last executing test programs: 951.731455ms ago: executing program 4 (id=320): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000008}, 0x0) 787.819646ms ago: executing program 4 (id=325): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x7, 0x0) ioctl$int_in(r2, 0x541b, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) 770.87267ms ago: executing program 1 (id=326): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x28}}, &(0x7f0000000480)='GPL\x00'}, 0x80) 760.86663ms ago: executing program 2 (id=327): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000181000004000180100002800c000180"], 0x28}}, 0x0) 731.511924ms ago: executing program 3 (id=328): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') pread64(r0, 0x0, 0x0, 0x0) 651.760752ms ago: executing program 0 (id=329): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) 643.632933ms ago: executing program 1 (id=330): syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @ssrr={0x89, 0x27, 0x57, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @empty, @private=0xa010100, @multicast1, @broadcast, @multicast1]}]}}}}}}}, 0x0) 634.651249ms ago: executing program 3 (id=331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x5c}}, 0x0) 575.784101ms ago: executing program 2 (id=332): unshare(0x60400) r0 = socket$tipc(0x1e, 0x5, 0x0) recvmsg(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) 575.446048ms ago: executing program 4 (id=333): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000000000013000004"], 0x14}, 0x1, 0xfcffffff00000000}, 0x0) 546.462382ms ago: executing program 0 (id=334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200088c4}, 0x0) 498.028919ms ago: executing program 1 (id=335): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'bridge_slave_0\x00', {0x2}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000008c0)={0x0, 'veth0_vlan\x00', {0x3}}) 439.704283ms ago: executing program 3 (id=336): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='bridge0\x00', 0x10) write$binfmt_script(r1, &(0x7f00000000c0), 0x10f) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private1, @private1={0xfc, 0x1, '\x00', 0xfd}, @loopback, 0x0, 0x0, 0x3, 0x400, 0x0, 0x10210}) 439.377152ms ago: executing program 0 (id=337): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}], 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x1, @dev, 'vcan0\x00'}}, 0x1e) sendmmsg$sock(r0, &(0x7f0000001dc0), 0x213, 0x0) 439.178415ms ago: executing program 2 (id=338): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffc}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000e1ff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xab) 349.882853ms ago: executing program 4 (id=339): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x4, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xfc98, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb0011aa"], 0x0) 345.296258ms ago: executing program 2 (id=340): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x3}, {{}, {}, {0x5, 0x0, 0xb, 0x2}, {}, {0x4}}}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1003, &(0x7f0000000880)=""/4099, 0x41000, 0x9}, 0x90) 271.822239ms ago: executing program 1 (id=341): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000060000000000e5ffff840000000f00000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 271.581981ms ago: executing program 3 (id=342): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x59}, @exit], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x90) 271.407226ms ago: executing program 0 (id=343): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="68020000130001000000000000000000ac141441000000000000000000000000e00000020800000000000000000000000e000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c400050000000000000000000000000000000000000000002b00000002000000ff010000000000000000000000000001000000000100000000000000000000000000000000000000000000000000ffff7f000001000000003c00000002"], 0x268}}, 0x0) 223.412193ms ago: executing program 2 (id=344): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0xfffffddd}]}, 0x2c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 221.214742ms ago: executing program 4 (id=345): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) 163.2806ms ago: executing program 1 (id=346): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0xcc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@private=0x1, 0x0, 0x0, 0x8000, 0xffff, 0x2}, {0x0, 0x9}, {0x3}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2}, [@mark={0xc, 0x15, {0x35075c, 0x368}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xcc}}, 0x0) 107.812156ms ago: executing program 0 (id=347): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x40}, 0x1c, 0x0}}], 0x1, 0x0) 107.613317ms ago: executing program 3 (id=348): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000006c00010029bd7000fbdbdf25000027be", @ANYRES32, @ANYBLOB="0808000020680600080004000600000008002e000400000014000300626f6e6430"], 0x44}}, 0x0) 65.323873ms ago: executing program 2 (id=349): r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="7e5dc4c7e93231e3028bb5c4f58f1f0d665eeb4d0418f1e227ea32950f35432186af6b9ddec873ef32f459c999832fcc1b8fb5a718eb94e1d737df7bec5d3e2d79cc7413cc98c2f6edf9197b825a555705ad41b9cb4183de21318771b2b73cd930bfd40cdee7f48d4af986da79c347143d1e0635bf15a23ec5959e2ebf612cddcdb99651c9829d205e3c08ecf2d9eb24b4a6e2a7ff5c601c6e575851cce34f6c131786878d6d29fff6d6b6bd45798719fc", 0xb1}, {0x0}], 0x2}, 0x4) 57.553554ms ago: executing program 4 (id=350): socket(0x1, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001a00000020000180140002006261746164765f736c6176655f31000008000100", @ANYRES32=r3], 0x34}}, 0x0) 2.965779ms ago: executing program 1 (id=351): r0 = socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4}, 0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x691]}}, 0x5c) 2.715071ms ago: executing program 0 (id=352): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0), 0xd) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7480000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 3 (id=353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.66' (ED25519) to the list of known hosts. [ 51.115213][ T5209] cgroup: Unknown subsys name 'net' [ 51.263286][ T5209] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.621758][ T5209] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.561919][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.570990][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.579564][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.587705][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.595266][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.603218][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.612848][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.620839][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.628826][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.642947][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.651463][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.660991][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.670366][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.691647][ T5229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.699137][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.716264][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.716318][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.726850][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.731507][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.746459][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.753653][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.761617][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.768892][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.769020][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.788241][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.807291][ T4615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.814862][ T4615] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.823475][ T5240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.830951][ T5240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.830999][ T4615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.152563][ T5220] chnl_net:caif_netlink_parms(): no params data found [ 57.297275][ T5219] chnl_net:caif_netlink_parms(): no params data found [ 57.391332][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.398702][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.406638][ T5220] bridge_slave_0: entered allmulticast mode [ 57.413444][ T5220] bridge_slave_0: entered promiscuous mode [ 57.442899][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 57.469877][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.477005][ T5220] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.484087][ T5220] bridge_slave_1: entered allmulticast mode [ 57.492230][ T5220] bridge_slave_1: entered promiscuous mode [ 57.652104][ T5220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.664372][ T5220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.695572][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.703238][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.710518][ T5228] bridge_slave_0: entered allmulticast mode [ 57.717670][ T5228] bridge_slave_0: entered promiscuous mode [ 57.749279][ T5231] chnl_net:caif_netlink_parms(): no params data found [ 57.760389][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 57.771729][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.779004][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.786974][ T5228] bridge_slave_1: entered allmulticast mode [ 57.793641][ T5228] bridge_slave_1: entered promiscuous mode [ 57.810473][ T5219] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.817618][ T5219] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.824749][ T5219] bridge_slave_0: entered allmulticast mode [ 57.832175][ T5219] bridge_slave_0: entered promiscuous mode [ 57.873748][ T5219] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.880965][ T5219] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.889026][ T5219] bridge_slave_1: entered allmulticast mode [ 57.895683][ T5219] bridge_slave_1: entered promiscuous mode [ 57.905074][ T5220] team0: Port device team_slave_0 added [ 57.933991][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.955356][ T5220] team0: Port device team_slave_1 added [ 57.987579][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.036640][ T5219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.047268][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.054307][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.080843][ T5220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.131837][ T5228] team0: Port device team_slave_0 added [ 58.140157][ T5219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.150038][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.157299][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.183305][ T5220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.206859][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.214048][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.221561][ T5224] bridge_slave_0: entered allmulticast mode [ 58.228373][ T5224] bridge_slave_0: entered promiscuous mode [ 58.237410][ T5228] team0: Port device team_slave_1 added [ 58.243388][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.250539][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.257877][ T5224] bridge_slave_1: entered allmulticast mode [ 58.265042][ T5224] bridge_slave_1: entered promiscuous mode [ 58.364280][ T5219] team0: Port device team_slave_0 added [ 58.372572][ T5219] team0: Port device team_slave_1 added [ 58.378868][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.385927][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.393604][ T5231] bridge_slave_0: entered allmulticast mode [ 58.400711][ T5231] bridge_slave_0: entered promiscuous mode [ 