ 262.180384][T11137] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1363'. [ 262.205009][ T5837] Bluetooth: hci3: command tx timeout [ 262.244689][T11056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.269217][T11056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.296823][T11056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.321698][T11056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.330605][T11056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.357472][T11056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.476509][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.614329][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.721591][T11056] hsr_slave_0: entered promiscuous mode [ 262.757473][T11056] hsr_slave_1: entered promiscuous mode [ 262.764509][T11056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.804852][T11056] Cannot create hsr debugfs directory [ 262.891217][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.925622][ T5837] Bluetooth: hci1: command tx timeout [ 263.218860][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.262838][T11177] tipc: Enabled bearer , priority 0 [ 263.320122][T11182] syzkaller0: entered promiscuous mode [ 263.331724][T11182] syzkaller0: entered allmulticast mode [ 263.369857][T11189] tipc: Resetting bearer [ 263.448594][T11166] tipc: Resetting bearer [ 263.492171][T11166] tipc: Disabling bearer [ 263.498431][T11198] x_tables: duplicate underflow at hook 1 [ 263.550139][T11087] chnl_net:caif_netlink_parms(): no params data found [ 264.048944][ T36] bridge_slave_1: left allmulticast mode [ 264.060877][ T36] bridge_slave_1: left promiscuous mode [ 264.067657][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.083043][ T36] bridge_slave_0: left allmulticast mode [ 264.089184][ T36] bridge_slave_0: left promiscuous mode [ 264.099391][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.285522][ T5837] Bluetooth: hci3: command tx timeout [ 264.587199][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.602589][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.613090][ T36] bond0 (unregistering): Released all slaves [ 264.625605][T11087] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.632849][T11087] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.640642][T11087] bridge_slave_0: entered allmulticast mode [ 264.648628][T11087] bridge_slave_0: entered promiscuous mode [ 264.668346][T11087] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.682115][T11087] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.700557][T11238] netlink: 'syz.2.1390': attribute type 25 has an invalid length. [ 264.700834][T11087] bridge_slave_1: entered allmulticast mode [ 264.716610][T11087] bridge_slave_1: entered promiscuous mode [ 264.982027][T11087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.006389][ T5837] Bluetooth: hci1: command tx timeout [ 265.088085][T11087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.148310][T11254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1397'. [ 265.347623][T11251] syzkaller1: entered promiscuous mode [ 265.362502][T11251] syzkaller1: entered allmulticast mode [ 265.418877][T11087] team0: Port device team_slave_0 added [ 265.447943][T11087] team0: Port device team_slave_1 added [ 265.463496][T11265] netlink: 'syz.1.1401': attribute type 25 has an invalid length. [ 265.742047][T11087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.753433][T11087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.780137][T11087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.808532][ T36] hsr_slave_0: left promiscuous mode [ 265.827755][ T36] hsr_slave_1: left promiscuous mode [ 265.836585][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.844020][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.893248][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.914948][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.988536][ T36] veth1_macvtap: left promiscuous mode [ 266.014956][ T36] veth0_macvtap: left promiscuous mode [ 266.035033][ T36] veth1_vlan: left promiscuous mode [ 266.054936][ T36] veth0_vlan: left promiscuous mode [ 266.364946][ T5837] Bluetooth: hci3: command tx timeout [ 266.592570][ T36] team0 (unregistering): Port device team_slave_1 removed [ 266.633239][ T36] team0 (unregistering): Port device team_slave_0 removed [ 267.012148][T11087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.019303][T11087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.055269][T11087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.085147][ T5837] Bluetooth: hci1: command tx timeout [ 267.273736][T11293] netlink: 'syz.2.1413': attribute type 25 has an invalid length. [ 267.316929][T11056] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 267.341470][T11087] hsr_slave_0: entered promiscuous mode [ 267.364447][T11087] hsr_slave_1: entered promiscuous mode [ 267.382231][T11087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.397077][T11087] Cannot create hsr debugfs directory [ 267.403290][T11056] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 267.469654][T11298] tipc: Enabling of bearer rejected, already enabled [ 267.479249][T11056] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 267.554728][T11056] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 267.748005][T11318] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1417'. [ 268.208196][T11056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.403382][T11056] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.446648][ T5837] Bluetooth: hci3: command tx timeout [ 268.551124][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.558363][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.599133][T11348] tipc: Enabled bearer , priority 0 [ 268.617232][T11348] syzkaller0: entered promiscuous mode [ 268.622736][T11348] syzkaller0: entered allmulticast mode [ 268.665322][T11348] tipc: Resetting bearer [ 268.680847][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.688092][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.730363][T11347] tipc: Resetting bearer [ 268.760033][T11347] tipc: Disabling bearer [ 268.853763][T11087] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 268.929173][T11087] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 268.960220][T11087] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 268.993583][T11056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.038998][T11087] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 269.391731][T11087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.473494][T11087] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.506552][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.513724][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.570876][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.578098][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.631395][T11056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.800408][T11408] tipc: Enabled bearer , priority 0 [ 269.826666][T11408] syzkaller0: entered promiscuous mode [ 269.838998][T11408] syzkaller0: entered allmulticast mode [ 269.972650][T11408] tipc: Resetting bearer [ 269.990276][T11056] veth0_vlan: entered promiscuous mode [ 270.055529][T11407] tipc: Resetting bearer [ 270.124506][T11407] tipc: Disabling bearer [ 270.161626][T11056] veth1_vlan: entered promiscuous mode [ 270.241635][T11056] veth0_macvtap: entered promiscuous mode [ 270.287587][T11056] veth1_macvtap: entered promiscuous mode [ 