last executing test programs: 57.84670528s ago: executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @prog_id}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r0, r1, 0x2, 0x0, 0x4000, @prog_id}, 0x20) 57.669922047s ago: executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 40.309049525s ago: executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 22.196016056s ago: executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 8.893595224s ago: executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 4.489201506s ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000280)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x3c, 0x0, 0x2000000) 4.063989756s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x70}}, 0x0) 3.931234525s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@deltaction={0x24, 0x31, 0x34eeeaa6bdafa981, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 3.679677535s ago: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@enum, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffff, [{0x2, 0x1}]}]}, {0x0, [0x0, 0x61, 0x5f]}}, 0x0, 0x41}, 0x20) 3.518486265s ago: executing program 0: mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @prog_id}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r0, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) 3.360084784s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 2.306753727s ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x0}, 0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080)={r2}, &(0x7f0000000240)=0x18) 2.191717345s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f00000000c0), 0x4) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x1) 2.090148409s ago: executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xe7, &(0x7f0000000000), &(0x7f0000000240)=0x4) 1.243209364s ago: executing program 3: socket$inet6(0xa, 0x6, 0x0) socket(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x803, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16=r0], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 1.179073552s ago: executing program 1: unshare(0x40600) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, &(0x7f0000000100)={0x8}, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0x40, 0x0, 0x2, 0x1}, &(0x7f0000000300)=0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, r1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r1, 0x2}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x1d, 0x0, 0x2}, 0x18, &(0x7f0000000940)={&(0x7f0000000200)="80", 0x1}, 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7fff, 0xf7a7, 0x1042, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x6}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e80), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ec0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x24}}, 0x0) 1.026568947s ago: executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 1.025135591s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='jbd2_update_log_tail\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='jbd2_update_log_tail\x00', r3}, 0x10) ioctl$TUNSETOFFLOAD(r1, 0x4004662b, 0x20001412) 967.023821ms ago: executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001340)={'batadv_slave_1\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000076c0)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000013c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private1, r2}}}], 0x28}}], 0x1, 0x0) 854.752497ms ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb}}]}]}}}]}, 0x78}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)='y', 0x1}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x13, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) 817.601596ms ago: executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x28) 780.223864ms ago: executing program 4: r0 = socket$kcm(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000ff0500ff000000002e00000006000600000000000a0001007770616e3100000005003300000008"], 0x3c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={0x0}}, 0x4000000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10001100", 0x33fe0}], 0x1}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000180)='page_pool_release\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000eb1d95"], &(0x7f0000000040)='GPL\x00'}, 0x90) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 635.450751ms ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x2a011, r0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x2, 0x0, &(0x7f0000000000)) 608.036509ms ago: executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000ec0)={0x0, 0x47, &(0x7f0000000e80)={&(0x7f0000000140)={0x88, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x1c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x5}, @NL802154_KEY_ID_ATTR_INDEX]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x50, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24}, @NL802154_KEY_ID_ATTR_MODE={0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x0, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE, @NL802154_DEV_ADDR_ATTR_PAN_ID, @NL802154_DEV_ADDR_ATTR_PAN_ID, @NL802154_DEV_ADDR_ATTR_SHORT, @NL802154_DEV_ADDR_ATTR_EXTENDED, @NL802154_DEV_ADDR_ATTR_EXTENDED]}]}]}, 0x88}}, 0x0) 366.81712ms ago: executing program 4: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES32], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 337.861032ms ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000020000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x50}}, 0x0) 251.232731ms ago: executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0xb, @local}, @IFA_RT_PRIORITY={0x8}, @IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x48}}, 0x0) 218.691949ms ago: executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\twmm'], 0xa) 95.99438ms ago: executing program 4: unshare(0x40600) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, &(0x7f0000000100)={0x8}, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0x40, 0x0, 0x2, 0x1}, &(0x7f0000000300)=0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, r1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r1, 0x2}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x1d, 0x0, 0x2}, 0x18, &(0x7f0000000940)={&(0x7f0000000200)="80", 0x1}, 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7fff, 0xf7a7, 0x1042, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x6}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e80), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ec0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x24}}, 0x0) 0s ago: executing program 3: gettid() socketpair(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x32}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x90) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000480)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.95' (ED25519) to the list of known hosts. 2024/06/18 18:19:53 fuzzer started 2024/06/18 18:19:53 dialing manager at 10.128.0.169:30018 [ 69.452775][ T5090] cgroup: Unknown subsys name 'net' [ 69.631505][ T5090] cgroup: Unknown subsys name 'rlimit' 2024/06/18 18:19:55 starting 5 executor processes [ 71.011146][ T5097] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.717686][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.724315][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.000294][ T5112] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.010169][ T5112] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.026723][ T5112] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.034967][ T5112] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.043182][ T5112] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.056525][ T5112] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.079913][ T5112] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.095547][ T5112] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.108657][ T5112] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.117832][ T5112] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.125820][ T5112] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.135131][ T5112] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.189908][ T5112] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.206879][ T5112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.216717][ T5112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.225742][ T5112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.233754][ T5112] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.241236][ T5112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.256671][ T4488] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.283728][ T4488] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.294200][ T4488] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.302384][ T5123] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.311813][ T5123] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.319410][ T4488] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.328952][ T5123] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.337115][ T4488] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.344704][ T5123] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.353244][ T5123] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.368015][ T5112] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.389418][ T5112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.882986][ T5110] chnl_net:caif_netlink_parms(): no params data found [ 72.894920][ T5113] chnl_net:caif_netlink_parms(): no params data found [ 72.969593][ T5117] chnl_net:caif_netlink_parms(): no params data found [ 73.141847][ T5119] chnl_net:caif_netlink_parms(): no params data found [ 73.233390][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.242398][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.250521][ T5113] bridge_slave_0: entered allmulticast mode [ 73.258541][ T5113] bridge_slave_0: entered promiscuous mode [ 73.268876][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.276221][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.283678][ T5113] bridge_slave_1: entered allmulticast mode [ 73.291434][ T5113] bridge_slave_1: entered promiscuous mode [ 73.329286][ T5121] chnl_net:caif_netlink_parms(): no params data found [ 73.352492][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.359962][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.367269][ T5110] bridge_slave_0: entered allmulticast mode [ 73.374340][ T5110] bridge_slave_0: entered promiscuous mode [ 73.419824][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.429345][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.436675][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.443868][ T5117] bridge_slave_0: entered allmulticast mode [ 73.452093][ T5117] bridge_slave_0: entered promiscuous mode [ 73.460038][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.468353][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.475545][ T5110] bridge_slave_1: entered allmulticast mode [ 73.482871][ T5110] bridge_slave_1: entered promiscuous mode [ 73.522647][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.545193][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.552483][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.560654][ T5117] bridge_slave_1: entered allmulticast mode [ 73.567990][ T5117] bridge_slave_1: entered promiscuous mode [ 73.638458][ T5113] team0: Port device team_slave_0 added [ 73.659406][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.672755][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.701277][ T5113] team0: Port device team_slave_1 added [ 73.743373][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.751094][ T5119] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.758538][ T5119] bridge_slave_0: entered allmulticast mode [ 73.765667][ T5119] bridge_slave_0: entered promiscuous mode [ 73.787250][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.822560][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.831181][ T5119] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.838879][ T5119] bridge_slave_1: entered allmulticast mode [ 73.845996][ T5119] bridge_slave_1: entered promiscuous mode [ 73.873150][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.899034][ T5110] team0: Port device team_slave_0 added [ 73.932196][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.942802][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.970105][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.996606][ T5110] team0: Port device team_slave_1 added [ 74.002738][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.010778][ T5121] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.018474][ T5121] bridge_slave_0: entered allmulticast mode [ 74.025508][ T5121] bridge_slave_0: entered promiscuous mode [ 74.035746][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.043100][ T5121] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.050443][ T5121] bridge_slave_1: entered allmulticast mode [ 74.058293][ T5121] bridge_slave_1: entered promiscuous mode [ 74.082403][ T5119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.092307][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.100072][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.127132][ T5112] Bluetooth: hci0: command tx timeout [ 74.140221][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.155059][ T5117] team0: Port device team_slave_0 added [ 74.165001][ T5117] team0: Port device team_slave_1 added [ 74.186282][ T5112] Bluetooth: hci1: command tx timeout [ 74.222193][ T5119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.280565][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.287988][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.314083][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.329078][ T5121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.339983][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.347422][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.347965][ T5112] Bluetooth: hci2: command tx timeout [ 74.379365][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.410049][ T5119] team0: Port device team_slave_0 added [ 74.418441][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.425416][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.429129][ T5112] Bluetooth: hci3: command tx timeout [ 74.451581][ T5117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.454573][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.457396][ T53] Bluetooth: hci4: command tx timeout [ 74.481226][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.507858][ T5117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.521292][ T5121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.549606][ T5119] team0: Port device team_slave_1 added [ 74.647428][ T5121] team0: Port device team_slave_0 added [ 74.654704][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.662436][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.689801][ T5119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.719177][ T5113] hsr_slave_0: entered promiscuous mode [ 74.727353][ T5113] hsr_slave_1: entered promiscuous mode [ 74.739462][ T5110] hsr_slave_0: entered promiscuous mode [ 74.748054][ T5110] hsr_slave_1: entered promiscuous mode [ 74.754755][ T5110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.763270][ T5110] Cannot create hsr debugfs directory [ 74.773248][ T5121] team0: Port device team_slave_1 added [ 74.792729][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.803643][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.830439][ T5119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.935951][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.943236][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.969713][ T5121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.984712][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.992093][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.018405][ T5121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.053301][ T5117] hsr_slave_0: entered promiscuous mode [ 75.060102][ T5117] hsr_slave_1: entered promiscuous mode [ 75.066969][ T5117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.074551][ T5117] Cannot create hsr debugfs directory [ 75.136787][ T5119] hsr_slave_0: entered promiscuous mode [ 75.143475][ T5119] hsr_slave_1: entered promiscuous mode [ 75.156322][ T5119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.163912][ T5119] Cannot create hsr debugfs directory [ 75.277222][ T5121] hsr_slave_0: entered promiscuous mode [ 75.283702][ T5121] hsr_slave_1: entered promiscuous mode [ 75.292389][ T5121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.300210][ T5121] Cannot create hsr debugfs directory [ 75.738540][ T5110] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.757093][ T5110] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.768497][ T5110] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.792097][ T5110] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.848573][ T5113] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.864920][ T5113] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.877502][ T5113] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.892056][ T5113] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.998587][ T5119] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.014877][ T5119] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.028053][ T5119] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.045108][ T5119] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.163230][ T5117] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.183851][ T5117] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.190905][ T5112] Bluetooth: hci0: command tx timeout [ 76.207977][ T5117] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.221550][ T5117] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.267543][ T5112] Bluetooth: hci1: command tx timeout [ 76.309948][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.393340][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.402318][ T5121] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.419978][ T5121] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.434600][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.441561][ T5112] Bluetooth: hci2: command tx timeout [ 76.471154][ T5121] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.483116][ T5121] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.506636][ T5112] Bluetooth: hci3: command tx timeout [ 76.512454][ T5112] Bluetooth: hci4: command tx timeout [ 76.571711][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.579115][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.595971][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.603237][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.662602][ T5119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.675271][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.704764][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.712000][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.761920][ T5119] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.779583][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.812710][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.819933][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.832413][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.839629][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.885984][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.893218][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.955451][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.055032][ T5110] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.068392][ T5110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.084023][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.091205][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.115538][ T5119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.142235][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.149501][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.282906][ T5117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.342548][ T5121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.375244][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.425939][ T5121] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.471721][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.478940][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.572292][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.579544][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.755200][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.777840][ T5119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.892987][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.001866][ T5110] veth0_vlan: entered promiscuous mode [ 78.092834][ T5110] veth1_vlan: entered promiscuous mode [ 78.132870][ T5119] veth0_vlan: entered promiscuous mode [ 78.173724][ T5117] veth0_vlan: entered promiscuous mode [ 78.189361][ T5119] veth1_vlan: entered promiscuous mode [ 78.220808][ T5113] veth0_vlan: entered promiscuous mode [ 78.233005][ T5117] veth1_vlan: entered promiscuous mode [ 78.247277][ T5121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.259208][ T5113] veth1_vlan: entered promiscuous mode [ 78.266723][ T5112] Bluetooth: hci0: command tx timeout [ 78.344551][ T5117] veth0_macvtap: entered promiscuous mode [ 78.351775][ T5112] Bluetooth: hci1: command tx timeout [ 78.370960][ T5110] veth0_macvtap: entered promiscuous mode [ 78.389302][ T5119] veth0_macvtap: entered promiscuous mode [ 78.431932][ T5117] veth1_macvtap: entered promiscuous mode [ 78.440052][ T5113] veth0_macvtap: entered promiscuous mode [ 78.451673][ T5113] veth1_macvtap: entered promiscuous mode [ 78.465519][ T5119] veth1_macvtap: entered promiscuous mode [ 78.479054][ T5110] veth1_macvtap: entered promiscuous mode [ 78.507799][ T5112] Bluetooth: hci2: command tx timeout [ 78.518478][ T5121] veth0_vlan: entered promiscuous mode [ 78.534162][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.567237][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.578412][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.588781][ T53] Bluetooth: hci3: command tx timeout [ 78.594305][ T5112] Bluetooth: hci4: command tx timeout [ 78.602741][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.621530][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.632473][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.642492][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.654941][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.668073][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.685756][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.699564][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.711024][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.721878][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.733277][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.743625][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.754273][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.766885][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.776479][ T5121] veth1_vlan: entered promiscuous mode [ 78.786613][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.797241][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.810024][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.819276][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.830028][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.841510][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.852039][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.863990][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.882777][ T5117] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.893113][ T5117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.902526][ T5117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.911872][ T5117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.933209][ T5119] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.943209][ T5119] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.953402][ T5119] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.962506][ T5119] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.980600][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.991331][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.002535][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.013342][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.023563][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.034111][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.046353][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.072003][ T5113] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.080949][ T5113] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.089952][ T5113] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.098825][ T5113] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.111923][ T5110] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.121547][ T5110] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.130331][ T5110] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.139119][ T5110] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.285267][ T5121] veth0_macvtap: entered promiscuous mode [ 79.339352][ T5121] veth1_macvtap: entered promiscuous mode [ 79.364468][ T987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.373732][ T987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.430395][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.441591][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.452657][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.463349][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.473667][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.484247][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.494442][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.504983][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.518854][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.544723][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.556963][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.567466][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.578309][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.588687][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.599872][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.609849][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.620391][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.634542][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.662028][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.670097][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.673981][ T5121] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.688476][ T5121] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.697868][ T5121] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.706884][ T5121] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.761088][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.775068][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.801409][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.813129][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.851447][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.862729][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.953220][ T987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.966804][ T987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.012081][ T987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.021825][ T987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.145296][ T987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.177324][ T987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.272773][ T5197] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.355589][ T5112] Bluetooth: hci0: command tx timeout [ 80.390095][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.428669][ T5112] Bluetooth: hci1: command tx timeout [ 80.436460][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.589760][ T5112] Bluetooth: hci2: command tx timeout [ 80.663916][ T987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.673255][ T53] Bluetooth: hci3: command tx timeout [ 80.679545][ T5112] Bluetooth: hci4: command tx timeout [ 80.698847][ T5212] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.718537][ T987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.251871][ T5230] netlink: 'syz-executor.1': attribute type 14 has an invalid length. [ 83.446293][ T5240] net_ratelimit: 2 callbacks suppressed [ 83.446311][ T5240] geneve1: mtu less than device minimum [ 83.484449][ T5240] bond_slave_0: entered promiscuous mode [ 83.490443][ T5240] bond_slave_1: entered promiscuous mode [ 83.581238][ T5234] bond_slave_0: left promiscuous mode [ 83.587258][ T5234] bond_slave_1: left promiscuous mode [ 83.744310][ T5251] netlink: 67 bytes leftover after parsing attributes in process `syz-executor.3'. [ 83.803807][ T5251] IPv6: NLM_F_CREATE should be specified when creating new route [ 83.887981][ T5251] IPv6: Can't replace route, no match found [ 83.913756][ T5257] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 84.289012][ T5272] netlink: 'syz-executor.0': attribute type 14 has an invalid length. [ 85.017491][ T5302] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 86.262342][ T5355] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 86.279860][ T5355] bridge_slave_1: left allmulticast mode [ 86.311551][ T5355] bridge_slave_1: left promiscuous mode [ 86.326005][ T5355] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.375559][ T5355] bridge_slave_0: left allmulticast mode [ 86.404160][ T5355] bridge_slave_0: left promiscuous mode [ 86.425385][ T5355] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.428336][ T5366] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 87.072189][ T784] cfg80211: failed to load regulatory.db [ 87.416774][ T5401] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 88.707594][ T5451] netlink: 67 bytes leftover after parsing attributes in process `syz-executor.3'. [ 88.730920][ T5451] IPv6: Can't replace route, no match found [ 89.132659][ T5463] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 89.545917][ T5486] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 89.580528][ T5487] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 90.462699][ T5521] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 90.710415][ T5528] vlan0: entered promiscuous mode [ 90.731182][ T5528] vlan0: entered allmulticast mode [ 90.753402][ T5528] veth0_vlan: entered allmulticast mode [ 90.800797][ T5528] team0: Port device vlan0 added [ 90.959219][ T5534] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 90.984842][ T5534] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 91.657398][ T5563] Bluetooth: MGMT ver 1.22 [ 92.119791][ T5580] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.363653][ T5626] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 93.383174][ T5633] trusted_key: syz-executor.3 sent an empty control message without MSG_MORE. [ 93.483065][ C1] Illegal XDP return value 16128 on prog (id 34) dev hsr_slave_1, expect packet loss! [ 94.105122][ T5655] xt_hashlimit: max too large, truncated to 1048576 [ 94.141546][ T5655] xt_hashlimit: overflow, try lower: 0/0 [ 94.601586][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.921463][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.953675][ T5678] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 95.164948][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.242876][ T5687] Bluetooth: MGMT ver 1.22 [ 95.275724][ T5684] vlan0: entered promiscuous mode [ 95.281285][ T5684] vlan0: entered allmulticast mode [ 95.314417][ T5684] veth0_vlan: entered allmulticast mode [ 95.372904][ T5684] team0: Port device vlan0 added [ 95.524986][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.894799][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.913139][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.929696][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.942102][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.951829][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 95.966592][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.002180][ T5712] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 96.137477][ T51] bridge_slave_1: left allmulticast mode [ 96.143421][ T51] bridge_slave_1: left promiscuous mode [ 96.199226][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.283484][ T51] bridge_slave_0: left allmulticast mode [ 96.291191][ T5718] xt_hashlimit: max too large, truncated to 1048576 [ 96.296330][ T51] bridge_slave_0: left promiscuous mode [ 96.307815][ T5718] xt_hashlimit: overflow, try lower: 0/0 [ 96.311099][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.980292][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.993214][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.008380][ T51] bond0 (unregistering): Released all slaves [ 97.294194][ T5740] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.460712][ T5753] netlink: 872 bytes leftover after parsing attributes in process `syz-executor.1'. [ 98.032087][ T53] Bluetooth: hci2: command tx timeout [ 98.231819][ T51] hsr_slave_0: left promiscuous mode [ 98.263752][ T51] hsr_slave_1: left promiscuous mode [ 98.321831][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.365722][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.397440][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.416185][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.530924][ T51] veth1_macvtap: left promiscuous mode [ 98.541820][ T51] veth0_macvtap: left promiscuous mode [ 98.561391][ T51] veth1_vlan: left promiscuous mode [ 98.580698][ T51] veth0_vlan: left promiscuous mode [ 99.282654][ T51] team0 (unregistering): Port device team_slave_1 removed [ 99.295847][ T5818] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 99.329116][ T51] team0 (unregistering): Port device team_slave_0 removed [ 99.850000][ T5789] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 99.866511][ T5789] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 100.106704][ T53] Bluetooth: hci2: command tx timeout [ 101.476632][ T5706] chnl_net:caif_netlink_parms(): no params data found [ 101.765282][ T5851] IPv6: Can't replace route, no match found [ 102.005308][ T5871] netlink: 344 bytes leftover after parsing attributes in process `syz-executor.1'. [ 102.107802][ T5873] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 102.186364][ T53] Bluetooth: hci2: command tx timeout [ 102.260083][ T5706] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.278692][ T5706] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.293439][ T5706] bridge_slave_0: entered allmulticast mode [ 102.314162][ T5706] bridge_slave_0: entered promiscuous mode [ 102.354158][ T5706] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.392591][ T5706] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.422478][ T5706] bridge_slave_1: entered allmulticast mode [ 102.453491][ T5706] bridge_slave_1: entered promiscuous mode [ 102.617169][ T5706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.664771][ T5706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.839115][ T5706] team0: Port device team_slave_0 added [ 102.914253][ T5706] team0: Port device team_slave_1 added [ 103.159486][ T5706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.166623][ T5706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.211373][ T5706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.314101][ T5706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.322763][ T5706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.392731][ T5706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.667958][ T5706] hsr_slave_0: entered promiscuous mode [ 103.687109][ T5706] hsr_slave_1: entered promiscuous mode [ 103.703228][ T5706] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.727322][ T5706] Cannot create hsr debugfs directory [ 103.832780][ T5923] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 104.266628][ T53] Bluetooth: hci2: command tx timeout [ 104.527094][ T5958] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.046802][ T5979] netlink: 344 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.203045][ T5984] xt_l2tp: missing protocol rule (udp|l2tpip) [ 105.436934][ T5993] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.630933][ T5999] IPv6: Can't replace route, no match found [ 105.676780][ T5706] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.721171][ T5995] tun0: tun_chr_ioctl cmd 2147767507 [ 105.785496][ T5706] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.833054][ T5706] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.908460][ T5706] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.089629][ T6013] vlan3: entered promiscuous mode [ 106.095043][ T6013] bridge0: entered promiscuous mode [ 106.174936][ T6013] team0: Port device vlan3 added [ 106.439987][ T5706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.492076][ T6028] netlink: 45 bytes leftover after parsing attributes in process `syz-executor.3'. [ 106.563225][ T5706] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.612223][ T5190] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.619569][ T5190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.630844][ T5190] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.638361][ T5190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.755545][ T6041] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 106.823571][ T5706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.354753][ T6069] syz_tun: entered promiscuous mode [ 107.410207][ T6069] syz_tun: left promiscuous mode [ 107.520150][ T6073] tipc: Started in network mode [ 107.525700][ T6073] tipc: Node identity 1, cluster identity 4711 [ 107.538033][ T6073] tipc: Node number set to 1 [ 107.557772][ T6073] tipc: Cannot configure node identity twice [ 107.641786][ T5706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.893692][ T5706] veth0_vlan: entered promiscuous mode [ 107.995998][ T5706] veth1_vlan: entered promiscuous mode [ 108.215218][ T5706] veth0_macvtap: entered promiscuous mode [ 108.273183][ T5706] veth1_macvtap: entered promiscuous mode [ 108.374042][ T5706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.408370][ T6089] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.452897][ T5706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.532613][ T5706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.559133][ T5706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.589876][ T5706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.638129][ T5706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.676316][ T5706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.731928][ T6102] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 108.735318][ T5706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.799239][ T5706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.812982][ T5706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.840234][ T5706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.850709][ T5706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.877990][ T5706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.907175][ T5706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.933622][ T5706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.956593][ T5706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.969927][ T5706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.004186][ T5706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.048167][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 109.154242][ T5706] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.174977][ T5706] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.186502][ T5706] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.198715][ T5706] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.234343][ T6118] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 109.545754][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.576833][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.673778][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.694113][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.373150][ T6157] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 110.675349][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.236489][ T6190] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 111.481537][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.191457][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.264124][ T6226] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 112.525099][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.578507][ T6237] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! [ 112.670050][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.738641][ T6245] syz_tun: entered promiscuous mode [ 112.755869][ T6245] syz_tun: left promiscuous mode [ 112.818258][ T5112] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 112.829183][ T5112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 112.838318][ T5112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 