58.409060][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.416221][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.442228][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.455943][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.468399][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.488803][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.496098][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.503218][ T5231] bridge_slave_1: entered allmulticast mode [ 58.510205][ T5231] bridge_slave_1: entered promiscuous mode [ 58.528667][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.535608][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.562114][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.609852][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.616937][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.644177][ T5219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.670874][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.701318][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.708411][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.734679][ T5219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.747265][ T5236] Bluetooth: hci1: command tx timeout [ 58.774243][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.798552][ T5220] hsr_slave_0: entered promiscuous mode [ 58.804836][ T5220] hsr_slave_1: entered promiscuous mode [ 58.816173][ T5236] Bluetooth: hci0: command tx timeout [ 58.816422][ T5224] team0: Port device team_slave_0 added [ 58.828917][ T5236] Bluetooth: hci2: command tx timeout [ 58.830623][ T5224] team0: Port device team_slave_1 added [ 58.863628][ T5219] hsr_slave_0: entered promiscuous mode [ 58.870491][ T5219] hsr_slave_1: entered promiscuous mode [ 58.877046][ T5219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.884838][ T5219] Cannot create hsr debugfs directory [ 58.908817][ T5236] Bluetooth: hci3: command tx timeout [ 58.911859][ T4615] Bluetooth: hci4: command tx timeout [ 58.938776][ T5228] hsr_slave_0: entered promiscuous mode [ 58.946390][ T5228] hsr_slave_1: entered promiscuous mode [ 58.952386][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.960197][ T5228] Cannot create hsr debugfs directory [ 58.970033][ T5231] team0: Port device team_slave_0 added [ 58.990440][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.997479][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.023476][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.038664][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.045611][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.071732][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.085049][ T5231] team0: Port device team_slave_1 added [ 59.195426][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.202485][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.228601][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.273547][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.280600][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.307273][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.419624][ T5224] hsr_slave_0: entered promiscuous mode [ 59.425818][ T5224] hsr_slave_1: entered promiscuous mode [ 59.432673][ T5224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.440467][ T5224] Cannot create hsr debugfs directory [ 59.518848][ T5231] hsr_slave_0: entered promiscuous mode [ 59.525316][ T5231] hsr_slave_1: entered promiscuous mode [ 59.532289][ T5231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.539988][ T5231] Cannot create hsr debugfs directory [ 59.794960][ T5219] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.813271][ T5219] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.823859][ T5219] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.833386][ T5219] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.903699][ T5228] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.913663][ T5228] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.928031][ T5228] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.939206][ T5228] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.027683][ T5220] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.041986][ T5220] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.052035][ T5220] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.062856][ T5220] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.153222][ T5224] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.171925][ T5224] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.185801][ T5224] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.199636][ T5224] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.220867][ T5219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.251975][ T5219] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.299785][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.307130][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.343305][ T5231] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.354518][ T5231] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.376853][ T5231] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.392927][ T5231] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.410681][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.417863][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.525852][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.594461][ T5220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.630267][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.643830][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.659250][ T2572] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.666398][ T2572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.708900][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.716068][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.750643][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.771971][ T5220] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.800120][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.807281][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.816460][ T4615] Bluetooth: hci1: command tx timeout [ 