270.353608][T11056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.427215][T11056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.476837][T11056] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.494238][T11056] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.506394][T11056] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.516694][T11056] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.717807][T11087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.877037][T11450] xt_CT: No such helper "syz0" [ 270.979373][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.003087][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.016503][T11087] veth0_vlan: entered promiscuous mode [ 271.100680][T11087] veth1_vlan: entered promiscuous mode [ 271.130924][ T3530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.163464][ T3530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.224677][T11087] veth0_macvtap: entered promiscuous mode [ 271.246679][T11087] veth1_macvtap: entered promiscuous mode [ 271.285595][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1456'. [ 271.294511][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1456'. [ 271.363662][T11087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.463552][T11087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.484470][T11087] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.498837][T11087] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.509226][T11087] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.524998][T11087] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.751136][ T3536] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.929991][ T3536] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.023285][ T2934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.056371][ T2934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.083836][ T2934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.097086][ T2934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.137306][ T3536] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.233988][ T3536] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.450790][ T3536] bridge_slave_1: left allmulticast mode [ 272.461652][ T3536] bridge_slave_1: left promiscuous mode [ 272.467797][ T3536] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.480124][ T3536] bridge_slave_0: left allmulticast mode [ 272.486431][ T3536] bridge_slave_0: left promiscuous mode [ 272.492119][ T3536] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.878400][ T3536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.893599][ T3536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.907745][ T3536] bond0 (unregistering): Released all slaves [ 273.215485][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.224465][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.238002][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 273.250046][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 273.258679][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.432575][T11496] lo speed is unknown, defaulting to 1000 [ 273.534418][ T3536] hsr_slave_0: left promiscuous mode [ 273.565206][ T3536] hsr_slave_1: left promiscuous mode [ 273.582030][ T3536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.590203][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.602312][ T3536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.610613][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.661861][ T3536] veth1_macvtap: left promiscuous mode [ 273.672838][ T3536] veth0_macvtap: left promiscuous mode [ 273.682421][ T3536] veth1_vlan: left promiscuous mode [ 273.688171][ T3536] veth0_vlan: left promiscuous mode [ 274.362336][ T3536] team0 (unregistering): Port device team_slave_1 removed [ 274.371428][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.384306][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.399553][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.410608][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.427972][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.438174][ T3536] team0 (unregistering): Port device team_slave_0 removed [ 274.846400][T11513] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 274.853862][T11513] bridge0: port 2(wlan1) entered blocking state [ 274.865280][T11513] bridge0: port 2(wlan1) entered disabled state [ 274.878255][T11513] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 274.892218][T11513] bridge0: port 2(wlan1) entered blocking state [ 274.898667][T11513] bridge0: port 2(wlan1) entered forwarding state [ 274.935077][ T36] bridge0: port 2(wlan1) entered disabled state [ 275.032015][T11517] lo speed is unknown, defaulting to 1000 [ 275.065681][T11522] netlink: 'syz.2.1467': attribute type 25 has an invalid length. [ 275.325356][ T5837] Bluetooth: hci1: command tx timeout [ 275.551121][T11496] chnl_net:caif_netlink_parms(): no params data found [ 276.039764][ T3536] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.217631][ T3536] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.450917][ T3536] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.496468][T11496] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.513405][T11496] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.535377][ T5837] Bluetooth: hci3: command tx timeout [ 276.548639][T11496] bridge_slave_0: entered allmulticast mode [ 276.566152][T11496] bridge_slave_0: entered promiscuous mode [ 276.683186][ T3536] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.704159][T11496] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.715346][T11496] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.722618][T11496] bridge_slave_1: entered allmulticast mode [ 276.732922][T11496] bridge_slave_1: entered promiscuous mode [ 276.737202][T11603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1489'. [ 276.840563][T11496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.860092][T11496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.940939][T11496] team0: Port device team_slave_0 added [ 276.974456][T11496] team0: Port device team_slave_1 added [ 277.040506][T11517] chnl_net:caif_netlink_parms(): no params data found [ 277.073287][T11496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.082538][T11496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.125093][T11496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.206907][T11496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.214211][T11496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.241202][T11496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.288274][ T3536] bridge_slave_1: left allmulticast mode [ 277.299692][ T3536] bridge_slave_1: left promiscuous mode [ 277.315515][ T3536] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.324592][ T3536] bridge_slave_0: left allmulticast mode [ 277.332081][ T3536] bridge_slave_0: left promiscuous mode [ 277.338276][ T3536] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.406050][ T5837] Bluetooth: hci1: command tx timeout [ 278.062689][ T3536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.076834][ T3536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.089250][ T3536] bond0 (unregistering): Released all slaves [ 278.382802][T11496] hsr_slave_0: entered promiscuous mode [ 278.427621][T11496] hsr_slave_1: entered promiscuous mode [ 278.433732][T11496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.448246][T11496] Cannot create hsr debugfs directory [ 278.615657][ T5837] Bluetooth: hci3: command tx timeout [ 278.670833][T11517] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.687837][T11517] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.700802][T11517] bridge_slave_0: entered allmulticast mode [ 278.713565][T11517] bridge_slave_0: entered promiscuous mode [ 