last executing test programs: 1m32.655309302s ago: executing program 0 (id=650): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000080), &(0x7f0000000340)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0xfd71, &(0x7f0000000000)="6121ee000050bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) syz_extract_tcp_res(0x0, 0x4, 0x3) 1m26.936502252s ago: executing program 1 (id=645): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt(r1, 0x0, 0x0, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = accept4(r3, 0x0, 0x0, 0x80000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, &(0x7f0000000080)) 1m25.730965123s ago: executing program 4 (id=234): writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000180)="207bc9875a5ce52ae56fbd9cb2643c7a7f0fd4b02938f64c6086829480cb80704ca7ad3e442cc6ab395c8643f738611ae6cc69d742f98ecd2ea9fc51ac6efe1cd209086a37510ee5df36b7c66ca565a399a57ad477699cb7445949895fc3dc14c4bcdf770e42439f6d493c4d13f7e19a11a08a2be4615407fbb100daaef983c6a9", 0x81}], 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 1m13.812953441s ago: executing program 0 (id=650): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000080), &(0x7f0000000340)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0xfd71, &(0x7f0000000000)="6121ee000050bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) syz_extract_tcp_res(0x0, 0x4, 0x3) 1m11.839814751s ago: executing program 1 (id=645): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt(r1, 0x0, 0x0, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = accept4(r3, 0x0, 0x0, 0x80000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, &(0x7f0000000080)) 1m7.558216607s ago: executing program 4 (id=234): writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000180)="207bc9875a5ce52ae56fbd9cb2643c7a7f0fd4b02938f64c6086829480cb80704ca7ad3e442cc6ab395c8643f738611ae6cc69d742f98ecd2ea9fc51ac6efe1cd209086a37510ee5df36b7c66ca565a399a57ad477699cb7445949895fc3dc14c4bcdf770e42439f6d493c4d13f7e19a11a08a2be4615407fbb100daaef983c6a9", 0x81}], 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 56.464082353s ago: executing program 0 (id=650): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000080), &(0x7f0000000340)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0xfd71, &(0x7f0000000000)="6121ee000050bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) syz_extract_tcp_res(0x0, 0x4, 0x3) 55.747263328s ago: executing program 1 (id=645): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt(r1, 0x0, 0x0, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = accept4(r3, 0x0, 0x0, 0x80000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, &(0x7f0000000080)) 54.53400756s ago: executing program 4 (id=234): writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000180)="207bc9875a5ce52ae56fbd9cb2643c7a7f0fd4b02938f64c6086829480cb80704ca7ad3e442cc6ab395c8643f738611ae6cc69d742f98ecd2ea9fc51ac6efe1cd209086a37510ee5df36b7c66ca565a399a57ad477699cb7445949895fc3dc14c4bcdf770e42439f6d493c4d13f7e19a11a08a2be4615407fbb100daaef983c6a9", 0x81}], 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 42.225982247s ago: executing program 0 (id=650): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000080), &(0x7f0000000340)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0xfd71, &(0x7f0000000000)="6121ee000050bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) syz_extract_tcp_res(0x0, 0x4, 0x3) 41.098542477s ago: executing program 1 (id=645): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt(r1, 0x0, 0x0, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = accept4(r3, 0x0, 0x0, 0x80000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, &(0x7f0000000080)) 39.911460347s ago: executing program 4 (id=234): writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000180)="207bc9875a5ce52ae56fbd9cb2643c7a7f0fd4b02938f64c6086829480cb80704ca7ad3e442cc6ab395c8643f738611ae6cc69d742f98ecd2ea9fc51ac6efe1cd209086a37510ee5df36b7c66ca565a399a57ad477699cb7445949895fc3dc14c4bcdf770e42439f6d493c4d13f7e19a11a08a2be4615407fbb100daaef983c6a9", 0x81}], 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 26.902837171s ago: executing program 0 (id=650): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000080), &(0x7f0000000340)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0xfd71, &(0x7f0000000000)="6121ee000050bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) syz_extract_tcp_res(0x0, 0x4, 0x3) 25.003931932s ago: executing program 1 (id=645): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt(r1, 0x0, 0x0, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = accept4(r3, 0x0, 0x0, 0x80000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, &(0x7f0000000080)) 23.297007166s ago: executing program 4 (id=234): writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000180)="207bc9875a5ce52ae56fbd9cb2643c7a7f0fd4b02938f64c6086829480cb80704ca7ad3e442cc6ab395c8643f738611ae6cc69d742f98ecd2ea9fc51ac6efe1cd209086a37510ee5df36b7c66ca565a399a57ad477699cb7445949895fc3dc14c4bcdf770e42439f6d493c4d13f7e19a11a08a2be4615407fbb100daaef983c6a9", 0x81}], 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 8.061772049s ago: executing program 0 (id=650): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000080), &(0x7f0000000340)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0xfd71, &(0x7f0000000000)="6121ee000050bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) syz_extract_tcp_res(0x0, 0x4, 0x3) 6.547395796s ago: executing program 1 (id=645): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt(r1, 0x0, 0x0, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = accept4(r3, 0x0, 0x0, 0x80000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, &(0x7f0000000080)) 4.501080174s ago: executing program 4 (id=234): writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000180)="207bc9875a5ce52ae56fbd9cb2643c7a7f0fd4b02938f64c6086829480cb80704ca7ad3e442cc6ab395c8643f738611ae6cc69d742f98ecd2ea9fc51ac6efe1cd209086a37510ee5df36b7c66ca565a399a57ad477699cb7445949895fc3dc14c4bcdf770e42439f6d493c4d13f7e19a11a08a2be4615407fbb100daaef983c6a9", 0x81}], 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 2.399334051s ago: executing program 3 (id=1775): bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x4000080) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff2, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r3}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x34}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2.14383788s ago: executing program 2 (id=1777): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000c80)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) 2.02763099s ago: executing program 2 (id=1778): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x15}, 0x90) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="00ffe0001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e6400000000040002800c000100bbbbbbbbbbbb0000"], 0x40}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r6, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xab9, 0x8, 0x7fff, 0x5}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x20008005) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000001300)={r4, 0x6e2}, &(0x7f0000001340)=0x8) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}]}, 0x24}], 0x1}, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000000c0)='vlan0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) connect$inet(r9, &(0x7f0000000000)={0x2, 0xfffe, @local}, 0x10) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r11, 0x40047452, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e20, @empty}}, 0xa874, 0x7}, 0x90) 1.815829673s ago: executing program 2 (id=1779): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, 0x0, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 1.226035923s ago: executing program 3 (id=1780): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a0108000000000000000001000000090003"], 0x9c}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$can_raw(r1, &(0x7f0000000180), 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32=r2], 0x48) socket(0x40000000015, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbcb25fc00000000000000000000000000004000000000000000000000ffff7f00000100000400000000000a006080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/112], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40}, {0x1, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) 1.093260581s ago: executing program 3 (id=1781): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffff, 0xb}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x4}, {0x1, 0x0, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r5, 0x4, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @empty, 0x3}, 0xb) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}]}, 0x14}], 0x1}, 0x0) (async) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}]}, 0x14}], 0x1}, 0x0) 924.07147ms ago: executing program 2 (id=1782): socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 679.777537ms ago: executing program 2 (id=1783): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000300)}], 0x2, 0x8, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000d00)={0x11, 0x18, r4, 0x1, 0x7f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) r6 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r5, &(0x7f0000000100)="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", &(0x7f0000000200)=@tcp=r6, 0x2}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100a0}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x54}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0) 544.323549ms ago: executing program 3 (id=1784): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x20000000) 423.923056ms ago: executing program 3 (id=1785): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@local, @in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (fail_nth: 4) 118.488808ms ago: executing program 3 (id=1786): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 0s ago: executing program 2 (id=1787): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x1, 0x6}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x3, 0x80000001, 0xfffffff6}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): 993][T10474] chnl_net:caif_netlink_parms(): no params data found [ 315.879781][T10416] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 315.924806][T10416] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 315.980632][T10416] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 316.059437][T10416] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 316.184854][T10503] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1445'. [ 316.289514][T10474] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.306914][T10474] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.316488][T10474] bridge_slave_0: entered allmulticast mode [ 316.325247][T10474] bridge_slave_0: entered promiscuous mode [ 316.338613][T10474] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.347149][T10474] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.354974][T10474] bridge_slave_1: entered allmulticast mode [ 316.363280][T10474] bridge_slave_1: entered promiscuous mode [ 316.396650][T10518] bridge0: port 1(30猉功D) entered blocking state [ 316.403295][T10518] bridge0: port 1(30猉功D) entered disabled state [ 316.418602][T10518] 0猉功D: entered promiscuous mode [ 316.523240][T10474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.547582][T10527] 0猉功D: left promiscuous mode [ 316.552724][T10527] bridge0: port 1(30猉功D) entered disabled state [ 316.559435][ T5151] Bluetooth: hci0: command tx timeout [ 316.609482][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.619276][T10527] bond7: (slave gretap0): Releasing active interface [ 316.663422][T10527] gretap0: left allmulticast mode [ 316.681326][T10527] gretap0: left promiscuous mode [ 316.708906][T10474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.813209][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.871113][ T1025] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.901802][T10474] team0: Port device team_slave_0 added [ 316.930167][T10474] team0: Port device team_slave_1 added [ 316.956918][ T5151] Bluetooth: hci3: command tx timeout [ 316.965755][ T1025] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.075869][ T1025] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.102917][T10474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.111998][T10474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.146361][T10474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.191527][ T1025] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.206722][T10474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.214153][T10474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.245903][T10474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.486165][T10474] hsr_slave_0: entered promiscuous mode [ 317.510703][T10474] hsr_slave_1: entered promiscuous mode [ 317.535165][T10474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.549336][T10474] Cannot create hsr debugfs directory [ 317.590590][T10545] 0猉功D: left allmulticast mode [ 317.618711][T10545] sit0: left promiscuous mode [ 317.674194][ T5151] Bluetooth: hci2: command tx timeout [ 317.758241][T10545] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.767490][T10545] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.776105][T10545] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.787397][T10545] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.811618][T10545] veth0_macvtap: left allmulticast mode [ 317.817447][T10545] macvtap1: left allmulticast mode [ 317.828356][T10545] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 317.917363][T10488] chnl_net:caif_netlink_parms(): no params data found [ 318.287418][T10488] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.294728][T10488] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.301994][T10488] bridge_slave_0: entered allmulticast mode [ 318.310118][T10488] bridge_slave_0: entered promiscuous mode [ 318.318955][T10488] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.328620][T10488] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.335934][T10488] bridge_slave_1: entered allmulticast mode [ 318.344350][T10488] bridge_slave_1: entered promiscuous mode [ 318.358694][T10416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.379770][ T1025] bridge_slave_1: left allmulticast mode [ 318.390433][ T1025] bridge_slave_1: left promiscuous mode [ 318.411459][ T1025] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.448738][ T1025] bridge_slave_0: left allmulticast mode [ 318.456978][ T1025] bridge_slave_0: left promiscuous mode [ 318.463113][ T1025] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.026704][ T1025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.035873][ T5151] Bluetooth: hci3: command tx timeout [ 319.044563][ T1025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.056264][ T1025] bond0 (unregistering): Released all slaves [ 319.170607][T10488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.250956][T10488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.469520][T10488] team0: Port device team_slave_0 added [ 319.482608][T10416] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.501909][T10488] team0: Port device team_slave_1 added [ 319.622083][T10588] x_tables: duplicate underflow at hook 1 [ 319.652733][ T3538] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.659957][ T3538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.754460][ T5151] Bluetooth: hci2: command tx timeout [ 319.770934][T10488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.799756][T10488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.834499][T10488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.860545][ T4515] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.867793][ T4515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.909282][ T1025] hsr_slave_0: left promiscuous mode [ 319.931752][ T1025] hsr_slave_1: left promiscuous mode [ 319.940267][ T1025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.951467][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.959967][ T1025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.969288][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.022397][ T1025] veth1_macvtap: left promiscuous mode [ 320.033132][ T1025] veth0_macvtap: left promiscuous mode [ 320.042443][ T1025] veth1_vlan: left promiscuous mode [ 320.048272][ T1025] veth0_vlan: left promiscuous mode [ 320.571205][ T1025] team0 (unregistering): Port device team_slave_1 removed [ 320.613336][ T1025] team0 (unregistering): Port device team_slave_0 removed [ 321.003072][T10488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.012515][T10488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.060302][T10488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.113841][ T5151] Bluetooth: hci3: command tx timeout [ 321.310316][T10488] hsr_slave_0: entered promiscuous mode [ 321.317184][T10488] hsr_slave_1: entered promiscuous mode [ 321.323509][T10488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.340072][T10488] Cannot create hsr debugfs directory [ 321.357901][T10610] tipc: Enabled bearer , priority 0 [ 321.489097][T10607] syzkaller0: entered promiscuous mode [ 321.494794][T10607] syzkaller0: entered allmulticast mode [ 321.500933][T10607] tipc: Resetting bearer [ 321.550020][T10606] tipc: Resetting bearer [ 321.844105][ T5151] Bluetooth: hci2: command tx timeout [ 322.912879][T10606] tipc: Disabling bearer [ 323.062510][T10416] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.145110][T10474] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 323.199600][ T5151] Bluetooth: hci3: command tx timeout [ 323.231438][T10474] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 323.265997][T10474] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 323.337156][T10474] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 323.526606][T10649] netlink: 'syz.3.1489': attribute type 10 has an invalid length. [ 323.629877][T10416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.649545][T10474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.719342][T10474] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.760586][ T3538] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.767790][ T3538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.817235][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.824456][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.915806][T10416] veth0_vlan: entered promiscuous mode [ 323.957977][T10416] veth1_vlan: entered promiscuous mode [ 323.970041][T10488] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 323.998161][T10488] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 324.011865][T10488] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 324.028604][T10488] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 324.137350][T10416] veth0_macvtap: entered promiscuous mode [ 324.158112][T10416] veth1_macvtap: entered promiscuous mode [ 324.237691][T10416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.267088][T10416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.295000][T10416] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.305519][T10416] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.315100][T10416] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.324561][T10416] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.402882][T10488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.474391][T10488] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.484343][ T4515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.502413][ T4515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.543439][T10474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.552255][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.559476][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.584416][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.598261][ T4515] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.603889][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.605458][ T4515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.770125][T10474] veth0_vlan: entered promiscuous mode [ 324.843120][T10474] veth1_vlan: entered promiscuous mode [ 324.926648][T10474] veth0_macvtap: entered promiscuous mode [ 324.951458][T10474] veth1_macvtap: entered promiscuous mode [ 325.001108][T10474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.172722][ T3577] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.263349][T10474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.319926][T10474] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.354043][T10474] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.362793][T10474] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.393923][T10474] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.483403][ T3577] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.583502][ T3577] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.649538][T10488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.727347][ T3577] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.792188][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.846933][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.001572][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.010117][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.140124][ T3577] bridge_slave_1: left allmulticast mode [ 326.166560][ T3577] bridge_slave_1: left promiscuous mode [ 326.178296][ T3577] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.209610][ T3577] bridge_slave_0: left allmulticast mode [ 326.234639][ T3577] bridge_slave_0: left promiscuous mode [ 326.241446][ T3577] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.632199][ T3577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.644816][ T3577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.660034][ T3577] bond0 (unregistering): Released all slaves [ 327.106037][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 327.117582][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 327.128277][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 327.136935][T10488] veth0_vlan: entered promiscuous mode [ 327.145795][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 327.157965][T10488] veth1_vlan: entered promiscuous mode [ 327.166344][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 327.212149][T10488] veth0_macvtap: entered promiscuous mode [ 327.276912][T10488] veth1_macvtap: entered promiscuous mode [ 327.364760][T10488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.378635][T10488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.389352][T10488] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.398272][T10488] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.407396][T10488] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.426219][T10488] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.644437][ T3577] hsr_slave_0: left promiscuous mode [ 327.650625][ T3577] hsr_slave_1: left promiscuous mode [ 327.669610][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.693793][ T3577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.723998][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.731455][ T3577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.782811][ T3577] veth1_macvtap: left promiscuous mode [ 327.804324][ T3577] veth0_macvtap: left promiscuous mode [ 327.810049][ T3577] veth1_vlan: left promiscuous mode [ 327.823905][ T3577] veth0_vlan: left promiscuous mode [ 328.328232][ T3577] team0 (unregistering): Port device team_slave_1 removed [ 328.368316][ T3577] team0 (unregistering): Port device team_slave_0 removed [ 329.187848][ T5151] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 329.205674][ T5151] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 329.228885][ T5151] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 329.243853][ T5151] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 329.254178][ T5151] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 329.279416][ T5151] Bluetooth: hci0: command tx timeout [ 330.625217][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.644333][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.748998][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.763814][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.149777][T10738] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1515'. [ 331.159524][T10738] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1515'. [ 331.228500][ T3577] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.246652][T10741] netlink: zone id is out of range [ 331.252666][T10741] netlink: set zone limit has 4 unknown bytes [ 331.254088][T10707] chnl_net:caif_netlink_parms(): no params data found [ 331.267480][T10741] openvswitch: netlink: IP tunnel TTL not specified. [ 331.356789][ T5846] Bluetooth: hci2: command tx timeout [ 331.362901][ T5845] Bluetooth: hci0: command tx timeout [ 331.437996][ T3577] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.552175][ T3577] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.651296][ T3577] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.668981][T10707] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.677182][T10707] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.685624][T10707] bridge_slave_0: entered allmulticast mode [ 331.692580][T10707] bridge_slave_0: entered promiscuous mode [ 331.705295][T10707] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.712399][T10707] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.719922][T10707] bridge_slave_1: entered allmulticast mode [ 331.727006][T10707] bridge_slave_1: entered promiscuous mode [ 331.816624][T10707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.829060][T10707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.937169][T10707] team0: Port device team_slave_0 added [ 331.959951][T10707] team0: Port device team_slave_1 added [ 332.011581][T10707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.019422][T10707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.045909][T10707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.058528][ T3577] bridge_slave_1: left allmulticast mode [ 332.064420][ T3577] bridge_slave_1: left promiscuous mode [ 332.070102][ T3577] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.080767][ T3577] bridge_slave_0: left allmulticast mode [ 332.086893][ T3577] bridge_slave_0: left promiscuous mode [ 332.092572][ T3577] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.413372][ T3577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.425294][ T3577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.437346][ T3577] bond0 (unregistering): Released all slaves [ 332.452473][T10720] chnl_net:caif_netlink_parms(): no params data found [ 332.464855][T10707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.471817][T10707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.500100][T10707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.636623][T10707] hsr_slave_0: entered promiscuous mode [ 332.642904][T10707] hsr_slave_1: entered promiscuous mode [ 332.649641][T10707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.657291][T10707] Cannot create hsr debugfs directory [ 332.724632][T10720] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.731727][T10720] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.739427][T10720] bridge_slave_0: entered allmulticast mode [ 332.747685][T10720] bridge_slave_0: entered promiscuous mode [ 332.756193][T10720] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.763316][T10720] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.770579][T10720] bridge_slave_1: entered allmulticast mode [ 332.780773][T10720] bridge_slave_1: entered promiscuous mode [ 333.009159][T10720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.071188][T10757] bridge0: failed insert local address into bridge forwarding table [ 333.133897][ T3577] hsr_slave_0: left promiscuous mode [ 333.153842][ T3577] hsr_slave_1: left promiscuous mode [ 333.160014][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.185719][ T3577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.212098][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.222797][ T3577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.284198][ T3577] veth1_macvtap: left promiscuous mode [ 333.290917][ T3577] veth0_macvtap: left promiscuous mode [ 333.307129][ T3577] veth1_vlan: left promiscuous mode [ 333.323097][ T3577] veth0_vlan: left promiscuous mode [ 333.439919][ T5845] Bluetooth: hci0: command tx timeout [ 333.445623][ T5846] Bluetooth: hci2: command tx timeout [ 333.489558][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 333.507310][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 333.520549][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 333.532264][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 333.540034][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 333.948275][ T3577] team0 (unregistering): Port device team_slave_1 removed [ 333.987043][ T3577] team0 (unregistering): Port device team_slave_0 removed [ 334.347691][T10720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.389675][T10771] tipc: Enabling of bearer rejected, failed to enable media [ 334.511626][T10720] team0: Port device team_slave_0 added [ 334.552868][T10720] team0: Port device team_slave_1 added [ 334.690874][T10720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.698006][T10720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.731117][T10720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.769301][T10785] syzkaller1: entered promiscuous mode [ 334.775625][T10785] syzkaller1: entered allmulticast mode [ 334.783521][T10720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.795716][T10720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.823190][T10720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.892874][T10789] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1526'. [ 334.911196][T10789] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1526'. [ 335.053192][T10720] hsr_slave_0: entered promiscuous mode [ 335.074532][T10720] hsr_slave_1: entered promiscuous mode [ 335.080947][T10720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.091202][T10720] Cannot create hsr debugfs directory [ 335.186858][ T3577] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.389543][ T3577] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.519603][ T5846] Bluetooth: hci2: command tx timeout [ 335.525263][ T5845] Bluetooth: hci0: command tx timeout [ 335.590734][ T3577] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.601780][ T5846] Bluetooth: hci3: command tx timeout [ 335.703937][ T3577] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.730537][T10808] tipc: Enabled bearer , priority 0 [ 335.768313][T10808] syzkaller0: entered promiscuous mode [ 335.775496][T10808] syzkaller0: entered allmulticast mode [ 335.823050][T10808] tipc: Resetting bearer [ 335.897308][T10807] tipc: Resetting bearer [ 335.913292][T10807] tipc: Disabling bearer [ 336.031161][T10707] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 336.053569][T10707] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 336.127321][T10707] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 336.143591][T10707] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 336.164182][T10769] chnl_net:caif_netlink_parms(): no params data found [ 336.302878][ T3577] bridge_slave_1: left allmulticast mode [ 336.313606][ T3577] bridge_slave_1: left promiscuous mode [ 336.319985][ T3577] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.322838][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1542'. [ 336.341905][ T3577] bridge_slave_0: left allmulticast mode [ 336.349993][ T3577] bridge_slave_0: left promiscuous mode [ 336.356239][ T3577] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.390688][T10835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1542'. [ 336.696225][ T3577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.708687][ T3577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.719594][ T3577] bond0 (unregistering): Released all slaves [ 336.980243][T10769] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.987961][T10769] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.001114][T10769] bridge_slave_0: entered allmulticast mode [ 337.012857][T10769] bridge_slave_0: entered promiscuous mode [ 337.051058][T10769] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.065467][T10769] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.080186][T10769] bridge_slave_1: entered allmulticast mode [ 337.092648][T10769] bridge_slave_1: entered promiscuous mode [ 337.292296][T10769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.400730][T10769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.592251][T10769] team0: Port device team_slave_0 added [ 337.601042][ T5846] Bluetooth: hci2: command tx timeout [ 337.605041][T10769] team0: Port device team_slave_1 added [ 337.612606][T10720] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 337.627197][T10720] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 337.660187][ T3577] hsr_slave_0: left promiscuous mode [ 337.668115][ T3577] hsr_slave_1: left promiscuous mode [ 337.675007][ T5846] Bluetooth: hci3: command tx timeout [ 337.682015][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.691452][ T3577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.706816][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.718369][ T3577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.751995][ T3577] veth1_macvtap: left promiscuous mode [ 337.766806][ T3577] veth0_macvtap: left promiscuous mode [ 337.772497][ T3577] veth1_vlan: left promiscuous mode [ 337.778014][ T3577] veth0_vlan: left promiscuous mode [ 338.011412][T10874] xt_CT: No such helper "syz0" [ 338.276819][ T3577] team0 (unregistering): Port device team_slave_1 removed [ 338.321620][ T3577] team0 (unregistering): Port device team_slave_0 removed [ 338.750039][T10720] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 338.768202][T10720] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 338.821709][T10769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.831959][T10769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.858479][T10769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.871373][T10769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.879938][T10769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.914194][T10769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.085195][T10769] hsr_slave_0: entered promiscuous mode [ 339.091904][T10769] hsr_slave_1: entered promiscuous mode [ 339.109246][T10769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.129200][T10769] Cannot create hsr debugfs directory [ 339.323990][T10707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.512886][T10707] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.557444][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.564668][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.622489][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.629717][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.726497][T10720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.754485][ T5846] Bluetooth: hci3: command tx timeout [ 339.806041][T10720] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.853589][ T3577] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.860818][ T3577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.944387][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.951519][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.053366][T10769] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 340.072262][T10769] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 340.106037][T10912] syzkaller1: entered promiscuous mode [ 340.116942][T10912] syzkaller1: entered allmulticast mode [ 340.127719][T10769] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 340.140901][T10769] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 340.279485][T10707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.533282][T10769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.566465][T10707] veth0_vlan: entered promiscuous mode [ 340.611181][T10769] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.621840][T10720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.642199][T10707] veth1_vlan: entered promiscuous mode [ 340.673221][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.680436][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.749916][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.757131][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.761500][T10937] netlink: 'syz.3.1570': attribute type 10 has an invalid length. [ 340.832512][T10707] veth0_macvtap: entered promiscuous mode [ 340.890633][T10707] veth1_macvtap: entered promiscuous mode [ 340.918749][T10720] veth0_vlan: entered promiscuous mode [ 340.977933][T10769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.029793][T10720] veth1_vlan: entered promiscuous mode [ 341.092974][T10707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.167338][T10707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.197677][T10720] veth0_macvtap: entered promiscuous mode [ 341.226447][T10707] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.241725][T10707] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.260083][T10707] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.279442][T10707] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.307507][T10720] veth1_macvtap: entered promiscuous mode [ 341.327887][T10952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1573'. [ 341.368358][T10720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.421101][T10720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.480048][T10720] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.501427][T10720] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.511002][T10720] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.521319][T10720] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.689603][T10769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.699759][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.719520][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.834108][ T5846] Bluetooth: hci3: command tx timeout [ 341.870143][ T4515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.891512][ T4515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.910966][ T4515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.924440][ T4515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.031717][ T4515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.043485][ T4515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.488501][ T4515] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.637797][ T4515] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.696529][T10769] veth0_vlan: entered promiscuous mode [ 342.754226][ T4515] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.786578][T10769] veth1_vlan: entered promiscuous mode [ 342.851335][T10769] veth0_macvtap: entered promiscuous mode [ 342.938293][ T4515] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.007447][T10769] veth1_macvtap: entered promiscuous mode [ 343.070519][T10769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.091386][T10769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.110514][T10769] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.121090][T10769] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.130336][T10769] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.140960][T10769] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.360567][ T4515] bridge_slave_1: left allmulticast mode [ 343.367719][ T4515] bridge_slave_1: left promiscuous mode [ 343.374775][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.386195][ T4515] bridge_slave_0: left allmulticast mode [ 343.391890][ T4515] bridge_slave_0: left promiscuous mode [ 343.403102][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.449829][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 343.458807][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 343.468893][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 343.479359][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 343.490281][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 343.759185][ T4515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.772547][ T4515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.782741][ T4515] bond0 (unregistering): Released all slaves [ 343.795724][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.803568][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.915939][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.930617][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.527536][ T4515] hsr_slave_0: left promiscuous mode [ 344.533634][ T4515] hsr_slave_1: left promiscuous mode [ 344.572570][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.593809][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.611817][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.619375][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.647507][ T4515] veth1_macvtap: left promiscuous mode [ 344.653106][ T4515] veth0_macvtap: left promiscuous mode [ 344.658819][ T4515] veth1_vlan: left promiscuous mode [ 344.664391][ T4515] veth0_vlan: left promiscuous mode [ 344.882118][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 344.891823][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 344.907233][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 344.919713][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 344.928744][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 345.179434][ T4515] team0 (unregistering): Port device team_slave_1 removed [ 345.220887][ T4515] team0 (unregistering): Port device team_slave_0 removed [ 345.514627][ T5846] Bluetooth: hci0: command tx timeout [ 345.788789][T10983] chnl_net:caif_netlink_parms(): no params data found [ 345.968734][T10983] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.976006][T10983] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.983158][T10983] bridge_slave_0: entered allmulticast mode [ 345.990527][T10983] bridge_slave_0: entered promiscuous mode [ 346.017850][T10983] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.027894][T10983] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.036406][T10983] bridge_slave_1: entered allmulticast mode [ 346.043353][T10983] bridge_slave_1: entered promiscuous mode [ 346.137695][ T4515] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.170616][T10983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.206358][T10983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.320101][ T4515] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.451422][T10983] team0: Port device team_slave_0 added [ 346.481533][ T4515] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.557218][T10983] team0: Port device team_slave_1 added [ 346.607358][T10991] chnl_net:caif_netlink_parms(): no params data found [ 346.656926][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 346.665704][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 346.678011][ T4515] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.688693][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 346.699949][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 346.708398][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 346.777546][T10983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.788838][T10983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.819047][T10983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.870370][T10983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.881144][T10983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.908802][T10983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.953852][ T5845] Bluetooth: hci2: command tx timeout [ 347.001644][T10991] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.014011][T10991] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.021359][T10991] bridge_slave_0: entered allmulticast mode [ 347.046094][T10991] bridge_slave_0: entered promiscuous mode [ 347.053941][T10991] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.061104][T10991] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.083988][T10991] bridge_slave_1: entered allmulticast mode [ 347.092354][T10991] bridge_slave_1: entered promiscuous mode [ 347.263317][T10991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.280375][T10983] hsr_slave_0: entered promiscuous mode [ 347.287480][T10983] hsr_slave_1: entered promiscuous mode [ 347.293616][T10983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.301547][T10983] Cannot create hsr debugfs directory [ 347.361218][T10991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.595622][ T5845] Bluetooth: hci0: command tx timeout [ 347.625798][T10991] team0: Port device team_slave_0 added [ 347.646119][T10991] team0: Port device team_slave_1 added [ 347.709264][T11029] netlink: 'syz.2.1591': attribute type 4 has an invalid length. [ 347.728781][ T4515] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.871159][T10991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.878471][T10991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.910382][T10991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.926570][T10991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.933544][T10991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.962330][T10991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.070761][T11033] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.081046][T11033] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.089888][T11033] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.101998][T11033] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.113946][T11033] geneve2: entered promiscuous mode [ 348.196630][T11036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1593'. [ 348.207295][ T4515] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.321329][ T4515] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.392890][T10991] hsr_slave_0: entered promiscuous mode [ 348.400220][T10991] hsr_slave_1: entered promiscuous mode [ 348.406995][T10991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.414855][T10991] Cannot create hsr debugfs directory [ 348.471649][ T4515] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.497937][T11039] team0: No ports can be present during mode change [ 348.794370][ T5845] Bluetooth: hci3: command tx timeout [ 348.891997][T11014] chnl_net:caif_netlink_parms(): no params data found [ 348.920128][ T4515] bridge_slave_1: left allmulticast mode [ 348.926757][ T4515] bridge_slave_1: left promiscuous mode [ 348.932558][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.946400][ T4515] bridge_slave_0: left allmulticast mode [ 348.952048][ T4515] bridge_slave_0: left promiscuous mode [ 348.958804][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.970509][ T4515] bridge_slave_1: left allmulticast mode [ 348.978116][ T4515] bridge_slave_1: left promiscuous mode [ 348.984020][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.992966][ T4515] bridge_slave_0: left allmulticast mode [ 348.999889][ T4515] bridge_slave_0: left promiscuous mode [ 349.005667][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.044297][ T5845] Bluetooth: hci2: command tx timeout [ 349.377912][ T4515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.389469][ T4515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.403240][ T4515] bond0 (unregistering): Released all slaves [ 349.676972][ T5845] Bluetooth: hci0: command tx timeout [ 349.702639][ T4515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.713418][ T4515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.730642][ T4515] bond0 (unregistering): Released all slaves [ 349.770834][T11049] tipc: Enabling of bearer rejected, already enabled [ 350.138799][T11014] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.146366][T11014] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.153738][T11014] bridge_slave_0: entered allmulticast mode [ 350.160743][T11014] bridge_slave_0: entered promiscuous mode [ 350.172176][T11014] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.179556][T11014] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.198151][T11014] bridge_slave_1: entered allmulticast mode [ 350.205949][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1602'. [ 350.207436][T11014] bridge_slave_1: entered promiscuous mode [ 350.378699][T11014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.401329][T11014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.478056][T11014] team0: Port device team_slave_0 added [ 350.508535][T11014] team0: Port device team_slave_1 added [ 350.586278][T10983] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 350.622160][T10983] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 350.665324][T11073] netlink: 'syz.2.1605': attribute type 10 has an invalid length. [ 350.666509][T10983] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 350.711928][T11073] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 350.723024][T11014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.744367][T11014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.784499][T11014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.796483][T10983] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 350.873940][ T5845] Bluetooth: hci3: command tx timeout [ 350.944363][T11014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.964402][T11014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.023792][T11014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.117104][ T5845] Bluetooth: hci2: command tx timeout [ 351.339088][T11014] hsr_slave_0: entered promiscuous mode [ 351.350919][T11014] hsr_slave_1: entered promiscuous mode [ 351.360368][T11014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.373820][T11014] Cannot create hsr debugfs directory [ 351.434419][ T4515] hsr_slave_0: left promiscuous mode [ 351.453715][ T4515] hsr_slave_1: left promiscuous mode [ 351.459642][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.484079][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.504692][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.512145][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.541734][ T4515] hsr_slave_0: left promiscuous mode [ 351.548828][T11091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1610'. [ 351.558705][ T4515] hsr_slave_1: left promiscuous mode [ 351.568028][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.586509][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.600793][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.610377][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.686779][ T4515] veth1_macvtap: left promiscuous mode [ 351.692371][ T4515] veth0_macvtap: left promiscuous mode [ 351.705697][ T4515] veth1_vlan: left promiscuous mode [ 351.711250][ T4515] veth0_vlan: left promiscuous mode [ 351.721542][ T4515] veth1_macvtap: left promiscuous mode [ 351.732094][ T4515] veth0_macvtap: left promiscuous mode [ 351.740895][ T4515] veth1_vlan: left promiscuous mode [ 351.749748][ T4515] veth0_vlan: left promiscuous mode [ 351.755462][ T5845] Bluetooth: hci0: command tx timeout [ 352.342091][ T4515] team0 (unregistering): Port device team_slave_1 removed [ 352.382848][ T4515] team0 (unregistering): Port device team_slave_0 removed [ 352.954929][ T5845] Bluetooth: hci3: command tx timeout [ 353.066255][ T4515] team0 (unregistering): Port device team_slave_1 removed [ 353.108554][ T4515] team0 (unregistering): Port device team_slave_0 removed [ 353.194154][ T5845] Bluetooth: hci2: command tx timeout [ 353.892621][T10991] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 353.909889][T10991] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 353.925956][T10991] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 353.955752][T10991] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 354.027284][T10983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.080724][T10983] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.123071][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.130276][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.152114][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.159297][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.261315][T10991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.364749][T10991] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.411964][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.419180][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.454591][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.461755][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.496665][T11014] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 354.521063][T11014] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 354.564420][T11014] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 354.588176][T11014] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 354.742546][T10983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.899367][T10983] veth0_vlan: entered promiscuous mode [ 354.960536][T11014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.972928][T11143] tipc: Enabling of bearer rejected, already enabled [ 354.992515][T10983] veth1_vlan: entered promiscuous mode [ 355.036104][ T5845] Bluetooth: hci3: command tx timeout [ 355.076347][T11014] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.127502][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.134696][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.163369][T10983] veth0_macvtap: entered promiscuous mode [ 355.188325][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.195545][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.212757][T10983] veth1_macvtap: entered promiscuous mode [ 355.350344][T10983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.394669][T10983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.413193][T10991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.448191][T10983] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.467825][T10983] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.478483][T10983] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.493952][T10983] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.828883][T10991] veth0_vlan: entered promiscuous mode [ 355.857679][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.888472][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.952145][T10991] veth1_vlan: entered promiscuous mode [ 355.989243][ T3577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.004736][ T3577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.047247][T10991] veth0_macvtap: entered promiscuous mode [ 356.064425][T11180] nbd0: detected capacity change from 0 to 63 [ 356.088757][ T5845] block nbd0: Receive control failed (result -104) [ 356.089693][T11014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.142466][T10991] veth1_macvtap: entered promiscuous mode [ 356.257081][T10991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.388889][T10991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.444859][T10991] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.456417][T10991] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.466333][T10991] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.493453][T10991] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.505164][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1641'. [ 356.524593][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1641'. [ 356.772252][ T4515] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.902491][ T4515] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.944197][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.952067][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.036572][ T4515] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.061898][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.074530][T11014] veth0_vlan: entered promiscuous mode [ 357.086327][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.098793][T11014] veth1_vlan: entered promiscuous mode [ 357.136498][T11014] veth0_macvtap: entered promiscuous mode [ 357.158008][T11014] veth1_macvtap: entered promiscuous mode [ 357.218060][ T4515] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.268826][T11014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.282631][T11014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.305459][T11014] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.317032][T11014] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.326801][T11014] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.336104][T11014] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.489621][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.533043][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.543494][ T4515] bridge_slave_1: left allmulticast mode [ 357.554893][ T4515] bridge_slave_1: left promiscuous mode [ 357.560673][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.585626][ T4515] bridge_slave_0: left allmulticast mode [ 357.591305][ T4515] bridge_slave_0: left promiscuous mode [ 357.614121][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.020649][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 358.031090][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 358.047038][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 358.065513][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 358.085564][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 358.116981][ T4515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.128020][ T4515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.139228][ T4515] bond0 (unregistering): Released all slaves [ 358.171888][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.206749][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.872493][ T4515] hsr_slave_0: left promiscuous mode [ 358.891044][ T4515] hsr_slave_1: left promiscuous mode [ 358.897502][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.907262][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.916448][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.934010][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.995303][ T4515] veth1_macvtap: left promiscuous mode [ 359.000885][ T4515] veth0_macvtap: left promiscuous mode [ 359.018678][ T4515] veth1_vlan: left promiscuous mode [ 359.024463][ T4515] veth0_vlan: left promiscuous mode [ 359.285253][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 359.296377][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 359.305194][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 359.313495][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 359.322168][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 359.575165][ T4515] team0 (unregistering): Port device team_slave_1 removed [ 359.615405][ T4515] team0 (unregistering): Port device team_slave_0 removed [ 359.997046][T11208] chnl_net:caif_netlink_parms(): no params data found [ 360.130117][T11208] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.137889][T11208] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.148965][T11208] bridge_slave_0: entered allmulticast mode [ 360.158774][T11208] bridge_slave_0: entered promiscuous mode [ 360.165161][ T5845] Bluetooth: hci0: command tx timeout [ 360.179124][T11208] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.186445][T11208] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.194050][T11208] bridge_slave_1: entered allmulticast mode [ 360.201894][T11208] bridge_slave_1: entered promiscuous mode [ 360.256938][T11208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.295014][T11208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.358619][T11208] team0: Port device team_slave_0 added [ 360.373368][T11208] team0: Port device team_slave_1 added [ 360.436962][T11208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.444560][T11208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.471500][T11208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.485865][T11208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.498304][T11208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.525459][T11208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.621386][ T4515] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.820687][ T4515] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.895484][T11208] hsr_slave_0: entered promiscuous mode [ 360.902160][T11208] hsr_slave_1: entered promiscuous mode [ 360.911609][T11236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1650'. [ 360.930990][T11208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.940219][T11208] Cannot create hsr debugfs directory [ 360.974053][T11235] bridge0: failed insert local address into bridge forwarding table [ 361.048103][T11241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1651'. [ 361.061660][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.070669][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.079604][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.100466][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 361.102675][ T4515] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.119097][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 361.365080][ T5846] Bluetooth: hci2: command tx timeout [ 361.385134][ T4515] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.746172][T11218] chnl_net:caif_netlink_parms(): no params data found [ 362.038871][ T4515] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.188546][ T4515] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.234461][ T5846] Bluetooth: hci0: command tx timeout [ 362.244478][T11218] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.260958][T11218] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.268706][T11218] bridge_slave_0: entered allmulticast mode [ 362.287699][T11218] bridge_slave_0: entered promiscuous mode [ 362.390994][ T4515] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.425635][T11218] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.432810][T11218] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.445575][T11218] bridge_slave_1: entered allmulticast mode [ 362.465192][T11218] bridge_slave_1: entered promiscuous mode [ 362.528493][ T4515] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.668356][T11218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.727224][T11218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.975104][T11218] team0: Port device team_slave_0 added [ 363.032143][T11279] team0: Device gtp1 is of different type [ 363.079103][T11218] team0: Port device team_slave_1 added [ 363.194776][ T5846] Bluetooth: hci3: command tx timeout [ 363.220204][T11218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.243273][T11218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.270064][T11218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.281460][T11208] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 363.294846][T11240] chnl_net:caif_netlink_parms(): no params data found [ 363.327928][T11218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.335235][T11218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.361901][T11218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.397496][T11208] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 