last executing test programs: 1m28.264145131s ago: executing program 2 (id=278): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x96}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x500}, 0x2}, 0x80) 1m12.983511634s ago: executing program 2 (id=278): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x96}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x500}, 0x2}, 0x80) 58.712972986s ago: executing program 2 (id=278): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x96}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x500}, 0x2}, 0x80) 44.442413243s ago: executing program 2 (id=278): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x96}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x500}, 0x2}, 0x80) 26.135703733s ago: executing program 2 (id=278): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x96}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x500}, 0x2}, 0x80) 12.78966728s ago: executing program 3 (id=1158): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90424fc602f00000008000800053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 12.586085403s ago: executing program 3 (id=1161): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth0_to_bridge\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'bridge_slave_1\x00'}}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)={@cgroup, 0xffffffffffffffff, 0x1f, 0x0, 0xffffffffffffffff, @prog_fd}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x3906b532b8f6969c, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x8081) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r5, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0) 11.504891104s ago: executing program 3 (id=1176): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002300)=""/228, 0xe4}], 0x1}}], 0x1, 0x0, 0x0) 11.328958763s ago: executing program 3 (id=1179): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x7, 0x7ffffff7}}], 0x1, 0x0) 11.08510991s ago: executing program 3 (id=1182): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1099, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{r0}, &(0x7f0000001380), &(0x7f00000013c0)='%-010d \x00'}, 0x20) 10.89363921s ago: executing program 3 (id=1186): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140), 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.107142147s ago: executing program 0 (id=1234): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001) sendmsg$unix(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)="8cc0013f79467b5665d82d9912c5e55c69915f61e41f2fa9d9f9093740d676c8ce7f7c63648977aa3218d86d63145b8f3aba8efb", 0x34}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0xff78}, {&(0x7f0000000300)=""/92, 0x33}], 0x2}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000580)=""/137, 0x89}], 0x1}}], 0x2, 0x0, 0x0) 4.899944147s ago: executing program 0 (id=1237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0}) ppoll(&(0x7f0000000180)=[{r2}, {r1}], 0x2, &(0x7f0000000100)={r4}, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x64, r6, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x3]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x8, 0x3, 0x9, 0x80000000]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000001}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c000) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x7, &(0x7f0000000300)=0x2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r7, &(0x7f00000002c0)="a67f", 0x2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b}, 0x9) shutdown(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="64000000100003051600000000000000000088", @ANYRES32=0x0], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x9c, 0x30, 0xb, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @dev}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_PORT_MAX={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a300000000400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038300000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000004000380140000001000010000000000000000000084000a00000000000000"], 0xc4}}, 0x20000000) 3.491334572s ago: executing program 0 (id=1239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'ipvlan0\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'caif0\x00'}}}}}, 0x34}}, 0x0) 3.295576739s ago: executing program 2 (id=278): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x96}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x500}, 0x2}, 0x80) 3.261461244s ago: executing program 0 (id=1244): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$sock(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x41}}], 0x18}}], 0x1, 0x0) 2.405015198s ago: executing program 0 (id=1245): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$alg(0x26, 0x5, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x3, &(0x7f0000001480)=@framed, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r1}]}, 0x24}}, 0x0) 2.279260634s ago: executing program 0 (id=1248): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) gettid() pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) r3 = epoll_create1(0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0xb08e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee1, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x29, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x7e, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @dev, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@loopback}]}, @cipso={0x86, 0x21, 0x0, [{0x0, 0x8, "0100f2fcb6ba"}, {0x0, 0x11, "4eb8a616e1992a157e49878192645b"}, {0x0, 0x2}]}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000200791048000000000069040c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x14) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050400a3ae00006110750000000000040000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x90) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000140), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) 1.161824606s ago: executing program 4 (id=1253): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'ipvlan0\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'caif0\x00'}}}}}, 0x34}}, 0x0) 890.17375ms ago: executing program 1 (id=1256): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x2, 0x0) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80000) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000002c0)=@req3={0x2, 0x1000, 0xe, 0x8001, 0xff, 0x9, 0xb80}, 0x1c) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) listen(r0, 0x9e) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x24, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x67}, [@NDA_IFINDEX={0x8, 0x8, r5}]}, 0x24}}, 0x0) 593.862259ms ago: executing program 1 (id=1257): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$alg(0x26, 0x5, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x3, &(0x7f0000001480)=@framed, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r1}]}, 0x24}}, 0x0) 482.795887ms ago: executing program 4 (id=1258): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001) sendmsg$unix(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)="8cc0013f79467b5665d82d9912c5e55c69915f61e41f2fa9d9f9093740d676c8ce7f7c63648977aa3218d86d63145b8f3aba8efb", 0x34}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0xff78}, {&(0x7f0000000300)=""/92, 0x33}], 0x2}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000580)=""/137, 0x89}], 0x1}}], 0x2, 0x0, 0x0) 472.790801ms ago: executing program 1 (id=1259): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x20}}, 0x0) 363.402587ms ago: executing program 4 (id=1260): unshare(0x6020400) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) shutdown(r0, 0x0) 279.837203ms ago: executing program 1 (id=1261): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) 220.131989ms ago: executing program 4 (id=1262): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080)=0x87f2, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) 144.343045ms ago: executing program 1 (id=1263): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x48}}, 0x0) 120.92149ms ago: executing program 4 (id=1264): unshare(0x20020480) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x3c}}, 0x0) 50.12104ms ago: executing program 1 (id=1265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x60}}, 0x0) 0s ago: executing program 4 (id=1266): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x2, 0x0) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80000) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000002c0)=@req3={0x2, 0x1000, 0xe, 0x8001, 0xff, 0x9, 0xb80}, 0x1c) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) listen(r0, 0x9e) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x24, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x67}, [@NDA_IFINDEX={0x8, 0x8, r5}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.19' (ED25519) to the list of known hosts. [ 68.954806][ T5083] cgroup: Unknown subsys name 'net' [ 69.096728][ T5083] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.863050][ T5083] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.818474][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.825094][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.197280][ T5097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.206793][ T5104] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.227162][ T5097] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.234289][ T5104] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.242470][ T5097] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.251975][ T5097] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.260415][ T5104] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.268195][ T5097] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.275755][ T5104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.281469][ T5109] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.284760][ T5097] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.291886][ T5110] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.298062][ T5097] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.311866][ T5097] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.314577][ T5109] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.322413][ T5097] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.326577][ T5109] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.340523][ T5099] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.343018][ T5109] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.347997][ T5097] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.355275][ T5109] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.363947][ T5097] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.376496][ T5097] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.383021][ T4491] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.406824][ T4491] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.414997][ T4491] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.424834][ T4491] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.432754][ T4491] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.440342][ T4491] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.450098][ T4491] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.986048][ T5098] chnl_net:caif_netlink_parms(): no params data found [ 74.058853][ T5105] chnl_net:caif_netlink_parms(): no params data found [ 74.165158][ T5092] chnl_net:caif_netlink_parms(): no params data found [ 74.303062][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.310846][ T5098] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.318450][ T5098] bridge_slave_0: entered allmulticast mode [ 74.327401][ T5098] bridge_slave_0: entered promiscuous mode [ 74.341149][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.348429][ T5098] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.355903][ T5098] bridge_slave_1: entered allmulticast mode [ 74.362988][ T5098] bridge_slave_1: entered promiscuous mode [ 74.380267][ T5101] chnl_net:caif_netlink_parms(): no params data found [ 74.410971][ T5093] chnl_net:caif_netlink_parms(): no params data found [ 74.500063][ T5098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.527695][ T5105] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.535134][ T5105] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.542301][ T5105] bridge_slave_0: entered allmulticast mode [ 74.550776][ T5105] bridge_slave_0: entered promiscuous mode [ 74.579950][ T5098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.614457][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.622265][ T5092] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.629989][ T5092] bridge_slave_0: entered allmulticast mode [ 74.637598][ T5092] bridge_slave_0: entered promiscuous mode [ 74.652343][ T5105] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.659813][ T5105] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.668013][ T5105] bridge_slave_1: entered allmulticast mode [ 74.675264][ T5105] bridge_slave_1: entered promiscuous mode [ 74.699940][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.707405][ T5092] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.714597][ T5092] bridge_slave_1: entered allmulticast mode [ 74.722521][ T5092] bridge_slave_1: entered promiscuous mode [ 74.766909][ T5098] team0: Port device team_slave_0 added [ 74.819876][ T5098] team0: Port device team_slave_1 added [ 74.840752][ T5101] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.848094][ T5101] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.856154][ T5101] bridge_slave_0: entered allmulticast mode [ 74.863204][ T5101] bridge_slave_0: entered promiscuous mode [ 74.874202][ T5105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.888139][ T5105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.927432][ T5092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.944396][ T5101] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.951664][ T5101] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.959032][ T5101] bridge_slave_1: entered allmulticast mode [ 74.967213][ T5101] bridge_slave_1: entered promiscuous mode [ 75.015729][ T5092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.050305][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.057674][ T5093] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.066001][ T5093] bridge_slave_0: entered allmulticast mode [ 75.073033][ T5093] bridge_slave_0: entered promiscuous mode [ 75.081817][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.089360][ T5093] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.097293][ T5093] bridge_slave_1: entered allmulticast mode [ 75.104450][ T5093] bridge_slave_1: entered promiscuous mode [ 75.112630][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.119943][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.146286][ T5098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.191257][ T5101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.203850][ T5105] team0: Port device team_slave_0 added [ 75.224593][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.231995][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.258289][ T5098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.291475][ T5101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.315573][ T5105] team0: Port device team_slave_1 added [ 75.338462][ T5092] team0: Port device team_slave_0 added [ 75.387425][ T5093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.402468][ T5092] team0: Port device team_slave_1 added [ 75.412290][ T5101] team0: Port device team_slave_0 added [ 75.419313][ T5103] Bluetooth: hci1: command tx timeout [ 75.419386][ T4491] Bluetooth: hci0: command tx timeout [ 75.431187][ T5107] Bluetooth: hci2: command tx timeout [ 75.432780][ T5101] team0: Port device team_slave_1 added [ 75.458912][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.466218][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.492401][ T5105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.496435][ T4491] Bluetooth: hci4: command tx timeout [ 75.505031][ T5107] Bluetooth: hci3: command tx timeout [ 75.517304][ T5093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.579769][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.587126][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.613460][ T5105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.671781][ T5098] hsr_slave_0: entered promiscuous mode [ 75.679234][ T5098] hsr_slave_1: entered promiscuous mode [ 75.698794][ T5093] team0: Port device team_slave_0 added [ 75.706480][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.713476][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.741046][ T5092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.753330][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.763566][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.789845][ T5101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.803005][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.810120][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.836084][ T5101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.863381][ T5093] team0: Port device team_slave_1 added [ 75.882887][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.890269][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.916309][ T5092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.995198][ T5105] hsr_slave_0: entered promiscuous mode [ 76.001810][ T5105] hsr_slave_1: entered promiscuous mode [ 76.009337][ T5105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.017890][ T5105] Cannot create hsr debugfs directory [ 76.056979][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.063966][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.090041][ T5093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.103713][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.110752][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.136803][ T5093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.268452][ T5101] hsr_slave_0: entered promiscuous mode [ 76.276406][ T5101] hsr_slave_1: entered promiscuous mode [ 76.282682][ T5101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.291034][ T5101] Cannot create hsr debugfs directory [ 76.349797][ T5092] hsr_slave_0: entered promiscuous mode [ 76.356510][ T5092] hsr_slave_1: entered promiscuous mode [ 76.362790][ T5092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.370620][ T5092] Cannot create hsr debugfs directory [ 76.477321][ T5093] hsr_slave_0: entered promiscuous mode [ 76.483841][ T5093] hsr_slave_1: entered promiscuous mode [ 76.491193][ T5093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.499290][ T5093] Cannot create hsr debugfs directory [ 76.889336][ T5098] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.915807][ T5098] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.930507][ T5098] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.947536][ T5098] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.016828][ T5105] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.032112][ T5105] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.045980][ T5105] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.083579][ T5105] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.148249][ T5101] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.161721][ T5101] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.173081][ T5101] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.189115][ T5101] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.312648][ T5092] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.323153][ T5092] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.370770][ T5092] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.407327][ T5092] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.455674][ T5093] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.470733][ T5093] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.499898][ T5107] Bluetooth: hci1: command tx timeout [ 77.499931][ T5103] Bluetooth: hci2: command tx timeout [ 77.510984][ T4491] Bluetooth: hci0: command tx timeout [ 77.538338][ T5093] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.552711][ T5093] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.585091][ T4491] Bluetooth: hci4: command tx timeout [ 77.590545][ T4491] Bluetooth: hci3: command tx timeout [ 77.612280][ T5098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.653887][ T5105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.708813][ T5101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.747200][ T5098] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.780301][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.787732][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.809913][ T5105] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.837540][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.844668][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.906801][ T5101] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.929741][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.936922][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.973914][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.981146][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.991310][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.998534][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.009931][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.017145][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.078608][ T5092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.173821][ T5105] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.188279][ T5105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.219603][ T5092] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.286294][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.293462][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.382850][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.390103][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.484830][ T5093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.601845][ T5093] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.682188][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.689447][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.734265][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.741486][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.791868][ T5101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.809140][ T5098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.822185][ T5105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.962782][ T5092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.020401][ T5101] veth0_vlan: entered promiscuous mode [ 79.041469][ T5093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.126787][ T5101] veth1_vlan: entered promiscuous mode [ 79.220609][ T5098] veth0_vlan: entered promiscuous mode [ 79.257972][ T5105] veth0_vlan: entered promiscuous mode [ 79.290765][ T5098] veth1_vlan: entered promiscuous mode [ 79.314595][ T5105] veth1_vlan: entered promiscuous mode [ 79.334500][ T5101] veth0_macvtap: entered promiscuous mode [ 79.357949][ T5101] veth1_macvtap: entered promiscuous mode [ 79.474476][ T5098] veth0_macvtap: entered promiscuous mode [ 79.507354][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.531456][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.540230][ T5098] veth1_macvtap: entered promiscuous mode [ 79.553335][ T5093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.575590][ T4491] Bluetooth: hci1: command tx timeout [ 79.575613][ T5103] Bluetooth: hci0: command tx timeout [ 79.581028][ T4491] Bluetooth: hci2: command tx timeout [ 79.601932][ T5105] veth0_macvtap: entered promiscuous mode [ 79.610839][ T5101] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.623342][ T5101] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.633514][ T5101] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.642472][ T5101] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.656044][ T4491] Bluetooth: hci4: command tx timeout [ 79.656740][ T5103] Bluetooth: hci3: command tx timeout [ 79.706208][ T5105] veth1_macvtap: entered promiscuous mode [ 79.720967][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.732121][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.749818][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.792873][ T5092] veth0_vlan: entered promiscuous mode [ 79.802157][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.813213][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.826812][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.840214][ T5098] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.849068][ T5098] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.858413][ T5098] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.868032][ T5098] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.913500][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.924302][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.934988][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.945510][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.957505][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.004118][ T5093] veth0_vlan: entered promiscuous mode [ 80.031965][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.042538][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.052989][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.064585][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.076758][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.093494][ T5092] veth1_vlan: entered promiscuous mode [ 80.107660][ T5105] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.117197][ T5105] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.126569][ T5105] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.138502][ T5105] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.200427][ T5093] veth1_vlan: entered promiscuous mode [ 80.282350][ T2856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.303193][ T2856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.341701][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.362910][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.413280][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.421528][ T5092] veth0_macvtap: entered promiscuous mode [ 80.431609][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.473493][ T5092] veth1_macvtap: entered promiscuous mode [ 80.494017][ T5093] veth0_macvtap: entered promiscuous mode [ 80.505880][ T5093] veth1_macvtap: entered promiscuous mode [ 80.526180][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.545185][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.582504][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.599833][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.614677][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.629734][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.640040][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.650982][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.665658][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.704783][ T2856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.722398][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.733539][ T2856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.746682][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.757124][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.769883][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.791581][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.805213][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.818795][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.854636][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.860261][ T5092] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.880826][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.894737][ T5092] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.913102][ T5092] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.923455][ T5092] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.979536][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.007579][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.025035][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.040843][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.050830][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.064936][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.074817][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.086359][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.103716][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.117967][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.129401][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.140382][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.157460][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.168013][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.176558][ T5187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'. [ 81.179093][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.199289][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.211107][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.223237][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.284139][ T5093] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.310018][ T5093] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.324706][ T5093] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.346271][ T5093] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.372243][ T5187] tipc: Started in network mode [ 81.385038][ T5187] tipc: Node identity , cluster identity 4711 [ 81.396527][ T5187] tipc: Failed to set node id, please configure manually [ 81.409531][ T5187] tipc: Enabling of bearer rejected, failed to enable media [ 81.655596][ T4491] Bluetooth: hci2: command tx timeout [ 81.656248][ T5107] Bluetooth: hci0: command tx timeout [ 81.661175][ T4491] Bluetooth: hci1: command tx timeout [ 81.684217][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.703014][ T5201] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.721516][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.735267][ T4491] Bluetooth: hci3: command tx timeout [ 81.736127][ T5107] Bluetooth: hci4: command tx timeout [ 81.863721][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.886119][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.009974][ T2782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.046232][ T2782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.188562][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.209770][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.202520][ T5235] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3'. [ 83.508721][ T5253] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.815481][ T5107] Bluetooth: hci4: command 0x0405 tx timeout [ 83.979570][ T5267] netlink: 104 bytes leftover after parsing attributes in process `syz.2.35'. [ 83.991569][ T5264] netlink: 'syz.1.36': attribute type 11 has an invalid length. [ 84.023683][ T5264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36'. [ 84.981259][ T5302] netlink: 104 bytes leftover after parsing attributes in process `syz.2.53'. [ 85.155442][ T5306] netlink: 'syz.1.55': attribute type 25 has an invalid length. [ 85.182279][ T5306] netlink: 'syz.1.55': attribute type 8 has an invalid length. [ 85.597843][ T5329] netlink: 165 bytes leftover after parsing attributes in process `syz.3.63'. [ 85.614184][ T5322] netlink: 'syz.2.62': attribute type 11 has an invalid length. [ 85.640547][ T5322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.62'. [ 85.666989][ T5332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.65'. [ 85.779299][ T5334] netlink: 224 bytes leftover after parsing attributes in process `syz.3.66'. [ 86.146573][ T5350] syz.3.70 uses obsolete (PF_INET,SOCK_PACKET) [ 86.433262][ T5358] netlink: 165 bytes leftover after parsing attributes in process `syz.4.76'. [ 86.536735][ T5368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.78'. [ 86.665665][ T5371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.79'. [ 86.761673][ T5364] tipc: Started in network mode [ 86.783591][ T5364] tipc: Node identity , cluster identity 4711 [ 86.801255][ T5364] tipc: Failed to set node id, please configure manually [ 86.831719][ T5364] tipc: Enabling of bearer rejected, failed to enable media [ 86.968518][ T5384] netlink: 'syz.1.83': attribute type 25 has an invalid length. [ 86.991662][ T5384] netlink: 'syz.1.83': attribute type 8 has an invalid length. [ 87.180771][ T45] cfg80211: failed to load regulatory.db [ 87.251920][ T5395] netlink: 3 bytes leftover after parsing attributes in process `syz.4.87'. [ 87.304489][ T5395] 0ªX¹¦À: renamed from caif0 [ 87.355817][ T5395] 0ªX¹¦À: entered allmulticast mode [ 87.362610][ T5395] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 87.369042][ T5406] Zero length message leads to an empty skb [ 87.411022][ T5399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.89'. [ 87.445284][ T5405] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.91'. [ 87.610926][ T5413] netlink: 104 bytes leftover after parsing attributes in process `syz.4.92'. [ 87.804744][ T5415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.93'. [ 87.969630][ T5419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 88.678081][ T5451] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.108'. [ 88.724806][ T5448] netlink: 'syz.0.105': attribute type 11 has an invalid length. [ 88.778297][ T5107] Bluetooth: hci4: command 0x0405 tx timeout [ 88.858794][ T5458] Bluetooth: MGMT ver 1.22 [ 89.343012][ T5473] vlan2: entered promiscuous mode [ 89.375391][ T5473] team0: entered promiscuous mode [ 89.399929][ T5473] team_slave_0: entered promiscuous mode [ 89.419114][ T5473] team_slave_1: entered promiscuous mode [ 89.447404][ T5473] team0: Device vlan2 is already an upper device of the team interface [ 89.483088][ T5473] team0: left promiscuous mode [ 89.518229][ T5473] team_slave_0: left promiscuous mode [ 89.542006][ T5473] team_slave_1: left promiscuous mode [ 89.764280][ T5488] netlink: 'syz.3.124': attribute type 25 has an invalid length. [ 89.776186][ T5488] netlink: 'syz.3.124': attribute type 8 has an invalid length. [ 89.913746][ T5501] netlink: 'syz.4.128': attribute type 3 has an invalid length. [ 91.063813][ T5553] xt_TPROXY: Can be used only with -p tcp or -p udp [ 91.144431][ T5548] tipc: Started in network mode [ 91.155116][ T5548] tipc: Node identity , cluster identity 4711 [ 91.170424][ T5548] tipc: Failed to set node id, please configure manually [ 91.204043][ T5548] tipc: Enabling of bearer rejected, failed to enable media [ 91.442802][ T5569] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 91.780867][ T5583] __nla_validate_parse: 6 callbacks suppressed [ 91.780889][ T5583] netlink: 32 bytes leftover after parsing attributes in process `syz.3.161'. [ 91.823164][ T5589] openvswitch: netlink: Key type 5391 is out of range max 32 [ 91.832616][ T5583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.161'. [ 91.970034][ T5594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.164'. [ 92.143991][ T5590] tipc: Started in network mode [ 92.151579][ T5590] tipc: Node identity , cluster identity 4711 [ 92.164154][ T5590] tipc: Failed to set node id, please configure manually [ 92.172121][ T5590] tipc: Enabling of bearer rejected, failed to enable media [ 92.241054][ T5604] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 92.637077][ T5619] netlink: 32 bytes leftover after parsing attributes in process `syz.4.176'. [ 92.676059][ T5619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.176'. [ 92.914046][ T5631] netlink: 20 bytes leftover after parsing attributes in process `syz.3.180'. [ 92.957534][ T5627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.181'. [ 92.963499][ T5631] netlink: 20 bytes leftover after parsing attributes in process `syz.3.180'. [ 92.998138][ T5633] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 93.145513][ T5627] tipc: Started in network mode [ 93.150432][ T5627] tipc: Node identity , cluster identity 4711 [ 93.170435][ T5627] tipc: Failed to set node id, please configure manually [ 93.180280][ T5107] Bluetooth: hci4: command 0x0405 tx timeout [ 93.205703][ T5627] tipc: Enabling of bearer rejected, failed to enable media [ 93.407692][ T5651] openvswitch: netlink: Key type 5391 is out of range max 32 [ 93.467463][ T5653] netlink: 32 bytes leftover after parsing attributes in process `syz.2.191'. [ 93.521325][ T5653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.191'. [ 93.780899][ T5661] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 94.426145][ T5681] netlink: 'syz.1.204': attribute type 11 has an invalid length. [ 94.710613][ C0] Illegal XDP return value 16128 on prog (id 54) dev veth1_to_team, expect packet loss! [ 94.966427][ T5709] openvswitch: netlink: Key type 5391 is out of range max 32 [ 96.183278][ T5749] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 96.844517][ T5770] tipc: Started in network mode [ 96.875442][ T5770] tipc: Node identity , cluster identity 4711 [ 96.889217][ T5770] tipc: Failed to set node id, please configure manually [ 96.904423][ T5770] tipc: Enabling of bearer rejected, failed to enable media [ 97.004411][ T5785] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 97.109497][ T5787] netlink: 'syz.1.252': attribute type 5 has an invalid length. [ 97.693878][ T5816] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 98.082084][ T5830] __nla_validate_parse: 7 callbacks suppressed [ 98.082106][ T5830] netlink: 830 bytes leftover after parsing attributes in process `syz.4.272'. [ 98.155379][ T5830] netlink: 'syz.4.272': attribute type 3 has an invalid length. [ 98.223192][ T5830] batadv_slave_1: entered promiscuous mode [ 98.245332][ T5829] batadv_slave_1: left promiscuous mode [ 98.484595][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.654605][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.947901][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.166429][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.360648][ T5107] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.370210][ T5107] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.386947][ T5107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.406510][ T5107] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.422597][ T5107] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 99.423230][ T5867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.289'. [ 99.455158][ T5107] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.566773][ T5867] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.579525][ T35] bridge_slave_1: left allmulticast mode [ 99.592629][ T35] bridge_slave_1: left promiscuous mode [ 99.600974][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.668812][ T35] bridge_slave_0: left allmulticast mode [ 99.674534][ T35] bridge_slave_0: left promiscuous mode [ 99.712717][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.713769][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.738013][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.754280][ T35] bond0 (unregistering): Released all slaves [ 101.023643][ T5896] syz.4.296 (5896) used greatest stack