60.837410][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.844562][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.871813][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.879074][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.898240][ T4615] Bluetooth: hci2: command tx timeout [ 60.898315][ T5236] Bluetooth: hci0: command tx timeout [ 60.932590][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.939762][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.977333][ T5236] Bluetooth: hci4: command tx timeout [ 60.978597][ T4615] Bluetooth: hci3: command tx timeout [ 60.984863][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.045137][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.107896][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.115336][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.133912][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.141096][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.177868][ T5219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.442387][ T5219] veth0_vlan: entered promiscuous mode [ 61.473704][ T5219] veth1_vlan: entered promiscuous mode [ 61.511949][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.610029][ T5220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.649659][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.658257][ T5219] veth0_macvtap: entered promiscuous mode [ 61.684284][ T5228] veth0_vlan: entered promiscuous mode [ 61.725646][ T5228] veth1_vlan: entered promiscuous mode [ 61.740618][ T5219] veth1_macvtap: entered promiscuous mode [ 61.819736][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.862423][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.893587][ T5220] veth0_vlan: entered promiscuous mode [ 61.941461][ T5220] veth1_vlan: entered promiscuous mode [ 61.954389][ T5228] veth0_macvtap: entered promiscuous mode [ 61.968347][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.995570][ T5228] veth1_macvtap: entered promiscuous mode [ 62.025746][ T5219] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.035829][ T5219] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.044843][ T5219] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.053715][ T5219] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.117353][ T5220] veth0_macvtap: entered promiscuous mode [ 62.129059][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.140276][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.152114][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.161110][ T5231] veth0_vlan: entered promiscuous mode [ 62.185411][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.197092][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.208499][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.222304][ T5231] veth1_vlan: entered promiscuous mode [ 62.233800][ T5220] veth1_macvtap: entered promiscuous mode [ 62.255362][ T5228] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.266282][ T5228] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.275081][ T5228] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.284908][ T5228] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.314308][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.328810][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.339167][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.349843][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.361944][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.396911][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.411274][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.421613][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.432614][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.443641][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.484858][ T5224] veth0_vlan: entered promiscuous mode [ 62.544874][ T5220] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.553797][ T5220] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.563687][ T5220] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.573437][ T5220] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.605379][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.609663][ T5224] veth1_vlan: entered promiscuous mode [ 62.619414][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.631289][ T5231] veth0_macvtap: entered promiscuous mode [ 62.642234][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.653560][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.690060][ T5231] veth1_macvtap: entered promiscuous mode [ 62.714894][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.723474][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.753566][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.773315][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.773586][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.802642][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.812739][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.827259][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.837146][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.847656][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.862310][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.900843][ T4615] Bluetooth: hci1: command tx timeout [ 62.903952][ T5224] veth0_macvtap: entered promiscuous mode [ 62.918402][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.935310][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.945601][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.959546][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.969481][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.980404][ T4615] Bluetooth: hci2: command tx timeout [ 62.986468][ T4615] Bluetooth: hci0: command tx timeout [ 62.990554][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.003810][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.021292][ T5224] veth1_macvtap: entered promiscuous mode [ 63.059054][ T5231] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.062429][ T4615] Bluetooth: hci4: command tx timeout [ 63.073176][ T5236] Bluetooth: hci3: command tx timeout [ 63.077419][ T5231] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.100488][ T5231] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.109312][ T5231] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.197762][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.208820][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.214863][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.253411][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.272554][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.283449][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.324216][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.331714][ T5310] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.345867][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.356652][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.371750][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.383375][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.415409][ T5310] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 63.424351][ T5310] Zero length message leads to an empty skb [ 63.436376][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.456748][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.475187][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.497319][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.517388][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.548206][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.570109][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.599595][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.631403][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.667068][ T5224] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.675859][ T5224] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.692417][ T5224] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.703100][ T5224] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.733771][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.749828][ T5318] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 63.758612][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.963507][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.968727][ T5320] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 63.985510][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.080615][ T5324] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 64.178766][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.232325][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.296246][ T2572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.304541][ T2572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.351629][ T5329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 64.383785][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.411884][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.412241][ T5328] syz.3.13 uses obsolete (PF_INET,SOCK_PACKET) [ 64.591233][ T5328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13'. [ 64.616624][ T5328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13'. [ 64.645208][ T5328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13'. [ 64.660573][ T5332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 64.712890][ T5336] netlink: 732 bytes leftover after parsing attributes in process `syz.4.5'. [ 64.725551][ T5336] netlink: 732 bytes leftover after parsing attributes in process `syz.4.5'. [ 64.789847][ T5336] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:e000:0001 with DS=0xf [ 64.795805][ T5338] netlink: 'syz.1.15': attribute type 10 has an invalid length. [ 64.873878][ T5338] team0: Failed to send options change via netlink (err -105) [ 64.884315][ T5338] team0: Port device netdevsim0 added [ 64.898874][ T5336] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5'. [ 64.981775][ T4615] Bluetooth: hci1: command tx timeout [ 65.057245][ T5235] Bluetooth: hci2: command tx timeout [ 65.062799][ T5236] Bluetooth: hci0: command tx timeout [ 65.136375][ T5236] Bluetooth: hci4: command tx timeout [ 65.141830][ T5236] Bluetooth: hci3: command tx timeout [ 65.240867][ T5346] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 66.298927][ T5385] netlink: 25 bytes leftover after parsing attributes in process `syz.3.36'. [ 66.379520][ T5386] pim6reg1: entered promiscuous mode [ 66.406221][ T5386] pim6reg1: entered allmulticast mode [ 68.155071][ T5413] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.203680][ T5411] netlink: 28 bytes leftover after parsing attributes in process `syz.3.45'. [ 68.622268][ T5431] netlink: 'syz.4.55': attribute type 29 has an invalid length. [ 68.645786][ T5431] netlink: 'syz.4.55': attribute type 29 has an invalid length. [ 69.060788][ T5452] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 69.068313][ T5452] IPv6: NLM_F_CREATE should be set when creating new route [ 69.075604][ T5452] IPv6: NLM_F_CREATE should be set when creating new route [ 69.082894][ T5452] IPv6: NLM_F_CREATE should be set when creating new route [ 69.766145][ T5454] __nla_validate_parse: 1 callbacks suppressed [ 69.766165][ T5454] netlink: 5 bytes leftover after parsing attributes in process `syz.2.64'. [ 69.788200][ T5454] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 69.824812][ T5479] netlink: 28 bytes leftover after parsing attributes in process `syz.1.77'. [ 70.000361][ T5486] netlink: 'syz.0.78': attribute type 2 has an invalid length. [ 70.042891][ T5486] : entered promiscuous mode [ 70.410038][ T5503] netlink: 'syz.3.84': attribute type 11 has an invalid length. [ 70.423199][ T5503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 70.905943][ T5521] netlink: 24 bytes leftover after parsing attributes in process `syz.3.94'. [ 71.589984][ T5548] pim6reg1: entered promiscuous mode [ 71.595827][ T5548] pim6reg1: entered allmulticast mode [ 71.610892][ T5554] netlink: 'syz.4.109': attribute type 10 has an invalid length. [ 71.632168][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.645641][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.655497][ T5554] netlink: 180 bytes leftover after parsing attributes in process `syz.4.109'. [ 72.783986][ T5604] netlink: 'syz.3.125': attribute type 4 has an invalid length. [ 