363.427908][T11208] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 363.442927][ T4515] bridge_slave_1: left allmulticast mode [ 363.448750][ T5846] Bluetooth: hci2: command tx timeout [ 363.459244][ T4515] bridge_slave_1: left promiscuous mode [ 363.468965][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.479657][ T4515] bridge_slave_0: left allmulticast mode [ 363.485840][ T4515] bridge_slave_0: left promiscuous mode [ 363.491751][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.505220][ T4515] bridge_slave_1: left allmulticast mode [ 363.511812][ T4515] bridge_slave_1: left promiscuous mode [ 363.519573][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.530377][ T4515] bridge_slave_0: left allmulticast mode [ 363.537937][ T4515] bridge_slave_0: left promiscuous mode [ 363.544902][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.942405][ T4515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.953077][ T4515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.963557][ T4515] bond0 (unregistering): Released all slaves [ 364.242097][ T4515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.252890][ T4515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.263303][ T4515] bond0 (unregistering): Released all slaves [ 364.293099][T11208] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 364.327613][ T5846] Bluetooth: hci0: command tx timeout [ 364.335845][T11288] bridge_slave_0: default FDB implementation only supports local addresses [ 364.361439][T11291] bridge_slave_0: default FDB implementation only supports local addresses [ 364.678764][T11240] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.686248][T11240] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.693494][T11240] bridge_slave_0: entered allmulticast mode [ 364.701736][T11240] bridge_slave_0: entered promiscuous mode [ 364.717838][T11218] hsr_slave_0: entered promiscuous mode [ 364.729272][T11218] hsr_slave_1: entered promiscuous mode [ 364.735377][T11218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.743286][T11218] Cannot create hsr debugfs directory [ 364.780803][T11240] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.793297][T11240] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.811368][T11240] bridge_slave_1: entered allmulticast mode [ 364.819246][T11240] bridge_slave_1: entered promiscuous mode [ 364.962108][T11322] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 364.983300][T11240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.087252][T11240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.274116][ T5846] Bluetooth: hci3: command tx timeout [ 365.295041][T11240] team0: Port device team_slave_0 added [ 365.372236][T11240] team0: Port device team_slave_1 added [ 365.514126][ T5846] Bluetooth: hci2: command tx timeout [ 365.515035][T11339] netlink: 'syz.2.1683': attribute type 13 has an invalid length. [ 365.577020][T11240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.590944][T11240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.647929][T11240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.872364][T11339] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.904821][T11339] batman_adv: batadv0: Interface activated: team0 [ 365.933018][T11339] tipc: Resetting bearer [ 365.945593][T11339] tipc: Resetting bearer [ 365.952064][T11339] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.994676][T11240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.011107][T11240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.067482][T11240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.148989][T11343] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.158375][T11343] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.167024][T11343] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.175484][T11343] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.195991][T11343] bond7: left allmulticast mode [ 366.200947][T11343] bond7: left promiscuous mode [ 366.276749][ T4515] hsr_slave_0: left promiscuous mode [ 366.292242][ T4515] hsr_slave_1: left promiscuous mode [ 366.300576][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.312754][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.329734][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.337558][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.355819][ T4515] hsr_slave_0: left promiscuous mode [ 366.363084][ T4515] hsr_slave_1: left promiscuous mode [ 366.369367][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.377014][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.388312][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.393918][ T5846] Bluetooth: hci0: command tx timeout [ 366.396038][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.448078][ T4515] veth1_macvtap: left promiscuous mode [ 366.453627][ T4515] veth0_macvtap: left promiscuous mode [ 366.459764][ T4515] veth1_vlan: left promiscuous mode [ 366.465507][ T4515] veth0_vlan: left promiscuous mode [ 366.473508][ T4515] veth1_macvtap: left promiscuous mode [ 366.479898][ T4515] veth0_macvtap: left promiscuous mode [ 366.487465][ T4515] veth1_vlan: left promiscuous mode [ 366.492734][ T4515] veth0_vlan: left promiscuous mode [ 367.049736][ T4515] team0 (unregistering): Port device team_slave_1 removed [ 367.089826][ T4515] team0 (unregistering): Port device team_slave_0 removed [ 367.354079][ T5846] Bluetooth: hci3: command tx timeout [ 367.593884][ T5846] Bluetooth: hci2: command tx timeout [ 367.795750][ T4515] team0 (unregistering): Port device team_slave_1 removed [ 367.836278][ T4515] team0 (unregistering): Port device team_slave_0 removed [ 368.208866][T11208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.250692][T11208] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.259688][T11361] tipc: Enabling of bearer rejected, failed to enable media [ 368.403375][ T3441] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.410578][ T3441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.433156][ T3441] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.440352][ T3441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.456555][T11240] hsr_slave_0: entered promiscuous mode [ 368.463195][T11240] hsr_slave_1: entered promiscuous mode [ 368.486353][T11240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.503833][T11240] Cannot create hsr debugfs directory [ 368.646491][T11374] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 368.719182][T11377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1692'. [ 369.356615][T11208] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 369.374154][T11208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.438833][ T5846] Bluetooth: hci3: command tx timeout [ 370.054188][T11208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.061294][T11218] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 370.090617][T11218] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 370.144305][T11218] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 370.172882][T11218] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 370.202819][T11208] veth0_vlan: entered promiscuous mode [ 370.288830][T11208] veth1_vlan: entered promiscuous mode [ 370.405062][T11208] veth0_macvtap: entered promiscuous mode [ 370.454686][T11208] veth1_macvtap: entered promiscuous mode [ 370.545975][T11208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.589462][T11218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.626521][T11240] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 370.638108][T11240] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 370.651055][T11208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.674736][T11240] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 370.685371][T11240] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 370.715802][T11208] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.726902][T11208] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.736594][T11208] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.746727][T11208] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.770572][T11218] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.842633][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.849872][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.932731][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.939942][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.113100][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.146278][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.285321][T11240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.320124][ T3538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.343471][ T3538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.400472][T11240] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.431734][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.438953][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.475623][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.482774][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.728174][T11218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.832773][T11218] veth0_vlan: entered promiscuous mode [ 371.889878][T11218] veth1_vlan: entered promiscuous mode [ 372.148285][ T3577] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.220058][T11240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.285566][ T3577] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.338466][T11218] veth0_macvtap: entered promiscuous mode [ 372.416945][ T3577] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.445828][T11218] veth1_macvtap: entered promiscuous mode [ 372.507709][T11218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.542430][ T3577] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.580030][T11218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.598304][T11218] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.611773][T11218] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.620888][T11218] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.630423][T11218] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.735823][ T4515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.761959][ T4515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.778832][T11240] veth0_vlan: entered promiscuous mode [ 372.851914][ T3577] bridge_slave_1: left allmulticast mode [ 372.858499][ T3577] bridge_slave_1: left promiscuous mode [ 372.867176][ T3577] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.877294][ T3577] bridge_slave_0: left allmulticast mode [ 372.882930][ T3577] bridge_slave_0: left promiscuous mode [ 372.888977][ T3577] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.193886][ T3577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.209700][ T3577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.219651][ T3577] bond0 (unregistering): Released all slaves [ 373.237198][T11240] veth1_vlan: entered promiscuous mode [ 373.248083][ T1025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.257424][ T1025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.300517][T11240] veth0_macvtap: entered promiscuous mode [ 373.321513][T11240] veth1_macvtap: entered promiscuous mode [ 373.421568][T11240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.447196][T11240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.495536][T11240] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.505203][T11240] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.515772][T11240] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.524846][T11240] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.655839][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.672815][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.733013][ T4515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.760919][ T4515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.900887][ T3577] hsr_slave_0: left promiscuous mode [ 373.933429][ T3577] hsr_slave_1: left promiscuous mode [ 373.955183][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.976821][ T3577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.014825][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.022275][ T3577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.090670][ T3577] veth1_macvtap: left promiscuous mode [ 374.103804][ T3577] veth0_macvtap: left promiscuous mode [ 374.109414][ T3577] veth1_vlan: left promiscuous mode [ 374.134061][ T3577] veth0_vlan: left promiscuous mode [ 374.211990][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.222118][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.230638][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.242534][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.250949][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.598691][ T3577] team0 (unregistering): Port device team_slave_1 removed [ 374.636841][ T3577] team0 (unregistering): Port device team_slave_0 removed [ 375.458326][T11474] chnl_net:caif_netlink_parms(): no params data found [ 375.687486][ T3577] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.727309][T11474] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.734705][T11474] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.742006][T11474] bridge_slave_0: entered allmulticast mode [ 375.750451][T11474] bridge_slave_0: entered promiscuous mode [ 375.760718][T11474] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.768814][T11474] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.776437][T11474] bridge_slave_1: entered allmulticast mode [ 375.784788][T11474] bridge_slave_1: entered promiscuous mode [ 375.826347][ T3577] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.876371][T11474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.893367][T11474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.919246][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 375.929454][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 375.938665][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 375.953405][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 375.962010][ T3577] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.963225][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 376.011085][T11474] team0: Port device team_slave_0 added [ 376.019687][T11474] team0: Port device team_slave_1 added [ 376.063381][ T3577] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.086605][T11474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.093634][T11474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.127969][T11474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.158511][T11474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.167130][T11474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.194377][T11474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.256184][T11474] hsr_slave_0: entered promiscuous mode [ 376.262989][T11474] hsr_slave_1: entered promiscuous mode [ 376.270407][T11474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.278196][T11474] Cannot create hsr debugfs directory [ 376.315101][ T5846] Bluetooth: hci0: command tx timeout [ 376.537341][ T3577] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.641629][ T3577] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.723067][ T3577] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.812758][ T3577] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.881719][T11487] chnl_net:caif_netlink_parms(): no params data found [ 377.067443][ T3577] bridge_slave_1: left allmulticast mode [ 377.073103][ T3577] bridge_slave_1: left promiscuous mode [ 377.088506][ T3577] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.097895][ T3577] bridge_slave_0: left allmulticast mode [ 377.103622][ T3577] bridge_slave_0: left promiscuous mode [ 377.109778][ T3577] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.124321][ T3577] bridge_slave_1: left allmulticast mode [ 377.130022][ T3577] bridge_slave_1: left promiscuous mode [ 