112.850864][ T5112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 112.860083][ T5112] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 112.868477][ T5112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.463879][ T62] bridge_slave_1: left allmulticast mode [ 113.486278][ T62] bridge_slave_1: left promiscuous mode [ 113.492180][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.538934][ T62] bridge_slave_0: left allmulticast mode [ 113.556882][ T62] bridge_slave_0: left promiscuous mode [ 113.562850][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.177451][ T6302] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.336897][ T4544] udevd[4544]: worker [5157] terminated by signal 33 (Unknown signal 33) [ 114.514980][ T6310] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.4'. [ 114.805640][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.829741][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.856232][ T62] bond0 (unregistering): Released all slaves [ 114.906787][ T5112] Bluetooth: hci2: command tx timeout [ 115.458922][ T6249] chnl_net:caif_netlink_parms(): no params data found [ 115.607191][ T62] hsr_slave_0: left promiscuous mode [ 115.630924][ T62] hsr_slave_1: left promiscuous mode [ 115.648805][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.669405][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.699087][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.719875][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.782816][ T62] veth1_macvtap: left promiscuous mode [ 115.819311][ T62] veth0_macvtap: left promiscuous mode [ 115.825055][ T62] veth1_vlan: left promiscuous mode [ 115.856311][ T62] veth0_vlan: left promiscuous mode [ 116.103810][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.113678][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.126284][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.134649][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.142760][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 116.151257][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.184839][ T6365] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 116.215421][ T6365] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 116.765116][ T62] team0 (unregistering): Port device team_slave_1 removed [ 116.823473][ T62] team0 (unregistering): Port device team_slave_0 removed [ 116.986577][ T53] Bluetooth: hci2: command tx timeout [ 117.547670][ T6249] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.581618][ T6249] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.612708][ T6249] bridge_slave_0: entered allmulticast mode [ 117.641803][ T6249] bridge_slave_0: entered promiscuous mode [ 117.668555][ T6249] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.675765][ T6249] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.686905][ T6249] bridge_slave_1: entered allmulticast mode [ 117.694479][ T6249] bridge_slave_1: entered promiscuous mode [ 117.817539][ T6249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.864296][ T6249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.186512][ T53] Bluetooth: hci0: command tx timeout [ 118.246552][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.280641][ T6429] delete_channel: no stack [ 118.319579][ T6249] team0: Port device team_slave_0 added [ 118.347802][ T6249] team0: Port device team_slave_1 added [ 118.458811][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.586423][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.605094][ T6249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.613295][ T6249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.639890][ T6249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.679156][ T6249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.697850][ T6249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.734787][ T6249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.841041][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.041353][ T6249] hsr_slave_0: entered promiscuous mode [ 119.060390][ T6249] hsr_slave_1: entered promiscuous mode [ 119.076609][ T53] Bluetooth: hci2: command tx timeout [ 119.083573][ T6249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.096129][ T6249] Cannot create hsr debugfs directory [ 119.252073][ T6362] chnl_net:caif_netlink_parms(): no params data found [ 119.491144][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 119.785158][ T62] bridge_slave_1: left allmulticast mode [ 119.793691][ T62] bridge_slave_1: left promiscuous mode [ 119.811817][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.833778][ T62] bridge_slave_0: left allmulticast mode [ 119.841557][ T62] bridge_slave_0: left promiscuous mode [ 119.855182][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.935566][ T6493] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.022402][ T6496] netlink: 'syz-executor.0': attribute type 33 has an invalid length. [ 120.266424][ T53] Bluetooth: hci0: command tx timeout [ 120.355037][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.373188][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.387486][ T62] bond0 (unregistering): Released all slaves [ 120.421854][ T6362] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.439090][ T6362] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.456387][ T6362] bridge_slave_0: entered allmulticast mode [ 120.468951][ T6362] bridge_slave_0: entered promiscuous mode [ 120.510768][ T6508] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.527682][ T6491] warning: `syz-executor.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 120.557735][ T6362] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.574489][ T6362] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.603158][ T6362] bridge_slave_1: entered allmulticast mode [ 120.620198][ T6362] bridge_slave_1: entered promiscuous mode [ 120.788322][ T6518] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 121.146485][ T53] Bluetooth: hci2: command tx timeout [ 121.674101][ T6362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.699665][ T6362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.072375][ T6540] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 122.097105][ T6540] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.112669][ T6540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.310644][ T6362] team0: Port device team_slave_0 added [ 122.331030][ T6362] team0: Port device team_slave_1 added [ 122.349347][ T53] Bluetooth: hci0: command tx timeout [ 122.488717][ T29] audit: type=1804 audit(1718734847.224:2): pid=6553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3102477797/syzkaller.UzMuGd/124/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 122.527577][ T62] hsr_slave_0: left promiscuous mode [ 122.542931][ T62] hsr_slave_1: left promiscuous mode [ 122.573863][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.584122][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.597691][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.611264][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.641651][ T62] veth1_macvtap: left promiscuous mode [ 122.647539][ T62] veth0_macvtap: left promiscuous mode [ 122.653245][ T62] veth1_vlan: left promiscuous mode [ 122.665058][ T62] veth0_vlan: left promiscuous mode [ 123.129781][ T6568] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 123.240475][ T62] team0 (unregistering): Port device team_slave_1 removed [ 123.280236][ T62] team0 (unregistering): Port device team_slave_0 removed [ 123.759487][ T6362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.783034][ T6362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.823588][ T6362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.839678][ T6362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.846951][ T6362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.874797][ T6362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.101926][ T6362] hsr_slave_0: entered promiscuous mode [ 124.137959][ T6362] hsr_slave_1: entered promiscuous mode [ 124.153018][ T6362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.167114][ T6362] Cannot create hsr debugfs directory [ 124.339386][ T6249] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 