72.792519][ T5604] netlink: 'syz.3.125': attribute type 4 has an invalid length. [ 72.801046][ T5604] netlink: 126032 bytes leftover after parsing attributes in process `syz.3.125'. [ 72.817709][ T5604] netlink: 164 bytes leftover after parsing attributes in process `syz.3.125'. [ 72.828110][ T5604] netlink: 'syz.3.125': attribute type 1 has an invalid length. [ 72.840317][ T5604] netlink: 104 bytes leftover after parsing attributes in process `syz.3.125'. [ 73.347743][ T5578] bridge0: entered promiscuous mode [ 73.374855][ T5580] bridge0: left promiscuous mode [ 73.891146][ T5625] syzkaller0: entered promiscuous mode [ 73.909397][ T5625] syzkaller0: entered allmulticast mode [ 74.111645][ T5636] sock: sock_set_timeout: `syz.3.139' (pid 5636) tries to set negative timeout [ 74.499220][ T5655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.147'. [ 74.597164][ T5657] netlink: 172 bytes leftover after parsing attributes in process `syz.2.149'. [ 76.367352][ T5731] warning: `syz.4.179' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.405161][ T5731] lo speed is unknown, defaulting to 1000 [ 76.423053][ T5734] netlink: 32 bytes leftover after parsing attributes in process `syz.0.181'. [ 76.503277][ T5738] netlink: 32 bytes leftover after parsing attributes in process `syz.0.181'. [ 76.595404][ T5731] lo speed is unknown, defaulting to 1000 [ 76.610254][ T5731] lo speed is unknown, defaulting to 1000 [ 76.752711][ T9] cfg80211: failed to load regulatory.db [ 76.808396][ T5743] pim6reg1: entered promiscuous mode [ 76.813781][ T5743] pim6reg1: entered allmulticast mode [ 76.891490][ T5751] pim6reg1: entered promiscuous mode [ 76.906131][ T5751] pim6reg1: entered allmulticast mode [ 76.935044][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 77.171648][ T5731] infiniband syz0: set active [ 77.217393][ T5731] infiniband syz0: added lo [ 77.248688][ T5221] lo speed is unknown, defaulting to 1000 [ 77.282505][ T5761] netlink: 'syz.2.192': attribute type 29 has an invalid length. [ 77.326172][ T5761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.192'. [ 77.421172][ T5731] RDS/IB: syz0: added [ 77.432947][ T5731] smc: adding ib device syz0 with port count 1 [ 77.452624][ T5731] smc: ib device syz0 port 1 has pnetid [ 77.473578][ T25] lo speed is unknown, defaulting to 1000 [ 77.507584][ T5731] lo speed is unknown, defaulting to 1000 [ 78.033881][ T5780] syzkaller0: entered promiscuous mode [ 78.075305][ T5780] syzkaller0: entered allmulticast mode [ 79.244691][ T5731] lo speed is unknown, defaulting to 1000 [ 79.881120][ T5731] lo speed is unknown, defaulting to 1000 [ 80.203512][ T5826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'. [ 80.370251][ T5731] lo speed is unknown, defaulting to 1000 [ 80.505331][ T5839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.227'. [ 80.649879][ T5846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'. [ 80.729975][ T5731] lo speed is unknown, defaulting to 1000 [ 81.409449][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.240'. [ 81.547066][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 83.128917][ T5946] lo speed is unknown, defaulting to 1000 [ 83.170865][ T5951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.276'. [ 83.244140][ T5956] netlink: 40 bytes leftover after parsing attributes in process `syz.3.281'. [ 83.418690][ T5968] netlink: 28 bytes leftover after parsing attributes in process `syz.4.286'. [ 84.008455][ T5994] netlink: 'syz.0.298': attribute type 4 has an invalid length. [ 84.144241][ T5994] netlink: 'syz.0.298': attribute type 4 has an invalid length. [ 84.363481][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.306'. [ 84.426967][ T6014] netlink: 264 bytes leftover after parsing attributes in process `syz.2.308'. [ 84.706168][ T6031] netlink: 236 bytes leftover after parsing attributes in process `syz.3.317'. [ 84.845740][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'. [ 84.864390][ T6041] geneve2: entered promiscuous mode [ 84.872489][ T6041] geneve2: entered allmulticast mode [ 84.888856][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.323'. [ 85.017108][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 85.488125][ T6087] netlink: 236 bytes leftover after parsing attributes in process `syz.0.343'. [ 85.739191][ T6102] [ 85.741610][ T6102] ================================================ [ 85.748110][ T6102] WARNING: lock held when returning to user space! [ 85.754616][ T6102] 6.11.0-rc4-syzkaller-00566-g7d3aed652d09 #0 Not tainted [ 85.761811][ T6102] ------------------------------------------------ [ 85.768311][ T6102] syz.4.350/6102 is leaving the kernel with locks still held! [ 85.775764][ T6102] 1 lock held by syz.4.350/6102: [ 85.780693][ T6102] #0: ffffffff8fc84b88 (rtnl_mutex){+.+.}-{3:3}, at: ethnl_act_cable_test+0x187/0x3f0 [ 85.894592][ T6111] ================================================================== [ 85.902686][ T6111] BUG: KASAN: slab-use-after-free in __mutex_lock+0xcf5/0xd70 [ 85.910133][ T6111] Read of size 4 at addr ffff888020dcbc34 by task syz.1.351/6111 [ 85.917832][ T6111] [ 85.920149][ T6111] CPU: 1 UID: 0 PID: 6111 Comm: syz.1.351 Not tainted 6.11.0-rc4-syzkaller-00566-g7d3aed652d09 #0 [ 85.930716][ T6111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 85.940764][ T6111] Call Trace: [ 85.944030][ T6111] [ 85.947050][ T6111] dump_stack_lvl+0x241/0x360 [ 85.951741][ T6111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.956927][ T6111] ? __pfx__printk+0x10/0x10 [ 85.961497][ T6111] ? _printk+0xd5/0x120 [ 85.965640][ T6111] ? __virt_addr_valid+0x183/0x530 [ 85.970752][ T6111] ? __virt_addr_valid+0x183/0x530 [ 85.975845][ T6111] print_report+0x169/0x550 [ 85.980335][ T6111] ? __virt_addr_valid+0x183/0x530 [ 85.985433][ T6111] ? __virt_addr_valid+0x183/0x530 [ 85.990548][ T6111] ? __virt_addr_valid+0x45f/0x530 [ 85.995730][ T6111] ? __phys_addr+0xba/0x170 [ 86.000220][ T6111] ? __mutex_lock+0xcf5/0xd70 [ 86.004925][ T6111] kasan_report+0x143/0x180 [ 86.009418][ T6111] ? __mutex_lock+0xcf5/0xd70 [ 86.014082][ T6111] __mutex_lock+0xcf5/0xd70 [ 86.018582][ T6111] ? __pfx_lock_release+0x10/0x10 [ 86.023697][ T6111] ? ip6_mroute_setsockopt+0xa87/0x1340 [ 86.029232][ T6111] ? __pfx___mutex_lock+0x10/0x10 [ 86.034252][ T6111] ? __might_fault+0xc6/0x120 [ 86.038923][ T6111] ip6_mroute_setsockopt+0xa87/0x1340 [ 86.044287][ T6111] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 86.050081][ T6111] ? lock_release+0xbf/0xa30 [ 86.054662][ T6111] ? __pfx_lock_release+0x10/0x10 [ 86.059677][ T6111] ? __page_table_check_ptes_set+0x30f/0x410 [ 86.065640][ T6111] ? __might_fault+0xc6/0x120 [ 86.070326][ T6111] do_ipv6_setsockopt+0x48c/0x3630 [ 86.075422][ T6111] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 86.080970][ T6111] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 86.086674][ T6111] ? aa_label_sk_perm+0x4f0/0x6d0 [ 86.091683][ T6111] ? rcu_is_watching+0x15/0xb0 [ 86.096444][ T6111] ? lock_release+0xbf/0xa30 [ 86.101072][ T6111] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 86.106516][ T6111] ? memcg_rstat_updated+0x7b/0x2f0 [ 86.111698][ T6111] ? __pfx_lock_release+0x10/0x10 [ 86.116706][ T6111] ? __count_memcg_events+0x190/0x2a0 [ 86.122069][ T6111] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 86.128389][ T6111] ? __pfx___might_resched+0x10/0x10 [ 86.133665][ T6111] ? rcu_is_watching+0x15/0xb0 [ 86.138426][ T6111] ? count_memcg_event_mm+0x94/0x420 [ 86.143716][ T6111] ? count_memcg_event_mm+0x3c2/0x420 [ 86.149079][ T6111] ? count_memcg_event_mm+0x94/0x420 [ 86.154349][ T6111] ? __pfx_count_memcg_event_mm+0x10/0x10 [ 86.160053][ T6111] ? aa_sk_perm+0x96d/0xab0 [ 86.164543][ T6111] ipv6_setsockopt+0x5c/0x1a0 [ 86.169211][ T6111] rawv6_setsockopt+0x327/0x740 [ 86.174074][ T6111] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 86.179432][ T6111] ? aa_sock_opt_perm+0x79/0x120 [ 86.184360][ T6111] ? sock_common_setsockopt+0x37/0xc0 [ 86.189713][ T6111] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 86.195587][ T6111] do_sock_setsockopt+0x3af/0x720 [ 86.200607][ T6111] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 86.206310][ T6111] ? __fget_files+0x29/0x470 [ 86.210888][ T6111] ? __fget_files+0x3f6/0x470 [ 86.215553][ T6111] __sys_setsockopt+0x1ae/0x250 [ 86.220388][ T6111] __x64_sys_setsockopt+0xb5/0xd0 [ 86.225414][ T6111] do_syscall_64+0xf3/0x230 [ 86.229916][ T6111] ? clear_bhb_loop+0x35/0x90 [ 86.234580][ T6111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.240496][ T6111] RIP: 0033:0x7fcc22179e79 [ 86.244915][ T6111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.264523][ T6111] RSP: 002b:00007fcc22fc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 86.272925][ T6111] RAX: ffffffffffffffda RBX: 00007fcc22316130 RCX: 00007fcc22179e79 [ 86.280878][ T6111] RDX: 00000000000000d2 RSI: 0000000000000029 RDI: 0000000000000003 [ 86.288831][ T6111] RBP: 00007fcc221e793e R08: 000000000000005c R09: 0000000000000000 [ 86.296798][ T6111] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 86.304779][ T6111] R13: 0000000000000001 R14: 00007fcc22316130 R15: 00007ffebfb1a048 [ 86.312769][ T6111] [ 86.315782][ T6111] [ 86.318097][ T6111] Allocated by task 6100: [ 86.322410][ T6111] kasan_save_track+0x3f/0x80 [ 86.327081][ T6111] __kasan_slab_alloc+0x66/0x80 [ 86.331916][ T6111] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 86.337798][ T6111] dup_task_struct+0x57/0x8c0 [ 86.342486][ T6111] copy_process+0x5d1/0x3e10 [ 86.347089][ T6111] kernel_clone+0x226/0x8f0 [ 86.351578][ T6111] __se_sys_clone3+0x2cb/0x350 [ 86.356375][ T6111] do_syscall_64+0xf3/0x230 [ 86.360868][ T6111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.366745][ T6111] [ 86.369050][ T6111] Freed by task 0: [ 86.372770][ T6111] kasan_save_track+0x3f/0x80 [ 86.377430][ T6111] kasan_save_free_info+0x40/0x50 [ 86.382437][ T6111] poison_slab_object+0xe0/0x150 [ 86.387385][ T6111] __kasan_slab_free+0x37/0x60 [ 86.392170][ T6111] kmem_cache_free+0x145/0x350 [ 86.396928][ T6111] delayed_put_task_struct+0x125/0x300 [ 86.402398][ T6111] rcu_core+0xafd/0x1830 [ 86.406635][ T6111] handle_softirqs+0x2c4/0x970 [ 86.411382][ T6111] __irq_exit_rcu+0xf4/0x1c0 [ 86.415959][ T6111] irq_exit_rcu+0x9/0x30 [ 86.420204][ T6111] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 86.425823][ T6111] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 86.431787][ T6111] [ 86.434100][ T6111] Last potentially related work creation: [ 86.439791][ T6111] kasan_save_stack+0x3f/0x60 [ 86.444472][ T6111] __kasan_record_aux_stack+0xac/0xc0 [ 86.449831][ T6111] call_rcu+0x167/0xa70 [ 86.454000][ T6111] __schedule+0x1808/0x4a60 [ 86.458486][ T6111] schedule+0x14b/0x320 [ 86.462619][ T6111] do_nanosleep+0x197/0x600 [ 86.467105][ T6111] hrtimer_nanosleep+0x227/0x470 [ 86.472023][ T6111] __se_sys_clock_nanosleep+0x32b/0x3c0 [ 86.477552][ T6111] do_syscall_64+0xf3/0x230 [ 86.482035][ T6111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.487938][ T6111] [ 86.490250][ T6111] The buggy address belongs to the object at ffff888020dcbc00 [ 86.490250][ T6111] which belongs to the cache task_struct of size 7424 [ 86.504371][ T6111] The buggy address is located 52 bytes inside of [ 86.504371][ T6111] freed 7424-byte region [ffff888020dcbc00, ffff888020dcd900) [ 86.518167][ T6111] [ 86.520502][ T6111] The buggy address belongs to the physical page: [ 86.526900][ T6111] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20dc8 [ 86.535645][ T6111] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 86.544145][ T6111] memcg:ffff888029ba7781 [ 86.548372][ T6111] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 86.555922][ T6111] page_type: 0xfdffffff(slab) [ 86.560597][ T6111] raw: 00fff00000000040 ffff8880166fd500 dead000000000100 dead000000000122 [ 86.569176][ T6111] raw: 0000000000000000 0000000000040004 00000001fdffffff ffff888029ba7781 [ 86.577739][ T6111] head: 00fff00000000040 ffff8880166fd500 dead000000000100 dead000000000122 [ 86.586387][ T6111] head: 0000000000000000 0000000000040004 00000001fdffffff ffff888029ba7781 [ 86.595130][ T6111] head: 00fff00000000003 ffffea0000837201 ffffffffffffffff 0000000000000000 [ 86.603786][ T6111] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 