278.755891][T11660] syzkaller1: entered promiscuous mode [ 278.761830][T11660] syzkaller1: entered allmulticast mode [ 278.778249][T11517] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.803296][T11517] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.812156][T11517] bridge_slave_1: entered allmulticast mode [ 278.822146][T11517] bridge_slave_1: entered promiscuous mode [ 278.829445][T11650] lo speed is unknown, defaulting to 1000 [ 279.058348][T11517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.098269][T11517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.222450][T11681] netlink: 'syz.2.1504': attribute type 10 has an invalid length. [ 279.360218][T11517] team0: Port device team_slave_0 added [ 279.454553][T11517] team0: Port device team_slave_1 added [ 279.500948][ T5837] Bluetooth: hci1: command tx timeout [ 279.711895][T11517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.731108][T11517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.778181][T11517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.832807][ T3536] hsr_slave_0: left promiscuous mode [ 279.873676][ T3536] hsr_slave_1: left promiscuous mode [ 279.885444][ T3536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.892902][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.908654][ T3536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.920887][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.951168][ T3536] veth1_macvtap: left promiscuous mode [ 279.957354][ T3536] veth0_macvtap: left promiscuous mode [ 279.963173][ T3536] veth1_vlan: left promiscuous mode [ 279.974500][ T3536] veth0_vlan: left promiscuous mode [ 280.386302][ T3536] team0 (unregistering): Port device team_slave_1 removed [ 280.424324][ T3536] team0 (unregistering): Port device team_slave_0 removed [ 280.687604][ T5837] Bluetooth: hci3: command tx timeout [ 280.783986][T11517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.791832][T11517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.818218][T11517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.013897][T11517] hsr_slave_0: entered promiscuous mode [ 281.020677][T11517] hsr_slave_1: entered promiscuous mode [ 281.029024][T11517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.036785][T11517] Cannot create hsr debugfs directory [ 281.194577][T11714] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1511'. [ 281.575547][ T5837] Bluetooth: hci1: command tx timeout [ 281.714360][T11732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1515'. [ 281.835623][T11734] tipc: Enabled bearer , priority 0 [ 281.865582][T11734] syzkaller0: entered promiscuous mode [ 281.871458][T11734] syzkaller0: entered allmulticast mode [ 281.917281][T11733] tipc: Resetting bearer [ 281.966945][T11733] tipc: Disabling bearer [ 282.161714][T11496] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 282.171685][T11496] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 282.186551][T11496] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 282.201253][T11496] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 282.456219][T11496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.514696][T11496] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.550185][ T2934] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.557389][ T2934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.601942][ T2934] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.609157][ T2934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.705877][T11517] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 282.723398][T11517] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 282.737928][T11517] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 282.750665][T11517] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 282.765311][ T5837] Bluetooth: hci3: command tx timeout [ 282.949333][T11517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.003561][T11517] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.039233][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.046629][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.121412][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.128621][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.263428][T11789] lo speed is unknown, defaulting to 1000 [ 283.356342][T11496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.384873][T11794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1525'. [ 283.583940][T11496] veth0_vlan: entered promiscuous mode [ 283.633765][T11496] veth1_vlan: entered promiscuous mode [ 283.706254][T11801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1526'. [ 283.758589][T11496] veth0_macvtap: entered promiscuous mode [ 283.791129][T11496] veth1_macvtap: entered promiscuous mode [ 283.886759][T11805] bridge0: port 1(30猉功D) entered disabled state [ 284.090609][T11805] veth0_vlan: left promiscuous mode [ 284.110652][T11805] bridge0: port 2(wlan1) entered disabled state [ 284.132800][T11805] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.143008][T11805] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.152538][T11805] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.162048][T11805] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.309051][T11517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.339458][T11496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.366743][T11496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.481290][T11496] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.515681][T11496] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.539154][T11496] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.558912][T11496] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.851845][ T3530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.878071][T11517] veth0_vlan: entered promiscuous mode [ 284.900232][ T3530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.987469][T11517] veth1_vlan: entered promiscuous mode [ 285.070186][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.084241][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.206000][T11517] veth0_macvtap: entered promiscuous mode [ 285.246681][T11517] veth1_macvtap: entered promiscuous mode [ 285.380226][T11856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1535'. [ 285.401958][T11856] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1535'. [ 285.434156][T11517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.460214][T11517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.484173][T11517] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.496141][T11517] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.514965][T11517] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.534156][T11517] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.714578][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.879948][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.941044][T11866] xt_CT: No such helper "syz0" [ 286.068903][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.188166][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.247013][ T3530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.265801][ T3530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.298616][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.313700][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.469213][ T12] bridge_slave_1: left allmulticast mode [ 286.475533][ T12] bridge_slave_1: left promiscuous mode [ 286.481384][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.508727][ T12] bridge_slave_0: left allmulticast mode [ 286.515812][ T12] bridge_slave_0: left promiscuous mode [ 