377.136990][ T3577] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.146942][ T3577] bridge_slave_0: left allmulticast mode [ 377.152577][ T3577] bridge_slave_0: left promiscuous mode [ 377.158713][ T3577] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.596052][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 377.607299][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 377.618732][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 377.643363][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 377.652021][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 377.738682][ T3577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.750684][ T3577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.761623][ T3577] bond0 (unregistering): Released all slaves [ 377.994108][ T5846] Bluetooth: hci2: command tx timeout [ 378.034331][ T3577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.048042][ T3577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.058028][ T3577] bond0 (unregistering): Released all slaves [ 378.073461][T11487] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.081248][T11487] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.088662][T11487] bridge_slave_0: entered allmulticast mode [ 378.095944][T11487] bridge_slave_0: entered promiscuous mode [ 378.124132][T11504] tipc: Enabled bearer , priority 0 [ 378.215422][T11506] syzkaller0: entered promiscuous mode [ 378.221035][T11506] syzkaller0: entered allmulticast mode [ 378.227513][T11506] tipc: Resetting bearer [ 378.242793][T11487] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.250226][T11487] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.257566][T11487] bridge_slave_1: entered allmulticast mode [ 378.266890][T11487] bridge_slave_1: entered promiscuous mode [ 378.277129][T11496] tipc: Resetting bearer [ 378.394665][ T5846] Bluetooth: hci0: command tx timeout [ 379.705116][T11496] tipc: Disabling bearer [ 379.753910][ T5846] Bluetooth: hci3: command tx timeout [ 379.852180][T11487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.933140][T11487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.030048][T11474] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 380.073854][ T5846] Bluetooth: hci2: command tx timeout [ 380.166233][T11474] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 380.194753][T11474] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 380.250093][T11487] team0: Port device team_slave_0 added [ 380.287790][T11474] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 380.335074][T11487] team0: Port device team_slave_1 added [ 380.478600][ T5846] Bluetooth: hci0: command tx timeout [ 381.801960][T11487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.814935][T11487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.844551][T11487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.844930][ T5846] Bluetooth: hci3: command tx timeout [ 381.942062][T11487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.951538][T11487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.984120][T11547] netlink: 'syz.2.1727': attribute type 4 has an invalid length. [ 382.007399][T11487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.136581][T11552] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1731'. [ 382.153868][ T5846] Bluetooth: hci2: command tx timeout [ 382.226195][T11487] hsr_slave_0: entered promiscuous mode [ 382.246276][T11487] hsr_slave_1: entered promiscuous mode [ 382.272860][T11487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.285992][T11487] Cannot create hsr debugfs directory [ 382.553760][ T5846] Bluetooth: hci0: command tx timeout [ 382.608016][ T3577] hsr_slave_0: left promiscuous mode [ 382.614005][ T3577] hsr_slave_1: left promiscuous mode [ 382.619898][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.636963][ T3577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.645257][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.652747][ T3577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.668291][ T3577] hsr_slave_0: left promiscuous mode [ 382.674977][ T3577] hsr_slave_1: left promiscuous mode [ 382.681535][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.689205][ T3577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.697668][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.705934][ T3577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.741131][ T3577] veth1_macvtap: left promiscuous mode [ 382.746778][ T3577] veth0_macvtap: left promiscuous mode [ 382.752365][ T3577] veth1_vlan: left promiscuous mode [ 382.757950][ T3577] veth0_vlan: left promiscuous mode [ 382.767913][ T3577] veth1_macvtap: left promiscuous mode [ 382.773467][ T3577] veth0_macvtap: left promiscuous mode [ 382.779750][ T3577] veth1_vlan: left promiscuous mode [ 382.785207][ T3577] veth0_vlan: left promiscuous mode [ 383.336779][ T3577] team0 (unregistering): Port device team_slave_1 removed [ 383.383201][ T3577] team0 (unregistering): Port device team_slave_0 removed [ 383.914151][ T5846] Bluetooth: hci3: command tx timeout [ 384.087500][ T3577] team0 (unregistering): Port device team_slave_1 removed [ 384.128177][ T3577] team0 (unregistering): Port device team_slave_0 removed [ 384.237741][ T5846] Bluetooth: hci2: command tx timeout [ 384.832751][T11509] chnl_net:caif_netlink_parms(): no params data found [ 385.012953][T11574] FAULT_INJECTION: forcing a failure. [ 385.012953][T11574] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 385.013213][T11474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.027029][T11574] CPU: 1 UID: 0 PID: 11574 Comm: syz.2.1738 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 385.027053][T11574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 385.027070][T11574] Call Trace: [ 385.027077][T11574] [ 385.027086][T11574] dump_stack_lvl+0x189/0x250 [ 385.027125][T11574] ? __pfx____ratelimit+0x10/0x10 [ 385.027151][T11574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.027181][T11574] ? __pfx__printk+0x10/0x10 [ 385.027200][T11574] ? __might_fault+0xb0/0x130 [ 385.027229][T11574] should_fail_ex+0x414/0x560 [ 385.027255][T11574] _copy_from_user+0x2d/0xb0 [ 385.027272][T11574] ___sys_sendmsg+0x158/0x2a0 [ 385.027295][T11574] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.027352][T11574] ? __fget_files+0x2a/0x420 [ 385.027369][T11574] ? __fget_files+0x3a0/0x420 [ 385.027398][T11574] __x64_sys_sendmsg+0x19b/0x260 [ 385.027421][T11574] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 385.027452][T11574] ? rcu_is_watching+0x15/0xb0 [ 385.027481][T11574] ? do_syscall_64+0xbe/0x3b0 [ 385.027500][T11574] do_syscall_64+0xfa/0x3b0 [ 385.027514][T11574] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.027537][T11574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.027553][T11574] ? clear_bhb_loop+0x60/0xb0 [ 385.027573][T11574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.027590][T11574] RIP: 0033:0x7f5f08f8e929 [ 385.027609][T11574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.027623][T11574] RSP: 002b:00007f5f09e4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.027645][T11574] RAX: ffffffffffffffda RBX: 00007f5f091b5fa0 RCX: 00007f5f08f8e929 [ 385.027658][T11574] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 385.027668][T11574] RBP: 00007f5f09e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 385.027679][T11574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.027689][T11574] R13: 0000000000000000 R14: 00007f5f091b5fa0 R15: 00007ffca3063f68 [ 385.027718][T11574] [ 385.322119][T11509] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.334728][T11579] FAULT_INJECTION: forcing a failure. [ 385.334728][T11579] name failslab, interval 1, probability 0, space 0, times 1 [ 385.346168][T11509] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.350432][T11579] CPU: 1 UID: 0 PID: 11579 Comm: syz.2.1740 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 385.350458][T11579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 385.350469][T11579] Call Trace: [ 385.350477][T11579] [ 385.350485][T11579] dump_stack_lvl+0x189/0x250 [ 385.350515][T11579] ? __pfx____ratelimit+0x10/0x10 [ 385.350541][T11579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.350566][T11579] ? __pfx__printk+0x10/0x10 [ 385.350589][T11579] ? __pfx___might_resched+0x10/0x10 [ 385.350620][T11579] should_fail_ex+0x414/0x560 [ 385.350646][T11579] should_failslab+0xa8/0x100 [ 385.350667][T11579] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 385.350685][T11579] ? __get_vm_area_node+0x13f/0x300 [ 385.350708][T11579] __get_vm_area_node+0x13f/0x300 [ 385.350731][T11579] __vmalloc_node_range_noprof+0x301/0x12f0 [ 385.350750][T11579] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 385.350776][T11579] ? is_bpf_text_address+0x26/0x2b0 [ 385.350825][T11579] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 385.350842][T11579] ? __might_fault+0xb0/0x130 [ 385.350859][T11579] ? __pfx_aa_get_newest_label+0x10/0x10 [ 385.350885][T11579] ? _parse_integer_limit+0x1ae/0x1f0 [ 385.350912][T11579] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 385.350934][T11579] __vmalloc_noprof+0xb1/0xf0 [ 385.350953][T11579] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 385.350979][T11579] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 385.351007][T11579] bpf_prog_alloc+0x3c/0x1a0 [ 385.351033][T11579] bpf_prog_load+0x735/0x1930 [ 385.351068][T11579] ? __pfx_bpf_prog_load+0x10/0x10 [ 385.351113][T11579] ? bpf_lsm_bpf+0x9/0x20 [ 385.351135][T11579] ? security_bpf+0x7e/0x300 [ 385.351158][T11579] __sys_bpf+0x5f1/0x860 [ 385.351181][T11579] ? __pfx___sys_bpf+0x10/0x10 [ 385.351216][T11579] ? ksys_write+0x22a/0x250 [ 385.351234][T11579] ? __pfx_ksys_write+0x10/0x10 [ 385.351258][T11579] __x64_sys_bpf+0x7c/0x90 [ 385.351278][T11579] do_syscall_64+0xfa/0x3b0 [ 385.351292][T11579] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.351315][T11579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.351332][T11579] ? clear_bhb_loop+0x60/0xb0 [ 385.351352][T11579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.351369][T11579] RIP: 0033:0x7f5f08f8e929 [ 385.351384][T11579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.351399][T11579] RSP: 002b:00007f5f09e4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 385.351417][T11579] RAX: ffffffffffffffda RBX: 00007f5f091b5fa0 RCX: 00007f5f08f8e929 [ 385.351430][T11579] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 385.351441][T11579] RBP: 00007f5f09e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 385.351452][T11579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.351462][T11579] R13: 0000000000000001 R14: 00007f5f091b5fa0 R15: 00007ffca3063f68 [ 385.351489][T11579] [ 385.351739][T11579] syz.2.1740: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 385.387934][T11509] bridge_slave_0: entered allmulticast mode [ 385.397525][T11579] ,cpuset= [ 385.422996][T11509] bridge_slave_0: entered promiscuous mode [ 385.423677][T11579] /,mems_allowed=0-1 [ 385.679307][T11474] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.682074][T11579] CPU: 1 UID: 0 PID: 11579 Comm: syz.2.1740 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 385.682096][T11579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 385.682107][T11579] Call Trace: [ 385.682115][T11579] [ 385.682122][T11579] dump_stack_lvl+0x189/0x250 [ 385.682152][T11579] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 385.682176][T11579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.682201][T11579] ? __pfx__printk+0x10/0x10 [ 385.682219][T11579] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 385.682239][T11579] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 385.682265][T11579] warn_alloc+0x214/0x310 [ 385.682290][T11579] ? __pfx_warn_alloc+0x10/0x10 [ 385.682310][T11579] ? __get_vm_area_node+0x13f/0x300 [ 385.682332][T11579] ? __get_vm_area_node+0x2b5/0x300 [ 385.682355][T11579] __vmalloc_node_range_noprof+0x326/0x12f0 [ 385.682376][T11579] ? is_bpf_text_address+0x26/0x2b0 [ 385.682424][T11579] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 385.682440][T11579] ? __might_fault+0xb0/0x130 [ 385.682455][T11579] ? __pfx_aa_get_newest_label+0x10/0x10 [ 385.682476][T11579] ? _parse_integer_limit+0x1ae/0x1f0 [ 385.682502][T11579] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 385.682523][T11579] __vmalloc_noprof+0xb1/0xf0 [ 385.682540][T11579] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 385.682572][T11579] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 385.682600][T11579] bpf_prog_alloc+0x3c/0x1a0 [ 385.682624][T11579] bpf_prog_load+0x735/0x1930 [ 385.682658][T11579] ? __pfx_bpf_prog_load+0x10/0x10 [ 385.682702][T11579] ? bpf_lsm_bpf+0x9/0x20 [ 385.682724][T11579] ? security_bpf+0x7e/0x300 [ 385.682746][T11579] __sys_bpf+0x5f1/0x860 [ 385.682768][T11579] ? __pfx___sys_bpf+0x10/0x10 [ 385.682803][T11579] ? ksys_write+0x22a/0x250 [ 385.682822][T11579] ? __pfx_ksys_write+0x10/0x10 [ 385.682852][T11579] __x64_sys_bpf+0x7c/0x90 [ 385.682873][T11579] do_syscall_64+0xfa/0x3b0 [ 385.682887][T11579] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.682910][T11579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.682927][T11579] ? clear_bhb_loop+0x60/0xb0 [ 385.682948][T11579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.682964][T11579] RIP: 0033:0x7f5f08f8e929 [ 385.682980][T11579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.682994][T11579] RSP: 002b:00007f5f09e4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 385.683012][T11579] RAX: ffffffffffffffda RBX: 00007f5f091b5fa0 RCX: 00007f5f08f8e929 [ 385.683024][T11579] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 385.683035][T11579] RBP: 00007f5f09e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 385.683046][T11579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.683055][T11579] R13: 0000000000000001 R14: 00007f5f091b5fa0 R15: 00007ffca3063f68 [ 385.683082][T11579] [ 385.683098][T11579] Mem-Info: [ 385.722609][T11474] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 385.770337][T11579] active_anon:4726 inactive_anon:0 isolated_anon:0 [ 385.770337][T11579] active_file:1257 inactive_file:40068 isolated_file:0 [ 385.770337][T11579] unevictable:768 dirty:99 writeback:0 [ 385.770337][T11579] slab_reclaimable:11319 slab_unreclaimable:114581 [ 385.770337][T11579] mapped:29149 shmem:1369 pagetables:971 [ 385.770337][T11579] sec_pagetables:0 bounce:0 [ 385.770337][T11579] kernel_misc_reclaimable:0 [ 385.770337][T11579] free:1311931 free_pcp:13894 free_cma:0 [ 385.770918][T11474] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.801841][T11579] Node 0 active_anon:18904kB inactive_anon:0kB active_file:5028kB inactive_file:160068kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116596kB dirty:392kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12260kB pagetables:3744kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 386.034618][ T5846] Bluetooth: hci3: command tx timeout [ 386.101546][T11509] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.108795][T11579] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 386.108861][T11509] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.149649][T11509] bridge_slave_1: entered allmulticast mode [ 386.157448][T11509] bridge_slave_1: entered promiscuous mode [ 386.170617][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.177786][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.187492][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.194681][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.228200][T11579] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 386.271836][T11579] lowmem_reserve[]: [ 386.271829][ T55] block nbd0: Possible stuck request ffff8880252a7000: control (read@0,1024B). Runtime 30 seconds [ 386.277121][T11579] 0 [ 386.286981][ T55] block nbd0: Possible stuck request ffff8880252a71c0: control (read@1024,1024B). Runtime 30 seconds [ 386.300568][ T55] block nbd0: Possible stuck request ffff8880252a7380: control (read@2048,1024B). Runtime 30 seconds [ 386.311862][ T55] block nbd0: Possible stuck request ffff8880252a7540: control (read@3072,1024B). Runtime 30 seconds [ 386.323900][T11579] 2500 2502 2502 2502 [ 386.328037][T11579] Node 0 DMA32 free:1330452kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18968kB inactive_anon:0kB active_file:5056kB inactive_file:158236kB unevictable:1536kB writepending:396kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:38908kB local_pcp:20796kB free_cma:0kB [ 386.366524][T11579] lowmem_reserve[]: 0 0 1 1 1 [ 386.376521][T11509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.388426][T11579] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 386.431998][T11579] lowmem_reserve[]: 0 0 0 0 0 [ 386.461420][T11579] Node 1 Normal free:3901840kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16992kB local_pcp:8864kB free_cma:0kB [ 386.508017][T11509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.536633][T11579] lowmem_reserve[]: 0 0 0 0 0 [ 386.541481][T11579] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 386.575813][T11579] Node 0 DMA32: 873*4kB (UME) 332*8kB (UME) 76*16kB (UME) 85*32kB (UME) 95*64kB (UM) 65*128kB (UME) 43*256kB (UME) 13*512kB (UM) 10*1024kB (UME) 4*2048kB (UM) 310*4096kB (M) = 1330340kB [ 386.596241][T11579] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 386.623214][T11579] Node 1 Normal: 182*4kB (UME) 65*8kB (UME) 37*16kB (UME) 203*32kB (UME) 62*64kB (UME) 5*128kB (UME) 3*256kB (ME) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3901840kB [ 386.647728][T11579] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 386.665220][T11579] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 386.675961][T11509] team0: Port device team_slave_0 added [ 386.684818][T11579] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 386.695645][T11509] team0: Port device team_slave_1 added [ 386.721516][T11579] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 386.733230][T11579] 42696 total pagecache pages [ 386.738671][T11579] 0 pages in swap cache [ 386.742877][T11579] Free swap = 124996kB [ 386.748048][T11579] Total swap = 124996kB [ 386.767933][T11579] 2097051 pages RAM [ 386.771785][T11579] 0 pages HighMem/MovableOnly [ 386.776945][T11579] 424694 pages reserved [ 386.781108][T11579] 0 pages cma reserved [ 386.810611][T11509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.818794][T11509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.845187][T11509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.907178][T11509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.919919][T11509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.951891][T11509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.111137][T11474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.158091][T11509] hsr_slave_0: entered promiscuous mode [ 387.171231][T11509] hsr_slave_1: entered promiscuous mode [ 387.181911][T11509] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.192778][T11509] Cannot create hsr debugfs directory [ 387.208028][T11610] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1749'. [ 387.318654][T11487] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 387.338006][T11487] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 387.346563][T11615] IPv6: NLM_F_CREATE should be specified when creating new route [ 387.371592][T11487] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 387.390180][T11487] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 387.650740][T11474] veth0_vlan: entered promiscuous mode [ 387.680522][T11474] veth1_vlan: entered promiscuous mode [ 387.793059][T11474] veth0_macvtap: entered promiscuous mode [ 387.820892][T11474] veth1_macvtap: entered promiscuous mode [ 387.855351][T11487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.911014][T11474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.923468][T11487] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.948691][ T3538] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.955910][ T3538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.003898][T11474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.033473][T11474] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.042685][T11474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.066431][T11474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.076268][T11474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.096648][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.103885][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.193382][T11509] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 388.233265][T11509] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 388.252076][T11509] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 388.299236][T11509] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 388.450447][ T3577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.483852][ T3577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.190166][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.219399][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.285640][T11487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.429129][T11487] veth0_vlan: entered promiscuous mode [ 390.477690][T11509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.495658][T11487] veth1_vlan: entered promiscuous mode [ 390.533191][T11509] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.546075][T11487] veth0_macvtap: entered promiscuous mode [ 390.562438][ T3538] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.569595][ T3538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.586216][T11487] veth1_macvtap: entered promiscuous mode [ 390.598222][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.605381][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.648441][T11487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.670001][T11487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.685390][T11487] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.697765][T11487] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.706977][T11487] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.719987][T11487] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.848626][ T3538] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.952256][ T3441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.990416][ T3441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.015790][ T3538] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.122748][ T3538] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.158749][ T1025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.184414][ T1025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.250042][ T3538] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.373284][T11509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.584267][ T3538] bridge_slave_1: left allmulticast mode [ 391.599931][ T3538] bridge_slave_1: left promiscuous mode [ 391.607287][ T3538] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.617441][ T3538] bridge_slave_0: left allmulticast mode [ 391.623115][ T3538] bridge_slave_0: left promiscuous mode [ 391.629245][ T3538] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.988716][ T3538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.016246][ T3538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.027778][ T3538] bond0 (unregistering): Released all slaves [ 392.215764][T11509] veth0_vlan: entered promiscuous mode [ 392.238951][T11509] veth1_vlan: entered promiscuous mode [ 392.348461][T11509] veth0_macvtap: entered promiscuous mode [ 392.366295][T11509] veth1_macvtap: entered promiscuous mode [ 392.436192][T11509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.449260][T11509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.472751][T11509] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.487638][T11509] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.499919][T11509] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.513100][T11509] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.680793][ T3538] hsr_slave_0: left promiscuous mode [ 392.693233][ T3538] hsr_slave_1: left promiscuous mode [ 392.700422][ T3538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.713222][ T3538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.723487][ T3538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.733703][ T3538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.736200][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 392.752052][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 392.766346][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 392.771411][ T3538] veth1_macvtap: left promiscuous mode [ 392.779630][ T3538] veth0_macvtap: left promiscuous mode [ 392.785653][ T3538] veth1_vlan: left promiscuous mode [ 392.791069][ T3538] veth0_vlan: left promiscuous mode [ 392.796863][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 392.807354][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 393.237096][ T3538] team0 (unregistering): Port device team_slave_1 removed [ 393.279213][ T3538] team0 (unregistering): Port device team_slave_0 removed [ 393.676281][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.689907][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.730075][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.743502][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.878408][T11688] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1769'. [ 394.379086][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 394.400830][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 394.409823][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 394.419101][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 394.427108][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 394.538114][ T3538] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.693214][ T3538] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.737893][T11684] chnl_net:caif_netlink_parms(): no params data found [ 394.879530][ T5845] Bluetooth: hci0: command tx timeout [ 394.918749][ T3538] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.938184][T11684] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.945703][T11684] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.952986][T11684] bridge_slave_0: entered allmulticast mode [ 394.961052][T11684] bridge_slave_0: entered promiscuous mode [ 394.973377][T11684] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.980923][T11684] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.988514][T11684] bridge_slave_1: entered allmulticast mode [ 394.995695][T11684] bridge_slave_1: entered promiscuous mode [ 395.059523][T11684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.081916][T11684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.128891][T11684] team0: Port device team_slave_0 added [ 395.141750][T11684] team0: Port device team_slave_1 added [ 395.193141][T11684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.200938][T11684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.227752][T11684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.240764][T11684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.247856][T11684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.276131][T11684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.313436][ T3538] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.414302][T11684] hsr_slave_0: entered promiscuous mode [ 395.420933][T11684] hsr_slave_1: entered promiscuous mode [ 395.427494][T11684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.435579][T11684] Cannot create hsr debugfs directory [ 395.441243][T11700] chnl_net:caif_netlink_parms(): no params data found [ 395.672359][ T3538] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.700925][T11700] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.710814][T11700] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.718866][T11700] bridge_slave_0: entered allmulticast mode [ 395.727506][T11700] bridge_slave_0: entered promiscuous mode [ 395.759654][ T3538] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.775590][T11700] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.782744][T11700] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.790230][T11700] bridge_slave_1: entered allmulticast mode [ 395.799111][T11700] bridge_slave_1: entered promiscuous mode [ 395.850132][ T3538] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.884267][T11700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.901516][T11700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.938455][ T3538] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.002293][T11700] team0: Port device team_slave_0 added [ 396.013427][T11700] team0: Port device team_slave_1 added [ 396.051829][T11700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.059693][T11700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.092130][T11700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.119005][T11700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.126267][T11700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.154675][T11700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.273458][ T3538] bridge_slave_1: left allmulticast mode [ 396.280839][ T3538] bridge_slave_1: left promiscuous mode [ 396.291054][ T3538] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.300636][ T3538] bridge_slave_0: left allmulticast mode [ 396.306811][ T3538] bridge_slave_0: left promiscuous mode [ 396.312500][ T3538] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.323836][ T3538] bridge_slave_1: left allmulticast mode [ 396.329510][ T3538] bridge_slave_1: left promiscuous mode [ 396.335884][ T3538] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.348003][ T3538] bridge_slave_0: left allmulticast mode [ 396.354611][ T3538] bridge_slave_0: left promiscuous mode [ 396.360294][ T3538] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.474856][ T5845] Bluetooth: hci2: command tx timeout [ 396.919562][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 396.929174][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 396.938032][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 396.954560][ T5846] Bluetooth: hci0: command tx timeout [ 396.961735][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 396.971642][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 397.165765][ T3538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.179745][ T3538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.194157][ T3538] bond0 (unregistering): Released all slaves [ 397.478236][ T3538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.489756][ T3538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.500220][ T3538] bond0 (unregistering): Released all slaves [ 397.521042][T11700] hsr_slave_0: entered promiscuous mode [ 397.527707][T11700] hsr_slave_1: entered promiscuous mode [ 397.533962][T11700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.541562][T11700] Cannot create hsr debugfs directory [ 397.658600][T11738] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1780'. [ 397.770252][T11740] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 397.973628][T11741] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 398.235523][T11749] netlink: 'syz.2.1783': attribute type 4 has an invalid length. [ 398.279295][T11749] netlink: 'syz.2.1783': attribute type 4 has an invalid length. [ 398.330910][T11684] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 398.331666][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1783'. [ 398.396408][T11754] FAULT_INJECTION: forcing a failure. [ 398.396408][T11754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.412343][T11754] CPU: 0 UID: 0 PID: 11754 Comm: syz.3.1785 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 