depth: 18544 bytes left [ 101.567901][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'. [ 101.580876][ T5107] Bluetooth: hci1: command tx timeout [ 101.995182][ T35] hsr_slave_0: left promiscuous mode [ 102.021686][ T35] hsr_slave_1: left promiscuous mode [ 102.057225][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.085723][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.110609][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.128188][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.158220][ T35] veth1_macvtap: left promiscuous mode [ 102.164484][ T35] veth0_macvtap: left promiscuous mode [ 102.170649][ T35] veth1_vlan: left promiscuous mode [ 102.179088][ T35] veth0_vlan: left promiscuous mode [ 102.772318][ T35] team0 (unregistering): Port device team_slave_1 removed [ 102.827592][ T35] team0 (unregistering): Port device team_slave_0 removed [ 103.656598][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 103.657176][ T5107] Bluetooth: hci1: command tx timeout [ 104.292136][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.314058][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.337094][ T5865] bridge_slave_0: entered allmulticast mode [ 104.358633][ T5865] bridge_slave_0: entered promiscuous mode [ 104.400823][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.329'. [ 104.563658][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.586397][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.618600][ T5865] bridge_slave_1: entered allmulticast mode [ 104.635216][ T5865] bridge_slave_1: entered promiscuous mode [ 104.713088][ T6030] netlink: 'syz.1.330': attribute type 3 has an invalid length. [ 104.742823][ T6027] netlink: 830 bytes leftover after parsing attributes in process `syz.1.330'. [ 104.852896][ T6027] batadv_slave_1: entered promiscuous mode [ 104.888921][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.926228][ T6026] batadv_slave_1: left promiscuous mode [ 104.969689][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.228219][ T5865] team0: Port device team_slave_0 added [ 105.263916][ T5865] team0: Port device team_slave_1 added [ 105.359781][ T6053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.340'. [ 105.433031][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.481484][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.553008][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.611860][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.627108][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.697203][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.736502][ T5107] Bluetooth: hci1: command tx timeout [ 105.759267][ T6071] ip6tnl1: entered promiscuous mode [ 105.815049][ T6071] ip6tnl1: entered allmulticast mode [ 105.976159][ T5865] hsr_slave_0: entered promiscuous mode [ 106.008443][ T5865] hsr_slave_1: entered promiscuous mode [ 106.020252][ T5865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.063017][ T5865] Cannot create hsr debugfs directory [ 106.168077][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.353'. [ 106.577324][ T6102] netlink: 'syz.1.358': attribute type 1 has an invalid length. [ 106.585438][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'. [ 107.096854][ T6122] ip6tnl1: entered promiscuous mode [ 107.112436][ T6122] ip6tnl1: entered allmulticast mode [ 107.388195][ T6133] trusted_key: syz.3.367 sent an empty control message without MSG_MORE. [ 107.792722][ T6146] netlink: 'syz.0.373': attribute type 1 has an invalid length. [ 107.800587][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.373'. [ 107.820665][ T5107] Bluetooth: hci1: command tx timeout [ 108.120716][ T6156] netlink: 208 bytes leftover after parsing attributes in process `syz.4.377'. [ 108.122526][ T5865] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.170685][ T5865] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.232193][ T5865] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.304731][ T5865] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.344106][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.380'. [ 108.528610][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.380'. [ 108.953112][ T6188] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 109.318556][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.381818][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.417280][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.424524][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.488079][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.495318][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.591875][ T6209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.394'. [ 109.814813][ T6217] netlink: 'syz.3.397': attribute type 4 has an invalid length. [ 109.888577][ T6220] netlink: 76 bytes leftover after parsing attributes in process `syz.1.398'. [ 110.258675][ T6236] netlink: 48 bytes leftover after parsing attributes in process `syz.0.402'. [ 110.400179][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.477161][ T6247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.406'. [ 110.633529][ T5865] veth0_vlan: entered promiscuous mode [ 110.662082][ T5865] veth1_vlan: entered promiscuous mode [ 110.781063][ T5865] veth0_macvtap: entered promiscuous mode [ 110.825517][ T5865] veth1_macvtap: entered promiscuous mode [ 110.841973][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'. [ 110.907698][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.941732][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.973006][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.994478][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.015096][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.048783][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.070160][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.092205][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.142602][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.190853][ T6268] netlink: 'syz.3.413': attribute type 4 has an invalid length. [ 111.259488][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.291234][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.319275][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.340767][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.360227][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.383244][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.397911][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.419814][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.442172][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.519014][ T5865] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.559263][ T5865] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.591719][ T5865] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.622726][ T5865] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.697772][ T6289] netlink: 48 bytes leftover after parsing attributes in process `syz.3.418'. [ 111.897270][ T6295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.420'. [ 111.927334][ T2856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.953307][ T2856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.134735][ T2856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.164965][ T2856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.572600][ T6323] netlink: 48 bytes leftover after parsing attributes in process `syz.1.432'. [ 112.901689][ T6338] netlink: 76 bytes leftover after parsing attributes in process `syz.4.437'. [ 113.252940][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'. [ 113.407081][ T6364] netlink: 'syz.4.446': attribute type 10 has an invalid length. [ 113.918188][ T2856] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.644120][ T2856] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.843204][ T2856] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.874062][ T5103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.884622][ T5103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.895282][ T5103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.904415][ T5103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.917651][ T5103] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 114.928718][ T5103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.111708][ T2856] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.365101][ T6441] __nla_validate_parse: 3 callbacks suppressed [ 115.365123][ T6441] netlink: 52 bytes leftover after parsing attributes in process `syz.4.471'. [ 115.745467][ T2856] bridge_slave_1: left allmulticast mode [ 115.751198][ T2856] bridge_slave_1: left promiscuous mode [ 115.815804][ T2856] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.860061][ T2856] bridge_slave_0: left allmulticast mode [ 115.906125][ T2856] bridge_slave_0: left promiscuous mode [ 115.913656][ T2856] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.936552][ T6463] Bluetooth: MGMT ver 1.22 [ 115.982168][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.481'. [ 116.025625][ T6470] openvswitch: netlink: Flow actions attr not present in new flow. [ 116.531554][ T6485] netlink: 16 bytes leftover after parsing attributes in process `syz.4.487'. [ 116.722332][ T2856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.748403][ T2856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.762557][ T2856] bond0 (unregistering): Released all slaves [ 117.002794][ T6423] chnl_net:caif_netlink_parms(): no params data found [ 117.016276][ T5103] Bluetooth: hci1: command tx timeout [ 117.867434][ T6423] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.895165][ T6423] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.915376][ T6423] bridge_slave_0: entered allmulticast mode [ 117.939147][ T6423] bridge_slave_0: entered promiscuous mode [ 117.996586][ T6423] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.020529][ T6423] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.041339][ T6423] bridge_slave_1: entered allmulticast mode [ 118.063376][ T6423] bridge_slave_1: entered promiscuous mode [ 118.129850][ T2856] hsr_slave_0: left promiscuous mode [ 118.142697][ T2856] hsr_slave_1: left promiscuous mode [ 118.151991][ T2856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.160434][ T2856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.171112][ T2856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.190167][ T2856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.244128][ T2856] veth1_macvtap: left promiscuous mode [ 118.252771][ T2856] veth0_macvtap: left promiscuous mode [ 118.270223][ T2856] veth1_vlan: left promiscuous mode [ 118.276006][ T2856] veth0_vlan: left promiscuous mode [ 118.941806][ T2856] team0 (unregistering): Port device team_slave_1 removed [ 119.004503][ T2856] team0 (unregistering): Port device team_slave_0 removed [ 119.095104][ T5103] Bluetooth: hci1: command tx timeout [ 119.822387][ T6423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.858747][ T6423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.114598][ T6423] team0: Port device team_slave_0 added [ 120.182532][ T6423] team0: Port device team_slave_1 added [ 120.337250][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 120.388002][ T6423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.421893][ T6423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.513247][ T6423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.595021][ T6615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.535'. [ 120.624360][ T6423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.665953][ T6423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.732262][ T6423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.047678][ T6423] hsr_slave_0: entered promiscuous mode [ 121.085849][ T6423] hsr_slave_1: entered promiscuous mode [ 121.115157][ T6423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.129275][ T6423] Cannot create hsr debugfs directory [ 121.144170][ T6645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.547'. [ 121.176047][ T5103] Bluetooth: hci1: command tx timeout [ 122.001685][ T6675] netlink: 24 bytes leftover after parsing attributes in process `syz.1.558'. [ 122.616994][ T6705] netlink: 'syz.0.570': attribute type 58 has an invalid length. [ 122.636581][ T6705] netlink: 40 bytes leftover after parsing attributes in process `syz.0.570'. [ 122.664778][ T6423] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 122.726575][ T6423] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 122.804672][ T6423] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 122.879475][ T6423] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 123.139041][ T6731] netlink: 40 bytes leftover after parsing attributes in process `syz.0.577'. [ 123.255847][ T5103] Bluetooth: hci1: command tx timeout [ 123.422528][ T6423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.547046][ T6423] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.610568][ T5210] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.617850][ T5210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.731590][ T5210] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.738868][ T5210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.845640][ T6752] veth2: entered allmulticast mode [ 124.736379][ T6423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.007590][ T6423] veth0_vlan: entered promiscuous mode [ 125.116630][ T6423] veth1_vlan: entered promiscuous mode [ 125.267263][ T6423] veth0_macvtap: entered promiscuous mode [ 125.321077][ T6423] veth1_macvtap: entered promiscuous mode [ 125.410727][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.427353][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.439178][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.460661][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.473414][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.488171][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.498746][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.514718][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.533800][ T6423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.585467][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.623991][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.645060][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.663608][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.681550][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.692352][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.709535][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.739724][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.767595][ T6423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.848293][ T6423] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.868591][ T6423] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.882321][ T6423] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.892934][ T6423] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.090215][ T746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.108303][ T746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.193974][ T6854] bond0: (slave vlan2): Error -34 calling dev_set_mtu [ 126.264537][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.309431][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.111255][ T6890] bond0: (slave vlan2): Error -34 calling dev_set_mtu [ 127.275787][ T6897] netlink: 'syz.0.637': attribute type 1 has an invalid length. [ 127.787000][ T6922] netlink: 'syz.3.650': attribute type 1 has an invalid length. [ 128.054217][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.628630][ T6951] netlink: 'syz.4.662': attribute type 1 has an invalid length. [ 128.840175][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.963002][ T5107] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 128.975818][ T5107] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 128.996309][ T5107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 129.008191][ T5107] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 129.026161][ T5107] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 129.033849][ T5107] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.118223][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.314378][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.455975][ T6984] netlink: 'syz.0.676': attribute type 1 has an invalid length. [ 129.718968][ T51] bridge_slave_1: left allmulticast mode [ 129.738434][ T51] bridge_slave_1: left promiscuous mode [ 129.764440][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.785424][ T51] bridge_slave_0: left allmulticast mode [ 129.791246][ T51] bridge_slave_0: left promiscuous mode [ 129.798243][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.160968][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.173612][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.185891][ T51] bond0 (unregistering): Released all slaves [ 130.422304][ T6962] chnl_net:caif_netlink_parms(): no params data found [ 130.796086][ T51] hsr_slave_0: left promiscuous mode [ 130.809629][ T51] hsr_slave_1: left promiscuous mode [ 131.095039][ T5103] Bluetooth: hci1: command tx timeout [ 131.489428][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.500536][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.524575][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.537444][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.551849][ T7049] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.693'. [ 131.571629][ T7049] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 131.631335][ T51] veth1_macvtap: left promiscuous mode [ 131.643172][ T51] veth0_macvtap: left promiscuous mode [ 131.652087][ T51] veth1_vlan: left promiscuous mode [ 131.658188][ T51] veth0_vlan: left promiscuous mode [ 132.273157][ T51] team0 (unregistering): Port device team_slave_1 removed [ 132.328953][ T51] team0 (unregistering): Port device team_slave_0 removed [ 132.875812][ T6962] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.883035][ T6962] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.903766][ T6962] bridge_slave_0: entered allmulticast mode [ 132.914531][ T6962] bridge_slave_0: entered promiscuous mode [ 132.952075][ T6962] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.968911][ T6962] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.995104][ T6962] bridge_slave_1: entered allmulticast mode [ 133.002747][ T6962] bridge_slave_1: entered promiscuous mode [ 133.175219][ T5103] Bluetooth: hci1: command tx timeout [ 133.211759][ T6962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.230460][ T6962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.272965][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.279559][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.037512][ T7114] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.711'. [ 134.067164][ T7114] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 134.207419][ T6962] team0: Port device team_slave_0 added [ 134.258370][ T6962] team0: Port device team_slave_1 added [ 134.555679][ T6962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.562694][ T6962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.660181][ T6962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.679031][ T6962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.687597][ T6962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.743193][ T6962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.050679][ T6962] hsr_slave_0: entered promiscuous mode [ 135.082502][ T6962] hsr_slave_1: entered promiscuous mode [ 135.140336][ T6962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.171722][ T6962] Cannot create hsr debugfs directory [ 135.174542][ T7154] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 135.254944][ T5103] Bluetooth: hci1: command tx timeout [ 135.886942][ T7186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.735'. [ 136.521923][ T7208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.563337][ T7213] warning: `syz.4.746' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 136.732339][ T7214] netlink: 5056 bytes leftover after parsing attributes in process `syz.0.745'. [ 136.776047][ T7214] netlink: 32 bytes leftover after parsing attributes in process `syz.0.745'. [ 136.860528][ T7214] netlink: 5056 bytes leftover after parsing attributes in process `syz.0.745'. [ 136.959717][ T6962] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 137.007684][ T6962] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 137.057606][ T6962] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 137.119864][ T6962] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 137.335093][ T5103] Bluetooth: hci1: command tx timeout [ 137.676202][ T6962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.765932][ T6962] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.798051][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.805294][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.880372][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.887725][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.266267][ T7278] netlink: 160 bytes leftover after parsing attributes in process `syz.4.764'. [ 138.402467][ T7281] netlink: 104 bytes leftover after parsing attributes in process `syz.3.766'. [ 138.517917][ T7289] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 138.596658][ T7289] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 138.641596][ T6962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.868871][ T6962] veth0_vlan: entered promiscuous mode [ 138.954482][ T6962] veth1_vlan: entered promiscuous mode [ 139.152007][ T6962] veth0_macvtap: entered promiscuous mode [ 139.213750][ T7320] dccp_invalid_packet: P.Data Offset(0) too small [ 139.224005][ T6962] veth1_macvtap: entered promiscuous mode [ 139.334511][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.394918][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.425756][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.460527][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.492313][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.504094][ T5103] Bluetooth: hci1: command tx timeout [ 139.524699][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.534666][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.545379][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.562856][ T6962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.597341][ T7327] netlink: 160 bytes leftover after parsing attributes in process `syz.1.777'. [ 139.635558][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.677595][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.725449][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.774958][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.790997][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.804149][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.834650][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.850709][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.868081][ T6962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.980240][ T6962] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.993327][ T6962] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.035020][ T6962] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.043808][ T6962] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.130609][ T7355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.788'. [ 140.429712][ T7355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.474297][ T746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.501478][ T746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.608886][ T7371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.657699][ T746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.688938][ T746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.392349][ T7408] dccp_invalid_packet: P.Data Offset(0) too small [ 141.943495][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.815'. [ 142.025636][ T7438] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.034926][ T7438] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.043732][ T7438] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.052542][ T7438] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.072374][ T7442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.817'. [ 142.119767][ T7438] vxlan0: entered promiscuous mode [ 142.271691][ T7446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.339942][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.377091][ T7446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.409754][ T7442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.961623][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.193634][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.193800][ T4547] udevd[4547]: worker [5879] terminated by signal 33 (Unknown signal 33) [ 143.223045][ T7478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.255189][ T4547] udevd[4547]: worker [5879] failed while handling '/devices/virtual/block/loop0' [ 143.358076][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.419061][ T5107] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 143.429628][ T5107] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 143.443554][ T5107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 143.453068][ T5107] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 143.471418][ T5107] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 143.482358][ T5107] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 143.810893][ T11] bridge_slave_1: left allmulticast mode [ 143.831865][ T11] bridge_slave_1: left promiscuous mode [ 143.850031][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.933190][ T11] bridge_slave_0: left allmulticast mode [ 143.949420][ T11] bridge_slave_0: left promiscuous mode [ 143.956763][ T7499] netlink: 16 bytes leftover after parsing attributes in process `syz.3.832'. [ 143.970313][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.159220][ T7505] netlink: 180 bytes leftover after parsing attributes in process `syz.0.833'. [ 144.187680][ T7505] netlink: 'syz.0.833': attribute type 1 has an invalid length. [ 144.216384][ T7506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.322393][ T7506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.367365][ T7506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.877932][ T7518] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 144.968301][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.980341][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.991896][ T11] bond0 (unregistering): Released all slaves [ 145.017196][ T7498] netlink: 'syz.4.831': attribute type 63 has an invalid length. [ 145.286528][ T7529] netlink: 1180 bytes leftover after parsing attributes in process `syz.0.843'. [ 145.576275][ T5103] Bluetooth: hci1: command tx timeout [ 145.800696][ T11] hsr_slave_0: left promiscuous mode [ 145.830516][ T11] hsr_slave_1: left promiscuous mode [ 145.844351][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.866031][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.886500][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.893982][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.988940][ T11] veth1_macvtap: left promiscuous mode [ 145.994563][ T11] veth0_macvtap: left promiscuous mode [ 146.015116][ T11] veth1_vlan: left promiscuous mode [ 146.021156][ T11] veth0_vlan: left promiscuous mode [ 146.105109][ T7561] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 147.222866][ T11] team0 (unregistering): Port device team_slave_1 removed [ 147.270034][ T11] team0 (unregistering): Port device team_slave_0 removed [ 147.659647][ T5103] Bluetooth: hci1: command tx timeout [ 147.794506][ T7481] chnl_net:caif_netlink_parms(): no params data found [ 147.866099][ T7598] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 147.876451][ T7598] SET target dimension over the limit! [ 148.364565][ T7481] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.393346][ T7481] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.442517][ T7481] bridge_slave_0: entered allmulticast mode [ 148.476846][ T7481] bridge_slave_0: entered promiscuous mode [ 148.509670][ T7481] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.539307][ T7481] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.570775][ T7481] bridge_slave_1: entered allmulticast mode [ 148.604521][ T7481] bridge_slave_1: entered promiscuous mode [ 148.865961][ T7481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.930402][ T7481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.045672][ T7636] netlink: 5 bytes leftover after parsing attributes in process `syz.1.878'. [ 149.080863][ T7636] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 149.146475][ T7636] 0ªX¹¦Dö»: entered allmulticast mode [ 149.202107][ T7645] netlink: 209840 bytes leftover after parsing attributes in process `syz.4.881'. [ 149.256331][ T7481] team0: Port device team_slave_0 added [ 149.289893][ T7481] team0: Port device team_slave_1 added [ 149.549107][ T7481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.575880][ T7661] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 149.576687][ T7661] SET target dimension over the limit! [ 149.579787][ T7481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.649673][ T7481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.715045][ T7481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.722842][ T7481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.758793][ T5103] Bluetooth: hci1: command tx timeout [ 149.876005][ T7481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.219559][ T7481] hsr_slave_0: entered promiscuous mode [ 150.295719][ T7481] hsr_slave_1: entered promiscuous mode [ 150.344988][ T7481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.359741][ T7481] Cannot create hsr debugfs directory [ 150.762769][ T7681] syzkaller0: entered promiscuous mode [ 150.784980][ T7681] syzkaller0: entered allmulticast mode [ 150.828553][ T7694] netlink: 28 bytes leftover after parsing attributes in process `syz.1.900'. [ 150.852629][ T7694] netlink: 28 bytes leftover after parsing attributes in process `syz.1.900'. [ 150.863565][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 151.815919][ T5103] Bluetooth: hci1: command tx timeout [ 152.655013][ T7701] ipvlan2: entered promiscuous mode [ 152.661139][ T7701] ipvlan2: entered allmulticast mode [ 152.667426][ T7701] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 153.215435][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.916'. [ 153.224370][ T7747] xt_TCPMSS: Only works on TCP SYN packets [ 153.224586][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.916'. [ 153.347088][ T7745] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 153.699294][ T7763] netlink: 132 bytes leftover after parsing attributes in process `syz.3.923'. [ 153.883063][ T7775] xt_TCPMSS: Only works on TCP SYN packets [ 154.053515][ T7780] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 154.464095][ T7481] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 154.510855][ T7481] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 154.519014][ T7801] netlink: 'syz.3.940': attribute type 1 has an invalid length. [ 154.558834][ T7481] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 154.568973][ T7801] netlink: 9352 bytes leftover after parsing attributes in process `syz.3.940'. [ 154.615714][ T7481] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 154.644898][ T7801] netlink: 'syz.3.940': attribute type 1 has an invalid length. [ 154.652611][ T7801] netlink: 'syz.3.940': attribute type 2 has an invalid length. [ 154.691413][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.940'. [ 154.776304][ T7809] netlink: 16 bytes leftover after parsing attributes in process `syz.4.943'. [ 155.127510][ T7481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.242352][ T7481] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.262626][ T7833] netlink: 'syz.1.950': attribute type 142 has an invalid length. [ 155.289486][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.296787][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.347169][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.354355][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.106706][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.960'. [ 156.179497][ T7481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.217292][ T7874] netlink: 'syz.3.962': attribute type 142 has an invalid length. [ 156.235075][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.960'. [ 156.252398][ T7867] 8021q: adding VLAN 0 to HW filter on device team1 [ 156.515819][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.965'. [ 156.530486][ T7481] veth0_vlan: entered promiscuous mode [ 156.548854][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.965'. [ 156.574179][ T7481] veth1_vlan: entered promiscuous mode [ 156.696773][ T7481] veth0_macvtap: entered promiscuous mode [ 156.729192][ T7481] veth1_macvtap: entered promiscuous mode [ 156.872097][ T7481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.903327][ T7481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.931860][ T7481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.974870][ T7481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.006108][ T7481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.034997][ T7481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.048463][ T7481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.073073][ T7481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.089482][ T7481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.163722][ T7481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.200847][ T7481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.223401][ T7481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.235946][ T7481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.248311][ T7481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.261310][ T7481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.293274][ T7481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.307686][ T7910] netlink: 'syz.4.973': attribute type 142 has an invalid length. [ 157.321794][ T7481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.358067][ T7481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.380376][ T7481] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.391521][ T7481] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.401226][ T7481] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.410488][ T7481] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.434053][ T7915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.974'. [ 157.653497][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.974'. [ 157.694041][ T7919] 8021q: adding VLAN 0 to HW filter on device team1 [ 157.866945][ T7934] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.968021][ T7934] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.976268][ T7934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.079839][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.114499][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.252636][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.252649][ T7952] netlink: 'syz.0.987': attribute type 1 has an invalid length. [ 158.252674][ T7952] netlink: 9384 bytes leftover after parsing attributes in process `syz.0.987'. [ 158.275419][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.040350][ T7985] netlink: 'syz.4.1000': attribute type 1 has an invalid length. [ 159.790129][ T8026] __nla_validate_parse: 2 callbacks suppressed [ 159.790151][ T8026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1016'. [ 160.255206][ T8047] netlink: 'syz.4.1024': attribute type 6 has an invalid length. [ 160.375259][ T8052] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1025'. [ 160.412110][ T8052] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1025'. [ 160.690472][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.717834][ T8062] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1029'. [ 160.880986][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.977708][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.032850][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.133183][ T12] bridge_slave_1: left allmulticast mode [ 161.139951][ T12] bridge_slave_1: left promiscuous mode [ 161.146113][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.156200][ T12] bridge_slave_0: left allmulticast mode [ 161.161879][ T12] bridge_slave_0: left promiscuous mode [ 161.172785][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.744933][ T8083] netlink: 'syz.3.1036': attribute type 6 has an invalid length. [ 161.806827][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.849054][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.871356][ T12] bond0 (unregistering): Released all slaves [ 162.002961][ T5107] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 162.015336][ T5107] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 162.024175][ T5107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 162.033795][ T5107] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 162.046232][ T5107] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 162.055573][ T5107] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 162.724584][ T8124] netlink: 'syz.0.1049': attribute type 6 has an invalid length. [ 162.868104][ T12] hsr_slave_0: left promiscuous mode [ 162.893051][ T12] hsr_slave_1: left promiscuous mode [ 162.925879][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.945052][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.996806][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.010744][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.112444][ T12] veth1_macvtap: left promiscuous mode [ 163.141323][ T12] veth0_macvtap: left promiscuous mode [ 163.163534][ T12] veth1_vlan: left promiscuous mode [ 163.187059][ T12] veth0_vlan: left promiscuous mode [ 163.372742][ T8149] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1054'. [ 163.520118][ T8157] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1057'. [ 164.119746][ T12] team0 (unregistering): Port device team_slave_1 removed [ 164.135073][ T5103] Bluetooth: hci1: command tx timeout [ 164.191087][ T12] team0 (unregistering): Port device team_slave_0 removed [ 164.881006][ T8182] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1067'. [ 165.052362][ T8188] tipc: Enabling of bearer rejected, failed to enable media [ 165.108525][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1071'. [ 165.262319][ T8092] chnl_net:caif_netlink_parms(): no params data found [ 165.947542][ T8237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1082'. [ 165.975470][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1082'. [ 166.079419][ T8092] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.096154][ T8092] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.120011][ T8092] bridge_slave_0: entered allmulticast mode [ 166.137732][ T8092] bridge_slave_0: entered promiscuous mode [ 166.157101][ T8243] netem: change failed [ 166.194583][ T8092] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.215152][ T5103] Bluetooth: hci1: command tx timeout [ 166.224243][ T8092] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.269614][ T8092] bridge_slave_1: entered allmulticast mode [ 166.306566][ T8092] bridge_slave_1: entered promiscuous mode [ 166.326587][ T8244] tipc: Started in network mode [ 166.331694][ T8244] tipc: Node identity 52f8413bfede, cluster identity 4711 [ 166.356601][ T8244] tipc: Enabled bearer , priority 0 [ 166.473801][ T8247] tipc: Resetting bearer [ 166.682228][ T8239] tipc: Resetting bearer [ 166.923909][ T8279] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 167.393092][ T5210] tipc: Node number set to 2888188219 [ 168.305097][ T5103] Bluetooth: hci1: command tx timeout [ 168.324434][ T8239] tipc: Disabling bearer [ 168.338477][ T8092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.352247][ T8092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.364171][ T8281] netem: change failed [ 168.593688][ T8092] team0: Port device team_slave_0 added [ 168.601340][ T8297] raw_sendmsg: syz.0.1106 forgot to set AF_INET. Fix it! [ 168.643497][ T8092] team0: Port device team_slave_1 added [ 168.818362][ T8092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.825763][ T8092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.856129][ T8092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.927079][ T8092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.952519][ T8092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.037220][ T8092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.303050][ T8092] hsr_slave_0: entered promiscuous mode [ 169.330784][ T8092] hsr_slave_1: entered promiscuous mode [ 169.362968][ T8092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.397158][ T8092] Cannot create hsr debugfs directory [ 169.403522][ T8331] tipc: Started in network mode [ 169.443077][ T8331] tipc: Node identity eafa4f093fb3, cluster identity 4711 [ 169.470630][ T8331] tipc: Enabled bearer , priority 0 [ 169.521444][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1120'. [ 169.539238][ T8332] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1117'. [ 169.814003][ T8323] tipc: Resetting bearer [ 169.922406][ T8322] tipc: Resetting bearer [ 170.380001][ T5103] Bluetooth: hci1: command tx timeout [ 170.495032][ T45] tipc: Node number set to 3578351369 [ 171.713653][ T8322] tipc: Disabling bearer [ 171.729853][ T8350] netlink: 'syz.3.1122': attribute type 40 has an invalid length. [ 171.832022][ T8371] tun0: tun_chr_ioctl cmd 2147767520 [ 171.889517][ T8373] netem: change failed [ 172.031157][ T8385] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1133'. [ 172.055588][ T8385] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1133'. [ 172.305391][ T8396] netlink: 'syz.1.1139': attribute type 4 has an invalid length. [ 172.351627][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1141'. [ 172.518181][ T8396] netlink: 'syz.1.1139': attribute type 4 has an invalid length. [ 172.823418][ T8424] netlink: 210616 bytes leftover after parsing attributes in process `syz.4.1149'. [ 173.652128][ T8426] tun0: tun_chr_ioctl cmd 2147767520 [ 173.923139][ T8449] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1158'. [ 174.351715][ T8092] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 174.365588][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1161'. [ 174.394657][ T8467] team_slave_0: entered promiscuous mode [ 174.400996][ T8467] team_slave_1: entered promiscuous mode [ 174.412302][ T8467] macvtap1: entered promiscuous mode [ 174.419212][ T8467] team0: entered promiscuous mode [ 174.445108][ T8467] macvtap1: entered allmulticast mode [ 174.454980][ T8467] team0: entered allmulticast mode [ 174.485337][ T8467] team_slave_0: entered allmulticast mode [ 174.503010][ T8467] team_slave_1: entered allmulticast mode [ 174.512519][ T8467] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 174.536157][ T8092] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 174.598520][ T8092] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 174.633541][ T8092] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 174.862592][ T8483] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1171'. [ 175.010084][ T8092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.116086][ T8092] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.144264][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.151571][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.172576][ T8495] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 175.212528][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.219783][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.296869][ T8500] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1175'. [ 175.441652][ T8092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.971234][ T8532] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1184'. [ 176.260398][ T8092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.402375][ T8543] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 176.508622][ T8092] veth0_vlan: entered promiscuous mode [ 176.573438][ T8092] veth1_vlan: entered promiscuous mode [ 176.722988][ T8092] veth0_macvtap: entered promiscuous mode [ 176.818651][ T8092] veth1_macvtap: entered promiscuous mode [ 177.006097][ T5107] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.036118][ T5107] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.055858][ T5107] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.063523][ T8561] netlink: 'syz.0.1193': attribute type 1 has an invalid length. [ 177.083062][ T5107] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.092908][ T5107] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 177.101260][ T5107] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.121406][ T8561] netlink: 'syz.0.1193': attribute type 3 has an invalid length. [ 177.158155][ T8561] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1193'. [ 177.170551][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.191431][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.203501][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.232379][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.256732][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.278356][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.291309][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.309277][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.354240][ T8092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.377086][ T8567] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1195'. [ 177.458019][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.495244][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.530030][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.548723][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.568105][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.587983][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.611324][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.637772][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.652251][ T8586] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1198'. [ 177.660436][ T8092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.803864][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.863787][ T8586] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1198'. [ 177.942336][ T8592] macvlan0: entered promiscuous mode [ 177.950005][ T8597] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 177.966206][ T8592] ipvlan0: entered promiscuous mode [ 177.986732][ T8592] ipvlan0: left promiscuous mode [ 178.001612][ T8592] macvlan0: left promiscuous mode [ 178.107761][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.280519][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.312667][ T8092] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.329917][ T8092] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.350873][ T8092] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.369951][ T8092] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.422662][ T8614] netlink: 'syz.1.1205': attribute type 1 has an invalid length. [ 178.447553][ T8610] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1202'. [ 178.462653][ T8614] netlink: 'syz.1.1205': attribute type 3 has an invalid length. [ 178.500727][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.538597][ T8614] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1205'. [ 179.082248][ T8635] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 179.175310][ T5107] Bluetooth: hci3: command tx timeout [ 179.288024][ T11] bridge_slave_1: left allmulticast mode [ 179.304165][ T11] bridge_slave_1: left promiscuous mode [ 179.323821][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.365958][ T11] bridge_slave_0: left allmulticast mode [ 179.371676][ T11] bridge_slave_0: left promiscuous mode [ 179.414269][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.496977][ T8656] netlink: 'syz.0.1217': attribute type 1 has an invalid length. [ 179.519334][ T8656] netlink: 'syz.0.1217': attribute type 3 has an invalid length. [ 179.542855][ T8656] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1217'. [ 180.122348][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.139431][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.164197][ T11] bond0 (unregistering): Released all slaves [ 180.235130][ T8654] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 180.414311][ T11] tipc: Left network mode [ 180.422177][ T746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.456092][ T8684] netlink: 'syz.0.1221': attribute type 32 has an invalid length. [ 180.464692][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1221'. [ 180.474077][ T8684] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 180.483527][ T746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.788672][ T8692] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.806047][ T8692] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.813338][ T8692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.852505][ T8699] sit0: entered promiscuous mode [ 180.872221][ T8699] sit0: entered allmulticast mode [ 180.939851][ T8558] chnl_net:caif_netlink_parms(): no params data found [ 180.948901][ T8706] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1227'. [ 181.117329][ T8706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1227'. [ 181.128418][ T1055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.165140][ T1055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.218582][ T8701] macvlan0: entered promiscuous mode [ 181.255051][ T5107] Bluetooth: hci3: command tx timeout [ 181.262120][ T8701] ipvlan0: entered promiscuous mode [ 181.294577][ T8701] ipvlan0: left promiscuous mode [ 181.300228][ T8701] macvlan0: left promiscuous mode [ 181.542116][ T11] hsr_slave_0: left promiscuous mode [ 181.596952][ T11] hsr_slave_1: left promiscuous mode [ 181.622871][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.658833][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.677119][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.694190][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.783079][ T11] team0: left allmulticast mode [ 181.792014][ T11] team_slave_0: left allmulticast mode [ 181.805491][ T11] team_slave_1: left allmulticast mode [ 181.821459][ T11] team0: left promiscuous mode [ 181.828695][ T11] team_slave_0: left promiscuous mode [ 181.834470][ T11] team_slave_1: left promiscuous mode [ 181.840410][ T11] veth1_macvtap: left promiscuous mode [ 181.846166][ T11] veth0_macvtap: left promiscuous mode [ 181.851816][ T11] veth1_vlan: left promiscuous mode [ 181.859779][ T11] veth0_vlan: left promiscuous mode [ 182.562536][ T11] team0 (unregistering): Port device team_slave_1 removed [ 182.612781][ T11] team0 (unregistering): Port device team_slave_0 removed [ 183.191517][ T8750] tipc: Enabled bearer , priority 0 [ 183.206089][ T8558] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.232157][ T8558] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.245966][ T8558] bridge_slave_0: entered allmulticast mode [ 183.253866][ T8558] bridge_slave_0: entered promiscuous mode [ 183.275140][ T8750] tipc: Enabled bearer , priority 0 [ 183.322208][ T8558] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.334980][ T5107] Bluetooth: hci3: command tx timeout [ 183.365327][ T8558] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.372631][ T8558] bridge_slave_1: entered allmulticast mode [ 183.416807][ T8558] bridge_slave_1: entered promiscuous mode [ 183.575629][ T8758] netlink: 1304 bytes leftover after parsing attributes in process `syz.4.1243'. [ 183.609400][ T8558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.644013][ T8558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.711984][ T8558] team0: Port device team_slave_0 added [ 183.729835][ T8558] team0: Port device team_slave_1 added [ 183.796009][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.819971][ T8558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.827485][ T8558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.860701][ T8558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.900041][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.916446][ T8558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.923898][ T8558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.950544][ T8558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.060460][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.082831][ T8558] hsr_slave_0: entered promiscuous mode [ 184.091317][ T8558] hsr_slave_1: entered promiscuous mode [ 184.113454][ T8558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.124173][ T8558] Cannot create hsr debugfs directory [ 184.153617][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.382665][ T8779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1247'. [ 184.749249][ T8789] sit0: entered promiscuous mode [ 184.793739][ T8789] sit0: entered allmulticast mode [ 184.840107][ T5103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 184.850805][ T5103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 184.859758][ T5103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 184.881104][ T5103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 184.890997][ T5103] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 184.901163][ T5103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 184.930392][ T11] bridge_slave_1: left allmulticast mode [ 184.955106][ T11] bridge_slave_1: left promiscuous mode [ 184.993691][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.035902][ T11] bridge_slave_0: left allmulticast mode [ 185.054013][ T11] bridge_slave_0: left promiscuous mode [ 185.062920][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.424978][ T5107] Bluetooth: hci3: command tx timeout [ 185.907885][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.919829][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.931956][ T11] bond0 (unregistering): Released all slaves [ 185.962945][ T8812] tipc: Started in network mode [ 185.967999][ T8812] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 185.975798][ T8812] tipc: Enabled bearer , priority 0 [ 186.015657][ T8816] tipc: Enabling of bearer rejected, failed to enable media [ 186.601902][ T11] hsr_slave_0: left promiscuous mode [ 186.622924][ T11] hsr_slave_1: left promiscuous mode [ 186.652685][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.655094][ T45] ================================================================== [ 186.661204][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.668179][ T45] BUG: KASAN: slab-use-after-free in nf_tables_trans_destroy_work+0x152b/0x1750 [ 186.668224][ T45] Read of size 2 at addr ffff88802de2d1c4 by task kworker/1:1/45 [ 186.668243][ T45] [ 186.694545][ T45] CPU: 1 PID: 45 Comm: kworker/1:1 Not tainted 6.10.0-rc5-syzkaller-01209-gaa77b1128016 #0 [ 186.704726][ T45] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 186.714916][ T45] Workqueue: events nf_tables_trans_destroy_work [ 186.721311][ T45] Call Trace: [ 186.724615][ T45] [ 186.727666][ T45] dump_stack_lvl+0x241/0x360 [ 186.732386][ T45] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.737623][ T45] ? __pfx__printk+0x10/0x10 [ 186.742251][ T45] ? _printk+0xd5/0x120 [ 186.746439][ T45] ? __virt_addr_valid+0x183/0x520 [ 186.751590][ T45] ? __virt_addr_valid+0x183/0x520 [ 186.756751][ T45] print_report+0x169/0x550 [ 186.761323][ T45] ? __virt_addr_valid+0x183/0x520 [ 186.766486][ T45] ? __virt_addr_valid+0x183/0x520 [ 186.771731][ T45] ? __virt_addr_valid+0x44e/0x520 [ 186.776892][ T45] ? __phys_addr+0xba/0x170 [ 186.781449][ T45] ? nf_tables_trans_destroy_work+0x152b/0x1750 [ 186.787738][ T45] kasan_report+0x143/0x180 [ 186.792293][ T45] ? nf_tables_trans_destroy_work+0x152b/0x1750 [ 186.798578][ T45] nf_tables_trans_destroy_work+0x152b/0x1750 [ 186.804695][ T45] ? __pfx_nf_tables_trans_destroy_work+0x10/0x10 [ 186.811155][ T45] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 186.817175][ T45] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 186.823547][ T45] ? process_scheduled_works+0x945/0x1830 [ 186.829305][ T45] process_scheduled_works+0xa2c/0x1830 [ 186.834916][ T45] ? __pfx_process_scheduled_works+0x10/0x10 [ 186.840944][ T45] ? assign_work+0x364/0x3d0 [ 186.845577][ T45] worker_thread+0x86d/0xd50 [ 186.850209][ T45] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 186.856148][ T45] ? __kthread_parkme+0x169/0x1d0 [ 186.861209][ T45] ? __pfx_worker_thread+0x10/0x10 [ 186.866355][ T45] kthread+0x2f0/0x390 [ 186.870465][ T45] ? __pfx_worker_thread+0x10/0x10 [ 186.875613][ T45] ? __pfx_kthread+0x10/0x10 [ 186.880244][ T45] ret_from_fork+0x4b/0x80 [ 186.884701][ T45] ? __pfx_kthread+0x10/0x10 [ 186.889327][ T45] ret_from_fork_asm+0x1a/0x30 [ 186.894141][ T45] [ 186.897179][ T45] [ 186.899524][ T45] Allocated by task 8844: [ 186.903874][ T45] kasan_save_track+0x3f/0x80 [ 186.908592][ T45] __kasan_kmalloc+0x98/0xb0 [ 186.913215][ T45] kmalloc_trace_noprof+0x19c/0x2c0 [ 186.918444][ T45] nf_tables_newtable+0x52e/0x1dc0 [ 186.923584][ T45] nfnetlink_rcv+0x1427/0x2a90 [ 186.928385][ T45] netlink_unicast+0x7f0/0x990 [ 186.933178][ T45] netlink_sendmsg+0x8e4/0xcb0 [ 186.937982][ T45] __sock_sendmsg+0x221/0x270 [ 186.942692][ T45] ____sys_sendmsg+0x525/0x7d0 [ 186.947497][ T45] __sys_sendmsg+0x2b0/0x3a0 [ 186.952128][ T45] do_syscall_64+0xf3/0x230 [ 186.956663][ T45] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.962588][ T45] [ 186.964941][ T45] Freed by task 8843: [ 186.969118][ T45] kasan_save_track+0x3f/0x80 [ 186.973834][ T45] kasan_save_free_info+0x40/0x50 [ 186.978902][ T45] poison_slab_object+0xe0/0x150 [ 186.983884][ T45] __kasan_slab_free+0x37/0x60 [ 186.988706][ T45] kfree+0x149/0x360 [ 186.992649][ T45] __nft_release_table+0xe80/0xf40 [ 186.997796][ T45] nft_rcv_nl_event+0x55f/0x6d0 [ 187.002708][ T45] notifier_call_chain+0x19f/0x3e0 [ 187.006884][ T5179] tipc: Node number set to 10136234 [ 187.007832][ T45] blocking_notifier_call_chain+0x69/0x90 [ 187.018774][ T45] netlink_release+0x11a6/0x1b10 [ 187.023745][ T45] sock_close+0xbc/0x240 [ 187.028019][ T45] __fput+0x406/0x8b0 [ 187.032029][ T45] task_work_run+0x24f/0x310 [ 187.036656][ T45] syscall_exit_to_user_mode+0x168/0x370 [ 187.042324][ T45] do_syscall_64+0x100/0x230 [ 187.046945][ T45] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.052914][ T45] [ 187.055261][ T45] Last potentially related work creation: [ 187.060992][ T45] kasan_save_stack+0x3f/0x60 [ 187.065701][ T45] __kasan_record_aux_stack+0xac/0xc0 [ 187.071103][ T45] insert_work+0x3e/0x330 [ 187.075463][ T45] __queue_work+0xc16/0xee0 [ 187.080005][ T45] queue_work_on+0x1c2/0x380 [ 187.084635][ T45] rhltable_remove+0x1097/0x1160 [ 187.089623][ T45] __nft_release_table+0xc57/0xf40 [ 187.094770][ T45] nft_rcv_nl_event+0x55f/0x6d0 [ 187.099673][ T45] notifier_call_chain+0x19f/0x3e0 [ 187.104821][ T45] blocking_notifier_call_chain+0x69/0x90 [ 187.110575][ T45] netlink_release+0x11a6/0x1b10 [ 187.115547][ T45] sock_close+0xbc/0x240 [ 187.119822][ T45] __fput+0x406/0x8b0 [ 187.123833][ T45] task_work_run+0x24f/0x310 [ 187.128496][ T45] syscall_exit_to_user_mode+0x168/0x370 [ 187.134199][ T45] do_syscall_64+0x100/0x230 [ 187.138832][ T45] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.144768][ T45] [ 187.147141][ T45] The buggy address belongs to the object at ffff88802de2d000 [ 187.147141][ T45] which belongs to the cache kmalloc-cg-512 of size 512 [ 187.161499][ T45] The buggy address is located 452 bytes inside of [ 187.161499][ T45] freed 512-byte region [ffff88802de2d000, ffff88802de2d200) [ 187.175333][ T45] [ 187.177694][ T45] The buggy address belongs to the physical page: [ 187.184142][ T45] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802de2f000 pfn:0x2de2c [ 187.194228][ T45] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 187.202736][ T45] memcg:ffff88801b6c3701 [ 187.206974][ T45] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 187.214531][ T45] page_type: 0xffffefff(slab) [ 187.219234][ T45] raw: 00fff00000000040 ffff88801504f140 dead000000000100 dead000000000122 [ 187.227821][ T45] raw: ffff88802de2f000 000000008010000d 00000001ffffefff ffff88801b6c3701 [ 187.236412][ T45] head: 00fff00000000040 ffff88801504f140 dead000000000100 dead000000000122 [ 187.245087][ T45] head: ffff88802de2f000 000000008010000d 00000001ffffefff ffff88801b6c3701 [ 187.253787][ T45] head: 00fff00000000002 ffffea0000b78b01 ffffffffffffffff 0000000000000000 [ 187.262558][ T45] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 187.271224][ T45] page dumped because: kasan: bad access detected [ 187.277652][ T45] page_owner tracks the page as allocated [ 187.283381][ T45] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4760, tgid 4760 (dhcpcd), ts 50600585863, free_ts 42805458157 [ 187.304251][ T45] post_alloc_hook+0x1f3/0x230 [ 187.309041][ T45] get_page_from_freelist+0x2e4c/0x2f10 [ 187.314603][ T45] __alloc_pages_noprof+0x256/0x6c0 [ 187.319819][ T45] alloc_slab_page+0x5f/0x120 [ 187.324500][ T45] allocate_slab+0x5a/0x2f0 [ 187.329007][ T45] ___slab_alloc+0xcd1/0x14b0 [ 187.333686][ T45] __slab_alloc+0x58/0xa0 [ 187.338024][ T45] kmalloc_node_track_caller_noprof+0x281/0x440 [ 187.344268][ T45] kmalloc_reserve+0x111/0x2a0 [ 187.349038][ T45] __alloc_skb+0x1f3/0x440 [ 187.353459][ T45] alloc_skb_with_frags+0xc3/0x770 [ 187.358578][ T45] sock_alloc_send_pskb+0x91a/0xa60 [ 187.363787][ T45] unix_dgram_sendmsg+0x6d3/0x1f80 [ 187.368924][ T45] __sock_sendmsg+0x221/0x270 [ 187.373629][ T45] sock_write_iter+0x2dd/0x400 [ 187.378410][ T45] vfs_write+0xa72/0xc90 [ 187.382680][ T45] page last free pid 4559 tgid 4559 stack trace: [ 187.389006][ T45] free_unref_page+0xd22/0xea0 [ 187.393956][ T45] __slab_free+0x31b/0x3d0 [ 187.398379][ T45] qlist_free_all+0x9e/0x140 [ 187.402972][ T45] kasan_quarantine_reduce+0x14f/0x170 [ 187.408436][ T45] __kasan_slab_alloc+0x23/0x80 [ 187.413294][ T45] kmem_cache_alloc_noprof+0x135/0x2a0 [ 187.418763][ T45] getname_flags+0xbd/0x4f0 [ 187.423286][ T45] do_sys_openat2+0xd2/0x1d0 [ 187.427879][ T45] __x64_sys_openat+0x247/0x2a0 [ 187.432729][ T45] do_syscall_64+0xf3/0x230 [ 187.437235][ T45] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.443133][ T45] [ 187.445457][ T45] Memory state around the buggy address: [ 187.451086][ T45] ffff88802de2d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.459157][ T45] ffff88802de2d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.467232][ T45] >ffff88802de2d180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.475289][ T45] ^ [ 187.481435][ T45] ffff88802de2d200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 187.489496][ T45] ffff88802de2d280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 187.497645][ T45] ================================================================== [ 187.529156][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.537310][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.545155][ T5107] Bluetooth: hci1: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 187.570817][ T45] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 187.578080][ T45] CPU: 1 PID: 45 Comm: kworker/1:1 Not tainted 6.10.0-rc5-syzkaller-01209-gaa77b1128016 #0 [ 187.588103][ T45] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 187.598196][ T45] Workqueue: events nf_tables_trans_destroy_work [ 187.604579][ T45] Call Trace: [ 187.607992][ T45] [ 187.610951][ T45] dump_stack_lvl+0x241/0x360 [ 187.615669][ T45] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.620898][ T45] ? __pfx__printk+0x10/0x10 [ 187.625515][ T45] ? preempt_schedule+0xe1/0xf0 [ 187.630414][ T45] ? vscnprintf+0x5d/0x90 [ 187.634783][ T45] panic+0x349/0x860 [ 187.638717][ T45] ? check_panic_on_warn+0x21/0xb0 [ 187.643870][ T45] ? __pfx_panic+0x10/0x10 [ 187.648326][ T45] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 187.654341][ T45] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 187.660705][ T45] ? print_report+0x502/0x550 [ 187.665428][ T45] check_panic_on_warn+0x86/0xb0 [ 187.670399][ T45] ? nf_tables_trans_destroy_work+0x152b/0x1750 [ 187.676674][ T45] end_report+0x77/0x160 [ 187.680959][ T45] kasan_report+0x154/0x180 [ 187.685510][ T45] ? nf_tables_trans_destroy_work+0x152b/0x1750 [ 187.691797][ T45] nf_tables_trans_destroy_work+0x152b/0x1750 [ 187.697920][ T45] ? __pfx_nf_tables_trans_destroy_work+0x10/0x10 [ 187.704362][ T45] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 187.710390][ T45] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 187.716745][ T45] ? process_scheduled_works+0x945/0x1830 [ 187.722478][ T45] process_scheduled_works+0xa2c/0x1830 [ 187.728052][ T45] ? __pfx_process_scheduled_works+0x10/0x10 [ 187.734052][ T45] ? assign_work+0x364/0x3d0 [ 187.738651][ T45] worker_thread+0x86d/0xd50 [ 187.743252][ T45] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 187.749172][ T45] ? __kthread_parkme+0x169/0x1d0 [ 187.754211][ T45] ? __pfx_worker_thread+0x10/0x10 [ 187.759327][ T45] kthread+0x2f0/0x390 [ 187.763418][ T45] ? __pfx_worker_thread+0x10/0x10 [ 187.768533][ T45] ? __pfx_kthread+0x10/0x10 [ 187.773150][ T45] ret_from_fork+0x4b/0x80 [ 187.777578][ T45] ? __pfx_kthread+0x10/0x10 [ 187.782181][ T45] ret_from_fork_asm+0x1a/0x30 [ 187.786967][ T45] [ 187.790232][ T45] Kernel Offset: disabled [ 187.794561][ T45] Rebooting in 86400 seconds..