286.521632][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.023796][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.046386][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.057394][ T12] bond0 (unregistering): Released all slaves [ 287.811561][ T12] hsr_slave_0: left promiscuous mode [ 287.835161][ T12] hsr_slave_1: left promiscuous mode [ 287.841251][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.864894][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.886134][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.893607][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.950770][ T12] veth1_macvtap: left promiscuous mode [ 287.965370][ T12] veth0_macvtap: left promiscuous mode [ 287.972050][ T12] veth1_vlan: left promiscuous mode [ 287.980287][ T12] veth0_vlan: left promiscuous mode [ 288.001476][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 288.010709][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 288.022251][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 288.033116][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 288.053218][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 288.612627][ T12] team0 (unregistering): Port device team_slave_1 removed [ 288.679717][ T12] team0 (unregistering): Port device team_slave_0 removed [ 289.654856][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 289.664143][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 289.672062][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 289.690992][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 289.700979][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 289.888980][T11971] tipc: Enabling of bearer rejected, already enabled [ 289.902445][T11916] lo speed is unknown, defaulting to 1000 [ 289.939453][T11973] tipc: Enabled bearer , priority 0 [ 289.956169][T11973] syzkaller0: entered promiscuous mode [ 289.961671][T11973] syzkaller0: entered allmulticast mode [ 290.053987][T11977] netlink: 'syz.1.1548': attribute type 9 has an invalid length. [ 290.062121][T11977] netlink: 'syz.1.1548': attribute type 9 has an invalid length. [ 290.124903][ T5837] Bluetooth: hci1: command tx timeout [ 290.141667][T11972] tipc: Resetting bearer [ 290.225050][T11972] tipc: Disabling bearer [ 290.478898][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1550'. [ 290.562687][T11968] lo speed is unknown, defaulting to 1000 [ 290.572980][T12000] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1551'. [ 290.600738][T11994] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 290.617811][T11994] bridge0: port 2(wlan1) entered disabled state [ 290.640453][T11994] 0猉功D: left allmulticast mode [ 290.654974][T11994] 0猉功D: left promiscuous mode [ 290.663657][T11994] bridge0: port 1(30猉功D) entered disabled state [ 290.968922][T12000] 0猉功D: renamed from gretap0 (while UP) [ 291.002966][T12000] 0猉功D: entered allmulticast mode [ 291.032256][T12000] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 291.111941][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.333981][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.710978][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.878786][ T5837] Bluetooth: hci3: command tx timeout [ 291.967740][T12035] netlink: 'syz.4.1557': attribute type 4 has an invalid length. [ 292.118650][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.206492][ T5837] Bluetooth: hci1: command tx timeout [ 292.329242][T11916] chnl_net:caif_netlink_parms(): no params data found [ 292.663633][T11968] chnl_net:caif_netlink_parms(): no params data found [ 292.948254][T11916] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.974405][T11916] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.994480][T11916] bridge_slave_0: entered allmulticast mode [ 293.004132][T11916] bridge_slave_0: entered promiscuous mode [ 293.080367][T11916] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.087798][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1562'. [ 293.103146][T11916] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.120898][T11916] bridge_slave_1: entered allmulticast mode [ 293.138106][T11916] bridge_slave_1: entered promiscuous mode [ 293.156845][ T12] bridge_slave_1: left allmulticast mode [ 293.162554][ T12] bridge_slave_1: left promiscuous mode [ 293.168826][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.183616][ T12] bridge_slave_0: left allmulticast mode [ 293.196269][ T12] bridge_slave_0: left promiscuous mode [ 293.207714][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.965992][ T5837] Bluetooth: hci3: command tx timeout [ 294.077939][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.103878][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.126768][ T12] bond0 (unregistering): Released all slaves [ 294.284872][ T5837] Bluetooth: hci1: command tx timeout [ 294.322362][T12081] tipc: Enabled bearer , priority 0 [ 294.362900][T12077] syzkaller0: entered promiscuous mode [ 294.374941][T12077] syzkaller0: entered allmulticast mode [ 294.487727][T11916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.520457][T11916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.530726][T12005] Set syz1 is full, maxelem 65536 reached [ 294.543286][T12072] tipc: Resetting bearer [ 294.587828][T12072] tipc: Disabling bearer [ 294.607060][T12088] tipc: Enabling of bearer rejected, already enabled [ 294.749715][T11968] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.775715][T11968] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.782946][T11968] bridge_slave_0: entered allmulticast mode [ 294.800664][T11968] bridge_slave_0: entered promiscuous mode [ 294.805702][T12099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'. [ 294.811554][T11968] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.822623][T11968] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.836282][T11968] bridge_slave_1: entered allmulticast mode [ 294.844042][T11968] bridge_slave_1: entered promiscuous mode [ 294.931467][T11916] team0: Port device team_slave_0 added [ 294.942266][T11916] team0: Port device team_slave_1 added [ 295.269951][T11916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.290710][T11916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.363179][T11916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.396953][T11916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.403935][T11916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.444964][T11916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.462818][T11968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.566349][T12124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1576'. [ 295.600990][ T12] hsr_slave_0: left promiscuous mode [ 295.601058][T12124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1576'. [ 295.619216][ T12] hsr_slave_1: left promiscuous mode [ 295.626479][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.634342][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.663189][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.683051][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.754142][ T12] veth1_macvtap: left promiscuous mode [ 295.785283][ T12] veth0_macvtap: left promiscuous mode [ 295.791017][ T12] veth1_vlan: left promiscuous mode [ 295.800894][ T12] veth0_vlan: left promiscuous mode [ 296.045148][ T5837] Bluetooth: hci3: command tx timeout [ 296.364922][ T5837] Bluetooth: hci1: command tx timeout [ 296.598944][ T12] team0 (unregistering): Port device team_slave_1 removed [ 296.644040][ T12] team0 (unregistering): Port device team_slave_0 removed [ 297.198573][T11968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.299462][T11968] team0: Port device