398.412372][T11754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 398.412384][T11754] Call Trace: [ 398.412391][T11754] [ 398.412400][T11754] dump_stack_lvl+0x189/0x250 [ 398.412430][T11754] ? __pfx____ratelimit+0x10/0x10 [ 398.412455][T11754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.412480][T11754] ? __pfx__printk+0x10/0x10 [ 398.412499][T11754] ? __might_fault+0xb0/0x130 [ 398.412528][T11754] should_fail_ex+0x414/0x560 [ 398.412555][T11754] _copy_from_iter+0x1db/0x16f0 [ 398.412583][T11754] ? rcu_is_watching+0x15/0xb0 [ 398.412609][T11754] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 398.412629][T11754] ? __pfx__copy_from_iter+0x10/0x10 [ 398.412652][T11754] ? __build_skb_around+0x257/0x3e0 [ 398.412673][T11754] ? netlink_sendmsg+0x642/0xb30 [ 398.412690][T11754] ? skb_put+0x11b/0x210 [ 398.412710][T11754] netlink_sendmsg+0x6b2/0xb30 [ 398.412737][T11754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.412758][T11754] ? aa_sock_msg_perm+0x94/0x160 [ 398.412778][T11754] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 398.412798][T11754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.412815][T11754] __sock_sendmsg+0x21c/0x270 [ 398.412842][T11754] ____sys_sendmsg+0x505/0x830 [ 398.412864][T11754] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.412899][T11754] ? import_iovec+0x74/0xa0 [ 398.412915][T11754] ___sys_sendmsg+0x21f/0x2a0 [ 398.412934][T11754] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.412980][T11754] ? __fget_files+0x2a/0x420 [ 398.412994][T11754] ? __fget_files+0x3a0/0x420 [ 398.413018][T11754] __x64_sys_sendmsg+0x19b/0x260 [ 398.413036][T11754] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 398.413061][T11754] ? __pfx_ksys_write+0x10/0x10 [ 398.413073][T11754] ? rcu_is_watching+0x15/0xb0 [ 398.413096][T11754] ? do_syscall_64+0xbe/0x3b0 [ 398.413112][T11754] do_syscall_64+0xfa/0x3b0 [ 398.413124][T11754] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.413144][T11754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.413158][T11754] ? clear_bhb_loop+0x60/0xb0 [ 398.413174][T11754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.413188][T11754] RIP: 0033:0x7fde73f8e929 [ 398.413201][T11754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.413214][T11754] RSP: 002b:00007fde74e80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.413229][T11754] RAX: ffffffffffffffda RBX: 00007fde741b5fa0 RCX: 00007fde73f8e929 [ 398.413240][T11754] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 398.413249][T11754] RBP: 00007fde74e80090 R08: 0000000000000000 R09: 0000000000000000 [ 398.413257][T11754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.413265][T11754] R13: 0000000000000000 R14: 00007fde741b5fa0 R15: 00007ffe15adebe8 [ 398.413288][T11754] [ 398.713144][ T5846] Bluetooth: hci2: command tx timeout [ 398.776281][T11752] vlan0: left promiscuous mode [ 398.781544][T11684] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 398.851753][T11757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1786'. [ 398.922360][T11684] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 398.933794][T11684] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 398.984730][T11761] tipc: Enabling of bearer rejected, already enabled [ 399.034293][ C1] ================================================================== [ 399.042398][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 399.044079][ T5846] Bluetooth: hci3: command tx timeout [ 399.050291][ C1] Read of size 2 at addr ffff88805b10842a by task swapper/1/0 [ 399.056642][ T5845] Bluetooth: hci0: command tx timeout [ 399.063226][ C1] [ 399.063241][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 399.063264][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 399.063276][ C1] Call Trace: [ 399.063284][ C1] [ 399.063294][ C1] dump_stack_lvl+0x189/0x250 [ 399.063327][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 399.063347][ C1] ? rcu_is_watching+0x15/0xb0 [ 399.063375][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.063403][ C1] ? rcu_is_watching+0x15/0xb0 [ 399.063430][ C1] ? lock_release+0x4b/0x3e0 [ 399.063459][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 399.063477][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 399.063496][ C1] print_report+0xd2/0x2b0 [ 399.063521][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 399.063539][ C1] kasan_report+0x118/0x150 [ 399.063561][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 399.063582][ C1] rose_timer_expiry+0x471/0x4b0 [ 399.063602][ C1] call_timer_fn+0x17e/0x5f0 [ 399.063627][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 399.063644][ C1] ? call_timer_fn+0xbe/0x5f0 [ 399.063668][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 399.063697][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 399.063722][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.063748][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 399.063767][ C1] __run_timer_base+0x61a/0x860 [ 399.063789][ C1] ? ktime_get+0x3e/0x1f0 [ 399.063814][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 399.063835][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 399.063869][ C1] run_timer_softirq+0xb7/0x180 [ 399.063892][ C1] handle_softirqs+0x286/0x870 [ 399.063921][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 399.063951][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 399.063980][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 399.064004][ C1] __irq_exit_rcu+0xca/0x1f0 [ 399.064031][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 399.064063][ C1] irq_exit_rcu+0x9/0x30 [ 399.064088][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 399.064114][ C1] [ 399.064120][ C1] [ 399.064127][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 399.064148][ C1] RIP: 0010:finish_task_switch+0x26b/0x950 [ 399.064173][ C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 2f 68 d7 09 e8 5a fe 35 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 399.064189][ C1] RSP: 0018:ffffc90000197b58 EFLAGS: 00000282 [ 399.064207][ C1] RAX: e06e7a4528fa6000 RBX: 0000000000000000 RCX: e06e7a4528fa6000 [ 399.064221][ C1] RDX: 0000000000000000 RSI: ffffffff8d9822f0 RDI: ffffffff8be28d40 [ 399.064234][ C1] RBP: ffffc90000197bb0 R08: ffffffff8fa10cf7 R09: 1ffffffff1f4219e [ 399.064249][ C1] R10: dffffc0000000000 R11: fffffbfff1f4219f R12: ffff88801d2c5a00 [ 399.064263][ C1] R13: dffffc0000000000 R14: ffff888024853c00 R15: ffff8880b873ab58 [ 399.064286][ C1] ? finish_task_switch+0x266/0x950 [ 399.064314][ C1] __schedule+0x16fd/0x4d00 [ 399.064340][ C1] ? tick_nohz_next_event+0x47/0x3e0 [ 399.064359][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 399.064380][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 399.064406][ C1] ? schedule_idle+0x52/0x90 [ 399.064432][ C1] ? __pfx___schedule+0x10/0x10 [ 399.064460][ C1] ? flush_smp_call_function_queue+0x116/0x250 [ 399.064490][ C1] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 399.064514][ C1] schedule_idle+0x52/0x90 [ 399.064538][ C1] do_idle+0x4ad/0x510 [ 399.064558][ C1] ? __pfx_do_idle+0x10/0x10 [ 399.064582][ C1] cpu_startup_entry+0x44/0x60 [ 399.064599][ C1] start_secondary+0x101/0x110 [ 399.064623][ C1] common_startup_64+0x13e/0x147 [ 399.064652][ C1] [ 399.064658][ C1] [ 399.425073][ C1] Allocated by task 8685: [ 399.429387][ C1] kasan_save_track+0x3e/0x80 [ 399.434049][ C1] __kasan_kmalloc+0x93/0xb0 [ 399.438615][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 399.443976][ C1] rose_add_node+0x23a/0xde0 [ 399.448583][ C1] rose_rt_ioctl+0xa48/0xfb0 [ 399.453164][ C1] rose_ioctl+0x3ce/0x8b0 [ 399.457490][ C1] sock_do_ioctl+0xdc/0x300 [ 399.461987][ C1] sock_ioctl+0x576/0x790 [ 399.466301][ C1] __se_sys_ioctl+0xf9/0x170 [ 399.470877][ C1] do_syscall_64+0xfa/0x3b0 [ 399.475358][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.481232][ C1] [ 399.483534][ C1] Freed by task 11696: [ 399.487577][ C1] kasan_save_track+0x3e/0x80 [ 399.492238][ C1] kasan_save_free_info+0x46/0x50 [ 399.497253][ C1] __kasan_slab_free+0x62/0x70 [ 399.501996][ C1] kfree+0x18e/0x440 [ 399.505873][ C1] rose_rt_device_down+0x473/0x4c0 [ 399.510972][ C1] rose_device_event+0x603/0x6a0 [ 399.515889][ C1] notifier_call_chain+0x1b3/0x3e0 [ 399.520992][ C1] __dev_notify_flags+0x18d/0x2e0 [ 399.526006][ C1] netif_change_flags+0xe8/0x1a0 [ 399.530927][ C1] dev_change_flags+0x130/0x260 [ 399.535762][ C1] dev_ioctl+0x7b4/0x1150 [ 399.540073][ C1] sock_do_ioctl+0x22c/0x300 [ 399.544647][ C1] sock_ioctl+0x576/0x790 [ 399.548971][ C1] __se_sys_ioctl+0xf9/0x170 [ 399.553542][ C1] do_syscall_64+0xfa/0x3b0 [ 399.558034][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.564004][ C1] [ 399.566310][ C1] The buggy address belongs to the object at ffff88805b108400 [ 399.566310][ C1] which belongs to the cache kmalloc-512 of size 512 [ 399.580434][ C1] The buggy address is located 42 bytes inside of [ 399.580434][ C1] freed 512-byte region [ffff88805b108400, ffff88805b108600) [ 399.594127][ C1] [ 399.596429][ C1] The buggy address belongs to the physical page: [ 399.602824][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805b109400 pfn:0x5b108 [ 399.612870][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 399.621346][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 399.629834][ C1] page_type: f5(slab) [ 399.633794][ C1] raw: 00fff00000000240 ffff88801a441c80 ffffea0000bf7210 ffffea000154ad10 [ 399.642355][ C1] raw: ffff88805b109400 000000000010000e 00000000f5000000 0000000000000000 [ 399.650925][ C1] head: 00fff00000000240 ffff88801a441c80 ffffea0000bf7210 ffffea000154ad10 [ 399.659578][ C1] head: ffff88805b109400 000000000010000e 00000000f5000000 0000000000000000 [ 399.668231][ C1] head: 00fff00000000002 ffffea00016c4201 00000000ffffffff 00000000ffffffff [ 399.676880][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 399.685539][ C1] page dumped because: kasan: bad access detected [ 399.691944][ C1] page_owner tracks the page as allocated [ 399.697646][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3441, tgid 3441 (kworker/u8:6), ts 81853510567, free_ts 21435729247 [ 399.718988][ C1] post_alloc_hook+0x240/0x2a0 [ 399.723741][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 399.729264][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 399.735050][ C1] alloc_pages_mpol+0x232/0x4a0 [ 399.739875][ C1] allocate_slab+0x8a/0x3b0 [ 399.744368][ C1] ___slab_alloc+0xbfc/0x1480 [ 399.749023][ C1] __kmalloc_cache_noprof+0x296/0x3d0 [ 399.754372][ C1] __ipv6_dev_mc_inc+0x420/0xaf0 [ 399.759286][ C1] addrconf_dad_work+0x3d0/0x14b0 [ 399.764291][ C1] process_scheduled_works+0xae1/0x17b0 [ 399.769821][ C1] worker_thread+0x8a0/0xda0 [ 399.774391][ C1] kthread+0x70e/0x8a0 [ 399.778438][ C1] ret_from_fork+0x3fc/0x770 [ 399.783009][ C1] ret_from_fork_asm+0x1a/0x30 [ 399.787766][ C1] page last free pid 1 tgid 1 stack trace: [ 399.793564][ C1] __free_frozen_pages+0xc71/0xe70 [ 399.798672][ C1] free_contig_range+0x1bd/0x4a0 [ 399.803610][ C1] destroy_args+0x7e/0x5d0 [ 399.808029][ C1] debug_vm_pgtable+0x412/0x450 [ 399.813018][ C1] do_one_initcall+0x233/0x820 [ 399.817803][ C1] do_initcall_level+0x137/0x1f0 [ 399.822732][ C1] do_initcalls+0x69/0xd0 [ 399.827070][ C1] kernel_init_freeable+0x3d9/0x570 [ 399.832340][ C1] kernel_init+0x1d/0x1d0 [ 399.836646][ C1] ret_from_fork+0x3fc/0x770 [ 399.841218][ C1] ret_from_fork_asm+0x1a/0x30 [ 399.845967][ C1] [ 399.848275][ C1] Memory state around the buggy address: [ 399.853890][ C1] ffff88805b108300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 399.861928][ C1] ffff88805b108380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 399.869969][ C1] >ffff88805b108400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 399.878006][ C1] ^ [ 399.883376][ C1] ffff88805b108480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 399.891417][ C1] ffff88805b108500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 399.899459][ C1] ================================================================== [ 399.907631][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 399.914864][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 399.926506][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 399.936549][ C1] Call Trace: [ 399.939820][ C1] [ 399.942651][ C1] dump_stack_lvl+0x99/0x250 [ 399.947233][ C1] ? __asan_memcpy+0x40/0x70 [ 399.951807][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.956994][ C1] ? __pfx__printk+0x10/0x10 [ 399.961572][ C1] panic+0x2db/0x790 [ 399.965461][ C1] ? __pfx_panic+0x10/0x10 [ 399.969881][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 399.975770][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 399.981665][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 399.987985][ C1] ? print_memory_metadata+0x314/0x400 [ 399.993431][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 399.998527][ C1] check_panic_on_warn+0x89/0xb0 [ 400.003452][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 400.008545][ C1] end_report+0x78/0x160 [ 400.012771][ C1] kasan_report+0x129/0x150 [ 400.017263][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 400.022374][ C1] rose_timer_expiry+0x471/0x4b0 [ 400.027334][ C1] call_timer_fn+0x17e/0x5f0 [ 400.031947][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 400.037395][ C1] ? call_timer_fn+0xbe/0x5f0 [ 400.042057][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 400.047154][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 400.052339][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.057520][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 400.062962][ C1] __run_timer_base+0x61a/0x860 [ 400.067803][ C1] ? ktime_get+0x3e/0x1f0 [ 400.072204][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 400.077557][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 400.083788][ C1] run_timer_softirq+0xb7/0x180 [ 400.088632][ C1] handle_softirqs+0x286/0x870 [ 400.093409][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 400.098164][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 400.103614][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 400.108807][ C1] __irq_exit_rcu+0xca/0x1f0 [ 400.113389][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 400.118582][ C1] irq_exit_rcu+0x9/0x30 [ 400.122818][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 400.128455][ C1] [ 400.131374][ C1] [ 400.134292][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 400.140258][ C1] RIP: 0010:finish_task_switch+0x26b/0x950 [ 400.146052][ C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 2f 68 d7 09 e8 5a fe 35 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 400.165661][ C1] RSP: 0018:ffffc90000197b58 EFLAGS: 00000282 [ 400.171744][ C1] RAX: e06e7a4528fa6000 RBX: 0000000000000000 RCX: e06e7a4528fa6000 [ 400.179713][ C1] RDX: 0000000000000000 RSI: ffffffff8d9822f0 RDI: ffffffff8be28d40 [ 400.187679][ C1] RBP: ffffc90000197bb0 R08: ffffffff8fa10cf7 R09: 1ffffffff1f4219e [ 400.195638][ C1] R10: dffffc0000000000 R11: fffffbfff1f4219f R12: ffff88801d2c5a00 [ 400.203595][ C1] R13: dffffc0000000000 R14: ffff888024853c00 R15: ffff8880b873ab58 [ 400.211562][ C1] ? finish_task_switch+0x266/0x950 [ 400.216759][ C1] __schedule+0x16fd/0x4d00 [ 400.221256][ C1] ? tick_nohz_next_event+0x47/0x3e0 [ 400.226527][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 400.232755][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 400.237969][ C1] ? schedule_idle+0x52/0x90 [ 400.242547][ C1] ? __pfx___schedule+0x10/0x10 [ 400.247386][ C1] ? flush_smp_call_function_queue+0x116/0x250 [ 400.253530][ C1] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 400.259147][ C1] schedule_idle+0x52/0x90 [ 400.263547][ C1] do_idle+0x4ad/0x510 [ 400.267601][ C1] ? __pfx_do_idle+0x10/0x10 [ 400.272191][ C1] cpu_startup_entry+0x44/0x60 [ 400.276963][ C1] start_secondary+0x101/0x110 [ 400.281712][ C1] common_startup_64+0x13e/0x147 [ 400.286635][ C1] [ 400.289906][ C1] Kernel Offset: disabled [ 400.294224][ C1] Rebooting in 86400 seconds..