86.612433][ T6111] page dumped because: kasan: bad access detected [ 86.618854][ T6111] page_owner tracks the page as allocated [ 86.624547][ T6111] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2, tgid 2 (kthreadd), ts 7056927821, free_ts 0 [ 86.644081][ T6111] post_alloc_hook+0x1f3/0x230 [ 86.648837][ T6111] get_page_from_freelist+0x2e4c/0x2f10 [ 86.654370][ T6111] __alloc_pages_noprof+0x256/0x6c0 [ 86.659565][ T6111] alloc_slab_page+0x5f/0x120 [ 86.664235][ T6111] allocate_slab+0x5a/0x2f0 [ 86.668725][ T6111] ___slab_alloc+0xcd1/0x14b0 [ 86.673384][ T6111] __slab_alloc+0x58/0xa0 [ 86.677696][ T6111] kmem_cache_alloc_node_noprof+0x1fe/0x320 [ 86.683574][ T6111] dup_task_struct+0x57/0x8c0 [ 86.688233][ T6111] copy_process+0x5d1/0x3e10 [ 86.692809][ T6111] kernel_clone+0x226/0x8f0 [ 86.697306][ T6111] kernel_thread+0x1bc/0x240 [ 86.701904][ T6111] kthreadd+0x60d/0x810 [ 86.706048][ T6111] ret_from_fork+0x4b/0x80 [ 86.710455][ T6111] ret_from_fork_asm+0x1a/0x30 [ 86.715204][ T6111] page_owner free stack trace missing [ 86.720551][ T6111] [ 86.722854][ T6111] Memory state around the buggy address: [ 86.728552][ T6111] ffff888020dcbb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 86.736591][ T6111] ffff888020dcbb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 86.744631][ T6111] >ffff888020dcbc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.752688][ T6111] ^ [ 86.758313][ T6111] ffff888020dcbc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.766445][ T6111] ffff888020dcbd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.774487][ T6111] ================================================================== [ 86.788127][ T6111] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 86.795347][ T6111] CPU: 1 UID: 0 PID: 6111 Comm: syz.1.351 Not tainted 6.11.0-rc4-syzkaller-00566-g7d3aed652d09 #0 [ 86.805933][ T6111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 86.815990][ T6111] Call Trace: [ 86.819260][ T6111] [ 86.822175][ T6111] dump_stack_lvl+0x241/0x360 [ 86.826849][ T6111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.832040][ T6111] ? __pfx__printk+0x10/0x10 [ 86.836640][ T6111] ? rcu_is_watching+0x15/0xb0 [ 86.841392][ T6111] ? vscnprintf+0x5d/0x90 [ 86.845705][ T6111] panic+0x349/0x860 [ 86.849594][ T6111] ? check_panic_on_warn+0x21/0xb0 [ 86.854714][ T6111] ? __pfx_panic+0x10/0x10 [ 86.859114][ T6111] ? trace_irq_enable+0x2c/0x120 [ 86.864036][ T6111] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 86.869913][ T6111] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 86.875790][ T6111] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 86.882100][ T6111] ? print_report+0x502/0x550 [ 86.886761][ T6111] check_panic_on_warn+0x86/0xb0 [ 86.891678][ T6111] ? __mutex_lock+0xcf5/0xd70 [ 86.896343][ T6111] end_report+0x77/0x160 [ 86.900581][ T6111] kasan_report+0x154/0x180 [ 86.905088][ T6111] ? __mutex_lock+0xcf5/0xd70 [ 86.909762][ T6111] __mutex_lock+0xcf5/0xd70 [ 86.914258][ T6111] ? __pfx_lock_release+0x10/0x10 [ 86.919277][ T6111] ? ip6_mroute_setsockopt+0xa87/0x1340 [ 86.924821][ T6111] ? __pfx___mutex_lock+0x10/0x10 [ 86.929837][ T6111] ? __might_fault+0xc6/0x120 [ 86.934510][ T6111] ip6_mroute_setsockopt+0xa87/0x1340 [ 86.939881][ T6111] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 86.945678][ T6111] ? lock_release+0xbf/0xa30 [ 86.950263][ T6111] ? __pfx_lock_release+0x10/0x10 [ 86.955282][ T6111] ? __page_table_check_ptes_set+0x30f/0x410 [ 86.961251][ T6111] ? __might_fault+0xc6/0x120 [ 86.965921][ T6111] do_ipv6_setsockopt+0x48c/0x3630 [ 86.971026][ T6111] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 86.976555][ T6111] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 86.982254][ T6111] ? aa_label_sk_perm+0x4f0/0x6d0 [ 86.987265][ T6111] ? rcu_is_watching+0x15/0xb0 [ 86.992015][ T6111] ? lock_release+0xbf/0xa30 [ 86.996596][ T6111] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 87.001966][ T6111] ? memcg_rstat_updated+0x7b/0x2f0 [ 87.007153][ T6111] ? __pfx_lock_release+0x10/0x10 [ 87.012164][ T6111] ? __count_memcg_events+0x190/0x2a0 [ 87.017609][ T6111] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.023959][ T6111] ? __pfx___might_resched+0x10/0x10 [ 87.029232][ T6111] ? rcu_is_watching+0x15/0xb0 [ 87.033983][ T6111] ? count_memcg_event_mm+0x94/0x420 [ 87.039260][ T6111] ? count_memcg_event_mm+0x3c2/0x420 [ 87.044618][ T6111] ? count_memcg_event_mm+0x94/0x420 [ 87.049984][ T6111] ? __pfx_count_memcg_event_mm+0x10/0x10 [ 87.055703][ T6111] ? aa_sk_perm+0x96d/0xab0 [ 87.060282][ T6111] ipv6_setsockopt+0x5c/0x1a0 [ 87.064955][ T6111] rawv6_setsockopt+0x327/0x740 [ 87.069796][ T6111] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 87.075152][ T6111] ? aa_sock_opt_perm+0x79/0x120 [ 87.080265][ T6111] ? sock_common_setsockopt+0x37/0xc0 [ 87.085646][ T6111] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 87.091533][ T6111] do_sock_setsockopt+0x3af/0x720 [ 87.096551][ T6111] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 87.102082][ T6111] ? __fget_files+0x29/0x470 [ 87.106662][ T6111] ? __fget_files+0x3f6/0x470 [ 87.111337][ T6111] __sys_setsockopt+0x1ae/0x250 [ 87.116202][ T6111] __x64_sys_setsockopt+0xb5/0xd0 [ 87.121217][ T6111] do_syscall_64+0xf3/0x230 [ 87.125723][ T6111] ? clear_bhb_loop+0x35/0x90 [ 87.130402][ T6111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.136299][ T6111] RIP: 0033:0x7fcc22179e79 [ 87.140706][ T6111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.160301][ T6111] RSP: 002b:00007fcc22fc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 87.168708][ T6111] RAX: ffffffffffffffda RBX: 00007fcc22316130 RCX: 00007fcc22179e79 [ 87.176671][ T6111] RDX: 00000000000000d2 RSI: 0000000000000029 RDI: 0000000000000003 [ 87.184628][ T6111] RBP: 00007fcc221e793e R08: 000000000000005c R09: 0000000000000000 [ 87.192586][ T6111] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 87.200541][ T6111] R13: 0000000000000001 R14: 00007fcc22316130 R15: 00007ffebfb1a048 [ 87.208505][ T6111] [ 87.211720][ T6111] Kernel Offset: disabled [ 87.216026][ T6111] Rebooting in 86400 seconds..