team_slave_0 added [ 297.310950][T11968] team0: Port device team_slave_1 added [ 297.324892][T12149] tipc: Enabling of bearer rejected, already enabled [ 297.533290][T11968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.540677][T11968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.568616][T11968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.586958][T11916] hsr_slave_0: entered promiscuous mode [ 297.597724][T11916] hsr_slave_1: entered promiscuous mode [ 297.604236][T11916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.612430][T11916] Cannot create hsr debugfs directory [ 297.629560][T11968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.651072][T11968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.687542][T11968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.050377][T11968] hsr_slave_0: entered promiscuous mode [ 298.066731][T11968] hsr_slave_1: entered promiscuous mode [ 298.083325][T11968] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.103172][T11968] Cannot create hsr debugfs directory [ 298.136341][ T5837] Bluetooth: hci3: command tx timeout [ 298.314717][T12198] tipc: Enabled bearer , priority 0 [ 298.396010][T12198] tipc: Resetting bearer [ 298.423138][T12197] tipc: Disabling bearer [ 298.882648][T12224] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1605'. [ 299.165740][T12233] 0猉功D: left allmulticast mode [ 299.230245][T12233] vlan0: left promiscuous mode [ 299.239737][T12233] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 299.360030][T12239] syzkaller1: entered promiscuous mode [ 299.372629][T12239] syzkaller1: entered allmulticast mode [ 299.541297][T12250] nbd0: detected capacity change from 0 to 63 [ 299.581549][ T5848] block nbd0: Receive control failed (result -104) [ 299.787836][T12267] lo speed is unknown, defaulting to 1000 [ 300.091862][T11968] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 300.123770][T11968] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 300.173277][T11968] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 300.242883][T11968] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 300.411437][T11916] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 300.451631][T11916] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 300.555287][T11916] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 300.592046][T11916] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 300.685257][ T5848] Bluetooth: hci3: command 0x0405 tx timeout [ 300.987574][T12310] nbd1: detected capacity change from 0 to 63 [ 301.012381][T11968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.033601][ T5837] block nbd1: Receive control failed (result -104) [ 301.107033][T12314] syzkaller0: entered promiscuous mode [ 301.123787][T12314] syzkaller0: entered allmulticast mode [ 301.147886][T11968] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.281431][T11916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.294361][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.301597][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.346020][T11916] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.359260][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.366474][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.450707][ T2934] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.457951][ T2934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.488259][ T2934] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.495463][ T2934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.663117][T11916] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 301.677422][T11916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 302.099314][T12350] bridge_slave_0: default FDB implementation only supports local addresses [ 302.178645][T12350] bridge_slave_0: default FDB implementation only supports local addresses [ 302.260201][T11916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.309106][T11968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.492574][T11916] veth0_vlan: entered promiscuous mode [ 302.578180][T11968] veth0_vlan: entered promiscuous mode [ 302.589019][T11916] veth1_vlan: entered promiscuous mode [ 302.627426][T11968] veth1_vlan: entered promiscuous mode [ 302.667398][T12367] syzkaller0: entered promiscuous mode [ 302.672911][T12367] syzkaller0: entered allmulticast mode [ 302.712945][T12373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1644'. [ 302.881530][T11916] veth0_macvtap: entered promiscuous mode [ 302.911052][T11968] veth0_macvtap: entered promiscuous mode [ 302.947087][T11916] veth1_macvtap: entered promiscuous mode [ 302.964158][T11968] veth1_macvtap: entered promiscuous mode [ 303.043796][T11968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.077477][T11916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.101637][T11968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.141352][T11916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.161772][T11968] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.177927][T11968] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.187955][T11968] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.197324][T11968] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.221678][T11916] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.232264][T11916] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.251991][T11916] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.279041][T11916] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.361730][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1648'. [ 303.937983][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.970329][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.090928][ T2934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.124661][ T2934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.194256][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.224553][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.255518][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.284193][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.800242][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.071926][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.407072][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.532653][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.787458][ T12] bridge_slave_1: left allmulticast mode [ 305.793459][ T12] bridge_slave_1: left promiscuous mode [ 305.800782][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.831338][ T12] bridge_slave_0: left allmulticast mode [ 305.840181][ T12] bridge_slave_0: left promiscuous mode [ 305.846170][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.894058][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 305.915142][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 305.924261][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 305.933213][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 305.941483][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 306.439875][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.451718][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.467148][ T12] bond0 (unregistering): Released all slaves [ 306.521930][T12467] lo speed is unknown, defaulting to 1000 [ 307.478115][T12523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1668'. [ 307.558338][T12528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1669'. [ 307.591217][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 307.606628][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 307.620421][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 307.634531][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 