124.373825][ T6249] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 124.426239][ T53] Bluetooth: hci0: command tx timeout [ 124.451017][ T6249] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 124.465036][ T6249] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 124.630743][ T6602] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 124.879184][ T6249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.943491][ T6249] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.971558][ T5190] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.978809][ T5190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.007591][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.014782][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.215867][ T6362] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 125.231797][ T6362] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 125.251711][ T6362] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 125.304836][ T6362] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 125.497481][ T6249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.699355][ T6362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.740308][ T6249] veth0_vlan: entered promiscuous mode [ 125.844457][ T6249] veth1_vlan: entered promiscuous mode [ 125.895392][ T6362] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.951884][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.959152][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.989484][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.996735][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.055368][ T6648] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 126.118577][ T6249] veth0_macvtap: entered promiscuous mode [ 126.175688][ T6249] veth1_macvtap: entered promiscuous mode [ 126.296646][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 126.326678][ T6249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.373313][ T6249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.400354][ T6249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.411294][ T6249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.432158][ T6249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.445294][ T6249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.457704][ T6249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.478541][ T6249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.501573][ T6249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.526129][ T6249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.546957][ T6249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.564712][ T6249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.589768][ T6249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.608960][ T6668] sctp: [Deprecated]: syz-executor.0 (pid 6668) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.608960][ T6668] Use struct sctp_sack_info instead [ 126.614956][ T6249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.669782][ T6249] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.684670][ T6249] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.712223][ T6249] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.722054][ T6249] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.793692][ T6676] delete_channel: no stack [ 127.008267][ T6362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.019453][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.042651][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.150064][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.185659][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.253782][ T6362] veth0_vlan: entered promiscuous mode [ 127.287286][ T6362] veth1_vlan: entered promiscuous mode [ 127.358395][ T6697] sctp: [Deprecated]: syz-executor.3 (pid 6697) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.358395][ T6697] Use struct sctp_sack_info instead [ 127.467465][ T6362] veth0_macvtap: entered promiscuous mode [ 127.486082][ T6362] veth1_macvtap: entered promiscuous mode [ 127.542270][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.566378][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.588399][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.602420][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.615898][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.634301][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.646005][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.659237][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.674829][ T6362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.698369][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.724312][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.746498][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.760272][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.771383][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.782159][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.801930][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.815199][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.829638][ T6362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.873973][ T6362] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.894090][ T6362] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.906257][ T6362] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.922335][ T6362] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.978915][ T6720] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 128.165167][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.196469][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.198381][ T6729] dccp_invalid_packet: P.Data Offset(0) too small [ 128.280783][ T987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.304991][ T987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.803137][ T6763] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.822296][ T6763] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 129.147582][ T6775] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 129.300005][ T6785] sctp: [Deprecated]: syz-executor.3 (pid 6785) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.300005][ T6785] Use struct sctp_sack_info instead [ 129.337863][ T6787] tc_dump_action: action bad kind [ 129.454811][ T6793] Bluetooth: MGMT ver 1.22 [ 129.575138][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.685446][ T29] audit: type=1804 audit(1718734854.424:3): pid=6803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir126318333/syzkaller.u5kiau/14/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 130.063211][ T6815] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 130.273934][ T6791] syz-executor.0 (6791) used greatest stack depth: 16888 bytes left [ 130.303818][ T5112] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 130.315140][ T5112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 130.345153][ T5112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 130.364209][ T5112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 130.375553][ T5112] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 130.384242][ T5112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 130.524111][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.705745][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.882833][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.281562][ T11] bridge_slave_1: left allmulticast mode [ 131.296748][ T11] bridge_slave_1: left promiscuous mode [ 131.303427][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.362572][ T11] bridge_slave_0: left allmulticast mode [ 131.374937][ T11] bridge_slave_0: left promiscuous mode [ 131.384130][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.428672][ T29] audit: type=1804 audit(1718734856.164:4): pid=6875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3164446318/syzkaller.f8Q2aj/123/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 131.996415][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.009131][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.021367][ T11] bond0 (unregistering): Released all slaves [ 132.082908][ T6894] team_slave_0: entered promiscuous mode [ 132.088998][ T6894] team_slave_1: entered promiscuous mode [ 132.100460][ T6894] macsec1: entered