307.649092][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 307.738192][ T12] hsr_slave_0: left promiscuous mode [ 307.755025][ T12] hsr_slave_1: left promiscuous mode [ 307.766127][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.785015][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.797780][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.816110][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.889653][ T12] veth1_macvtap: left promiscuous mode [ 307.910692][ T12] veth0_macvtap: left promiscuous mode [ 307.956763][ T12] veth1_vlan: left promiscuous mode [ 307.962171][ T12] veth0_vlan: left promiscuous mode [ 307.969439][ T5837] Bluetooth: hci1: command tx timeout [ 308.608578][ T12] team0 (unregistering): Port device team_slave_1 removed [ 308.651136][ T12] team0 (unregistering): Port device team_slave_0 removed [ 309.073337][T12527] lo speed is unknown, defaulting to 1000 [ 309.514263][T12467] chnl_net:caif_netlink_parms(): no params data found [ 309.724854][ T5837] Bluetooth: hci3: command tx timeout [ 310.013417][T12467] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.034925][T12467] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.043289][T12467] bridge_slave_0: entered allmulticast mode [ 310.052533][ T5837] Bluetooth: hci1: command tx timeout [ 310.066409][T12467] bridge_slave_0: entered promiscuous mode [ 311.696593][T12467] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.703833][T12467] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.711247][T12467] bridge_slave_1: entered allmulticast mode [ 311.721336][T12467] bridge_slave_1: entered promiscuous mode [ 311.771695][T12611] syzkaller1: entered promiscuous mode [ 311.778915][T12611] syzkaller1: entered allmulticast mode [ 311.806379][ T5837] Bluetooth: hci3: command tx timeout [ 311.906540][T12622] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 311.913507][T12622] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 311.932465][T12467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.976882][T12467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.134908][ T5837] Bluetooth: hci1: command tx timeout [ 312.160761][T12467] team0: Port device team_slave_0 added [ 312.249513][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.312377][T12467] team0: Port device team_slave_1 added [ 312.466418][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.565110][T12640] lo speed is unknown, defaulting to 1000 [ 312.583813][T12467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.596876][T12467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.674989][T12467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.694013][T12467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.706963][T12467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.733489][T12467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.763763][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.969515][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.057621][T12527] chnl_net:caif_netlink_parms(): no params data found [ 313.177228][T12467] hsr_slave_0: entered promiscuous mode [ 313.192548][T12467] hsr_slave_1: entered promiscuous mode [ 313.200618][T12467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.209647][T12467] Cannot create hsr debugfs directory [ 313.351446][T12672] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1699'. [ 313.386585][T12672] 1猉功D: renamed from 30猉功D [ 313.394313][T12672] 1猉功D: entered allmulticast mode [ 313.407847][T12672] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 313.665667][T12527] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.677819][T12527] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.697397][T12527] bridge_slave_0: entered allmulticast mode [ 313.706749][T12527] bridge_slave_0: entered promiscuous mode [ 313.715097][ T12] bridge_slave_1: left allmulticast mode [ 313.720767][ T12] bridge_slave_1: left promiscuous mode [ 313.731164][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.741637][ T12] bridge_slave_0: left allmulticast mode [ 313.751971][ T12] bridge_slave_0: left promiscuous mode [ 313.759335][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.885128][ T5837] Bluetooth: hci3: command tx timeout [ 314.215443][ T5837] Bluetooth: hci1: command tx timeout [ 314.429110][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.450920][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.464017][ T12] bond0 (unregistering): Released all slaves [ 314.497079][T12527] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.519200][T12527] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.535004][T12527] bridge_slave_1: entered allmulticast mode [ 314.554651][T12527] bridge_slave_1: entered promiscuous mode [ 314.988329][T12527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.060150][T12527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.526840][T12527] team0: Port device team_slave_0 added [ 315.546197][T12527] team0: Port device team_slave_1 added [ 315.815722][T12527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.822718][T12527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.929703][T12527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.964848][ T5837] Bluetooth: hci3: command tx timeout [ 316.010777][T12527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.054859][T12527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.139269][T12527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.195014][ T12] hsr_slave_0: left promiscuous mode [ 316.203783][ T12] hsr_slave_1: left promiscuous mode [ 316.228445][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.246416][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.265851][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.308572][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.362959][ T12] veth1_macvtap: left promiscuous mode [ 316.378307][ T12] veth0_macvtap: left promiscuous mode [ 316.388511][ T12] veth1_vlan: left promiscuous mode [ 316.397322][ T12] veth0_vlan: left promiscuous mode [ 317.114097][ C1] ================================================================== [ 317.122188][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 317.130090][ C1] Read of size 2 at addr ffff88805e3ed82a by task syz.4.1699/12672 [ 317.137973][ C1] [ 317.140290][ C1] CPU: 1 UID: 0 PID: 12672 Comm: syz.4.1699 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 317.140304][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 317.140315][ C1] Call Trace: [ 317.140323][ C1] [ 317.140329][ C1] dump_stack_lvl+0x189/0x250 [ 317.140348][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 317.140359][ C1] ? rcu_is_watching+0x15/0xb0 [ 317.140374][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.140389][ C1] ? rcu_is_watching+0x15/0xb0 [ 317.140402][ C1] ? lock_release+0x4b/0x3e0 [ 317.140419][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 317.140428][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 317.140439][ C1] print_report+0xd2/0x2b0 [ 317.140452][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 317.140461][ C1] kasan_report+0x118/0x150 [ 317.140474][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 317.140486][ C1] rose_timer_expiry+0x471/0x4b0 [ 317.140497][ C1] call_timer_fn+0x17e/0x5f0 [ 317.140510][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 317.140520][ C1] ? call_timer_fn+0xbe/0x5f0 [ 317.140532][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 317.140552][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 317.140566][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.140580][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 317.140590][ C1] __run_timer_base+0x61a/0x860 [ 317.140607][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 317.140621][ C1] ? lapic_next_event+0x11/0x20 [ 317.140635][ C1] ? clockevents_program_event+0x24d/0x360 [ 317.140649][ C1] run_timer_softirq+0xb7/0x180 [ 317.140662][ C1] handle_softirqs+0x286/0x870 [ 317.140679][ C1] ? do_softirq+0xec/0x180 [ 317.140694][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 317.140709][ C1] ? hash_netport4_resize+0x5fc/0x1b60 [ 317.140723][ C1] do_softirq+0xec/0x180 [ 317.140736][ C1] [ 317.140740][ C1] [ 317.140744][ C1] ? __pfx_do_softirq+0x10/0x10 [ 317.140761][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 317.140775][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 317.140790][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 317.140805][ C1] ? hash_netport4_resize+0x5fc/0x1b60 [ 317.140817][ C1] ? hash_netport4_resize+0x5fc/0x1b60 [ 317.140829][ C1] ? hash_netport4_resize+0x5fc/0x1b60 [ 317.140841][ C1] hash_netport4_resize+0x1116/0x1b60 [ 317.140857][ C1] ? hash_netport4_resize+0x5fc/0x1b60 [ 317.140879][ C1] call_ad+0x44e/0xb00 [ 317.140892][ C1] ? __pfx_call_ad+0x10/0x10 [ 317.140906][ C1] ? __nla_parse+0x40/0x60 [ 317.140922][ C1] ip_set_ad+0x791/0x930 [ 317.140935][ C1] ? __pfx_ip_set_ad+0x10/0x10 [ 317.140943][ C1] ? __mutex_lock+0x330/0xe80 [ 317.140970][ C1] nfnetlink_rcv_msg+0xb4a/0x1130 [ 317.140986][ C1] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 317.141007][ C1] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 317.141032][ C1] ? __lock_acquire+0xab9/0xd20 [ 317.141050][ C1] netlink_rcv_skb+0x208/0x470 [ 317.141062][ C1] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 317.141076][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 317.141091][ C1] ? bpf_lsm_capable+0x9/0x20 [ 317.141101][ C1] ? security_capable+0x7e/0x2e0 [ 317.141116][ C1] nfnetlink_rcv+0x26a/0x2520 [ 317.141130][ C1] ? unwind_get_return_address+0x4d/0x90 [ 317.141145][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 317.141157][ C1] ? arch_stack_walk+0xfc/0x150 [ 317.141171][ C1] ? stack_trace_save+0x9c/0xe0 [ 317.141183][ C1] ? stack_depot_save_flags+0x40/0x900 [ 317.141196][ C1] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 317.141211][ C1] ? kasan_save_track+0x4f/0x80 [ 317.141224][ C1] ? kasan_save_track+0x3e/0x80 [ 317.141241][ C1] ? __lock_acquire+0xab9/0xd20 [ 317.141262][ C1] ? __lock_acquire+0xab9/0xd20 [ 317.141279][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 317.141292][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 317.141303][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 317.141316][ C1] netlink_unicast+0x75b/0x8d0 [ 317.141330][ C1] netlink_sendmsg+0x805/0xb30 [ 317.141344][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.141357][ C1] ? aa_sock_msg_perm+0x94/0x160 [ 317.141371][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 317.141383][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.141394][ C1] __sock_sendmsg+0x21c/0x270 [ 317.141411][ C1] ____sys_sendmsg+0x505/0x830 [ 317.141424][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.141439][ C1] ? import_iovec+0x74/0xa0 [ 317.141450][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 317.141463][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.141488][ C1] ? __fget_files+0x2a/0x420 [ 317.141498][ C1] ? __fget_files+0x3a0/0x420 [ 317.141512][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 317.141526][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 317.141541][ C1] ? rcu_is_watching+0x15/0xb0 [ 317.141561][ C1] ? do_syscall_64+0xbe/0x3b0 [ 317.141571][ C1] do_syscall_64+0xfa/0x3b0 [ 317.141580][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.141594][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.141604][ C1] ? clear_bhb_loop+0x60/0xb0 [ 317.141616][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.141626][ C1] RIP: 0033:0x7fde1ed8e929 [ 317.141639][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.141649][ C1] RSP: 002b:00007fde1fb22038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.141663][ C1] RAX: ffffffffffffffda RBX: 00007fde1efb5fa0 RCX: 00007fde1ed8e929 [ 317.141671][ C1] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000008 [ 317.141678][ C1] RBP: 00007fde1ee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 317.141684][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.141691][ C1] R13: 0000000000000000 R14: 00007fde1efb5fa0 R15: 00007ffd7ceaf198 [ 317.141705][ C1] [ 317.141708][ C1] [ 317.707151][ C1] Allocated by task 5202: [ 317.711502][ C1] kasan_save_track+0x3e/0x80 [ 317.716185][ C1] __kasan_kmalloc+0x93/0xb0 [ 317.720769][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 317.726215][ C1] kernfs_fop_open+0x397/0xca0 [ 317.730976][ C1] do_dentry_open+0xdf0/0x1970 [ 317.735731][ C1] vfs_open+0x3b/0x340 [ 317.739795][ C1] path_openat+0x2ee5/0x3830 [ 317.744380][ C1] do_filp_open+0x1fa/0x410 [ 317.748875][ C1] do_sys_openat2+0x121/0x1c0 [ 317.753542][ C1] __x64_sys_openat+0x138/0x170 [ 317.758389][ C1] do_syscall_64+0xfa/0x3b0 [ 317.762884][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.768770][ C1] [ 317.771082][ C1] Freed by task 5202: [ 317.775047][ C1] kasan_save_track+0x3e/0x80 [ 317.779721][ C1] kasan_save_free_info+0x46/0x50 [ 317.784849][ C1] __kasan_slab_free+0x62/0x70 [ 317.789604][ C1] kfree+0x18e/0x440 [ 317.793500][ C1] kernfs_fop_release+0x160/0x190 [ 317.798519][ C1] __fput+0x449/0xa70 [ 317.802496][ C1] fput_close_sync+0x119/0x200 [ 317.807253][ C1] __x64_sys_close+0x7f/0x110 [ 317.811923][ C1] do_syscall_64+0xfa/0x3b0 [ 317.816419][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.822313][ C1] [ 317.824628][ C1] The buggy address belongs to the object at ffff88805e3ed800 [ 317.824628][ C1] which belongs to the cache kmalloc-512 of size 512 [ 317.838673][ C1] The buggy address is located 42 bytes inside of [ 317.838673][ C1] freed 512-byte region [ffff88805e3ed800, ffff88805e3eda00) [ 317.852376][ C1] [ 317.854689][ C1] The buggy address belongs to the physical page: [ 317.861096][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805e3edc00 pfn:0x5e3ec [ 317.871152][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 317.879638][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 317.888136][ C1] page_type: f5(slab) [ 317.892105][ C1] raw: 00fff00000000240 ffff88801a441c80 ffffea0001740610 ffffea0001789310 [ 317.900678][ C1] raw: ffff88805e3edc00 000000000010000d 00000000f5000000 0000000000000000 [ 317.909254][ C1] head: 00fff00000000240 ffff88801a441c80 ffffea0001740610 ffffea0001789310 [ 317.917912][ C1] head: ffff88805e3edc00 000000000010000d 00000000f5000000 0000000000000000 [ 317.926569][ C1] head: 00fff00000000002 ffffea000178fb01 00000000ffffffff 00000000ffffffff [ 317.935228][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 317.943879][ C1] page dumped because: kasan: bad access detected [ 317.950284][ C1] page_owner tracks the page as allocated [ 317.955993][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5829, tgid 5829 (syz-executor), ts 73922389142, free_ts 21103587199 [ 317.977343][ C1] post_alloc_hook+0x240/0x2a0 [ 317.982100][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 317.987644][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 317.993439][ C1] alloc_pages_mpol+0x232/0x4a0 [ 317.998275][ C1] allocate_slab+0x8a/0x3b0 [ 318.002769][ C1] ___slab_alloc+0xbfc/0x1480 [ 318.007435][ C1] __kmalloc_noprof+0x305/0x4f0 [ 318.012283][ C1] fib6_info_alloc+0x30/0xf0 [ 318.016861][ C1] ip6_route_info_create+0x142/0x860 [ 318.022141][ C1] ip6_route_add+0x49/0x1b0 [ 318.026632][ C1] add_v4_addrs+0x8b3/0xbd0 [ 318.031125][ C1] addrconf_init_auto_addrs+0x39b/0xb50 [ 318.036663][ C1] addrconf_notify+0xacc/0x1010 [ 318.041506][ C1] notifier_call_chain+0x1b3/0x3e0 [ 318.046622][ C1] __dev_notify_flags+0x18d/0x2e0 [ 318.051635][ C1] netif_change_flags+0xe8/0x1a0 [ 318.056564][ C1] page last free pid 1 tgid 1 stack trace: [ 318.062355][ C1] __free_frozen_pages+0xc71/0xe70 [ 318.067457][ C1] free_contig_range+0x1bd/0x4a0 [ 318.072385][ C1] destroy_args+0x7e/0x5d0 [ 318.076796][ C1] debug_vm_pgtable+0x412/0x450 [ 318.081636][ C1] do_one_initcall+0x233/0x820 [ 318.086390][ C1] do_initcall_level+0x137/0x1f0 [ 318.091316][ C1] do_initcalls+0x69/0xd0 [ 318.095632][ C1] kernel_init_freeable+0x3d9/0x570 [ 318.100820][ C1] kernel_init+0x1d/0x1d0 [ 318.105144][ C1] ret_from_fork+0x3fc/0x770 [ 318.109727][ C1] ret_from_fork_asm+0x1a/0x30 [ 318.114481][ C1] [ 318.116789][ C1] Memory state around the buggy address: [ 318.122402][ C1] ffff88805e3ed700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 318.130454][ C1] ffff88805e3ed780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 318.138507][ C1] >ffff88805e3ed800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 318.146579][ C1] ^ [ 318.151932][ C1] ffff88805e3ed880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 318.159978][ C1] ffff88805e3ed900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 318.168022][ C1] ================================================================== [ 318.176168][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 318.183383][ C1] CPU: 1 UID: 0 PID: 12672 Comm: syz.4.1699 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 318.195443][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 318.205490][ C1] Call Trace: [ 318.208771][ C1] [ 318.211608][ C1] dump_stack_lvl+0x99/0x250 [ 318.216199][ C1] ? __asan_memcpy+0x40/0x70 [ 318.220788][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.225984][ C1] ? __pfx__printk+0x10/0x10 [ 318.230572][ C1] panic+0x2db/0x790 [ 318.234469][ C1] ? __pfx_panic+0x10/0x10 [ 318.238904][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 318.244794][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 318.250688][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 318.257009][ C1] ? print_memory_metadata+0x314/0x400 [ 318.262556][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 318.267658][ C1] check_panic_on_warn+0x89/0xb0 [ 318.272591][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 318.277692][ C1] end_report+0x78/0x160 [ 318.281924][ C1] kasan_report+0x129/0x150 [ 318.286420][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 318.291528][ C1] rose_timer_expiry+0x471/0x4b0 [ 318.296455][ C1] call_timer_fn+0x17e/0x5f0 [ 318.301044][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 318.306490][ C1] ? call_timer_fn+0xbe/0x5f0 [ 318.311164][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 318.316277][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 318.321481][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.326682][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 318.332129][ C1] __run_timer_base+0x61a/0x860 [ 318.336989][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 318.342359][ C1] ? lapic_next_event+0x11/0x20 [ 318.347203][ C1] ? clockevents_program_event+0x24d/0x360 [ 318.353009][ C1] run_timer_softirq+0xb7/0x180 [ 318.357851][ C1] handle_softirqs+0x286/0x870 [ 318.362617][ C1] ? do_softirq+0xec/0x180 [ 318.367033][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 318.372318][ C1] ? hash_netport4_resize+0x5fc/0x1b60 [ 318.377773][ C1] do_softirq+0xec/0x180 [ 318.382015][ C1] [ 318.384937][ C1] [ 318.387870][ C1] ? __pfx_do_softirq+0x10/0x10 [ 318.392735][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 318.398020][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 318.403220][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 318.408938][ C1] ? hash_netport4_resize+0x5fc/0x1b60 [ 318.414389][ C1] ? hash_netport4_resize+0x5fc/0x1b60 [ 318.419841][ C1] ? hash_netport4_resize+0x5fc/0x1b60 [ 318.425297][ C1] hash_netport4_resize+0x1116/0x1b60 [ 318.430669][ C1] ? hash_netport4_resize+0x5fc/0x1b60 [ 318.436144][ C1] call_ad+0x44e/0xb00 [ 318.440211][ C1] ? __pfx_call_ad+0x10/0x10 [ 318.444799][ C1] ? __nla_parse+0x40/0x60 [ 318.449232][ C1] ip_set_ad+0x791/0x930 [ 318.453469][ C1] ? __pfx_ip_set_ad+0x10/0x10 [ 318.458231][ C1] ? __mutex_lock+0x330/0xe80 [ 318.462928][ C1] nfnetlink_rcv_msg+0xb4a/0x1130 [ 318.467949][ C1] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 318.473153][ C1] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 318.478625][ C1] ? __lock_acquire+0xab9/0xd20 [ 318.483481][ C1] netlink_rcv_skb+0x208/0x470 [ 318.488253][ C1] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 318.493713][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 318.498996][ C1] ? bpf_lsm_capable+0x9/0x20 [ 318.503660][ C1] ? security_capable+0x7e/0x2e0 [ 318.508597][ C1] nfnetlink_rcv+0x26a/0x2520 [ 318.513269][ C1] ? unwind_get_return_address+0x4d/0x90 [ 318.518899][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 318.525045][ C1] ? arch_stack_walk+0xfc/0x150 [ 318.529893][ C1] ? stack_trace_save+0x9c/0xe0 [ 318.534737][ C1] ? stack_depot_save_flags+0x40/0x900 [ 318.540201][ C1] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 318.545314][ C1] ? kasan_save_track+0x4f/0x80 [ 318.550160][ C1] ? kasan_save_track+0x3e/0x80 [ 318.555013][ C1] ? __lock_acquire+0xab9/0xd20 [ 318.559871][ C1] ? __lock_acquire+0xab9/0xd20 [ 318.564723][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.569920][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.575111][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.580304][ C1] netlink_unicast+0x75b/0x8d0 [ 318.585065][ C1] netlink_sendmsg+0x805/0xb30 [ 318.589828][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.595194][ C1] ? aa_sock_msg_perm+0x94/0x160 [ 318.600127][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 318.605406][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.610683][ C1] __sock_sendmsg+0x21c/0x270 [ 318.615381][ C1] ____sys_sendmsg+0x505/0x830 [ 318.620163][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.625466][ C1] ? import_iovec+0x74/0xa0 [ 318.629974][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 318.634650][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.639866][ C1] ? __fget_files+0x2a/0x420 [ 318.644452][ C1] ? __fget_files+0x3a0/0x420 [ 318.649128][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 318.654063][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.659531][ C1] ? rcu_is_watching+0x15/0xb0 [ 318.664299][ C1] ? do_syscall_64+0xbe/0x3b0 [ 318.668968][ C1] do_syscall_64+0xfa/0x3b0 [ 318.673457][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.678655][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.684712][ C1] ? clear_bhb_loop+0x60/0xb0 [ 318.689400][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.695288][ C1] RIP: 0033:0x7fde1ed8e929 [ 318.699694][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.719302][ C1] RSP: 002b:00007fde1fb22038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.727708][ C1] RAX: ffffffffffffffda RBX: 00007fde1efb5fa0 RCX: 00007fde1ed8e929 [ 318.735673][ C1] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000008 [ 318.743648][ C1] RBP: 00007fde1ee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 318.751617][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.759673][ C1] R13: 0000000000000000 R14: 00007fde1efb5fa0 R15: 00007ffd7ceaf198 [ 318.767660][ C1] [ 318.770929][ C1] Kernel Offset: disabled [ 318.775249][ C1] Rebooting in 86400 seconds..