promiscuous mode [ 132.108069][ T6894] team0: entered promiscuous mode [ 132.129719][ T6894] macsec1: entered allmulticast mode [ 132.135089][ T6894] team0: entered allmulticast mode [ 132.144809][ T6894] team_slave_0: entered allmulticast mode [ 132.153942][ T6894] team_slave_1: entered allmulticast mode [ 132.170418][ T6894] vlan3: entered allmulticast mode [ 132.181836][ T6894] bridge0: entered allmulticast mode [ 132.216366][ T6822] chnl_net:caif_netlink_parms(): no params data found [ 132.507236][ T53] Bluetooth: hci2: command tx timeout [ 132.698714][ T29] audit: type=1804 audit(1718734857.424:5): pid=6922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir126318333/syzkaller.u5kiau/25/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 132.731968][ T6822] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.752179][ T6822] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.759787][ T6822] bridge_slave_0: entered allmulticast mode [ 132.767470][ T6822] bridge_slave_0: entered promiscuous mode [ 132.790253][ T11] hsr_slave_0: left promiscuous mode [ 132.796809][ T11] hsr_slave_1: left promiscuous mode [ 132.847631][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.865995][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.875854][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.883648][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.932323][ T11] veth1_macvtap: left promiscuous mode [ 132.943534][ T11] veth0_macvtap: left promiscuous mode [ 132.950305][ T11] veth1_vlan: left promiscuous mode [ 132.955796][ T11] veth0_vlan: left promiscuous mode [ 133.153899][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.160687][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.516282][ T11] team0 (unregistering): Port device team_slave_1 removed [ 133.554587][ T11] team0 (unregistering): Port device team_slave_0 removed [ 133.951285][ T6822] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.959221][ T6822] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.967775][ T6822] bridge_slave_1: entered allmulticast mode [ 133.975583][ T6822] bridge_slave_1: entered promiscuous mode [ 134.005422][ T6938] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 134.013800][ T6938] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.4'. [ 134.161153][ T6822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.206898][ T6822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.332620][ T6822] team0: Port device team_slave_0 added [ 134.350594][ T6822] team0: Port device team_slave_1 added [ 134.455227][ T6822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.463360][ T6822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.493169][ T6822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.508663][ T6956] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 134.558970][ T6822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.586490][ T53] Bluetooth: hci2: command tx timeout [ 134.595747][ T6822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.634957][ T29] audit: type=1804 audit(1718734859.374:6): pid=6966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3102477797/syzkaller.UzMuGd/179/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 134.662875][ T6822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.676181][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 134.879481][ T6822] hsr_slave_0: entered promiscuous mode [ 134.886496][ T6822] hsr_slave_1: entered promiscuous mode [ 134.896578][ T6822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.919372][ T6822] Cannot create hsr debugfs directory [ 135.090706][ T6983] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 135.281311][ T6992] syz-executor.1[6992] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.281576][ T6992] syz-executor.1[6992] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.621049][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 135.701882][ T7009] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.712997][ T7009] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.722597][ T7009] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.731649][ T7009] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.749695][ T7009] vxlan0: entered promiscuous mode [ 135.858250][ T7019] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 135.913526][ T6822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 135.950796][ T6822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 135.975689][ T6822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 136.015068][ T6822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 136.075999][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.275233][ T6822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.321724][ T6822] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.354260][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.361547][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.411970][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.419238][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.666230][ T53] Bluetooth: hci2: command tx timeout [ 136.940645][ T7053] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 136.946979][ T6822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.082718][ T6822] veth0_vlan: entered promiscuous mode [ 137.132529][ T6822] veth1_vlan: entered promiscuous mode [ 137.259252][ T6822] veth0_macvtap: entered promiscuous mode [ 137.285945][ T6822] veth1_macvtap: entered promiscuous mode [ 137.354614][ T6822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.368472][ T6822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.384423][ T6822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.404945][ T6822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.423805][ T6822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.446954][ T6822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.475918][ T6822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.507211][ T6822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.529428][ T6822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.601643][ T6822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.624620][ T6822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.640322][ T6822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.651510][ T6822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.686127][ T6822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.717323][ T6822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.739718][ T6822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.754349][ T6822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.801825][ T6822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.812085][ T7071] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 137.900838][ T6822] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.910503][ T6822] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.920821][ T6822] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.930390][ T6822] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.019727][ T7087] syz-executor.3[7087] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.019891][ T7087] syz-executor.3[7087] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.270407][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.321134][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.395426][ T2892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.424403][ T2892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.775572][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.167624][ T5112] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 141.178218][ T5112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 141.185954][ T5112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 141.194787][ T5112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 141.203443][ T5112] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 141.213922][ T5112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 141.380036][ T7109] chnl_net:caif_netlink_parms(): no params data found [ 141.455684][ T7109] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.462970][ T7109] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.474350][ T7109] bridge_slave_0: entered allmulticast mode [ 141.483526][ T7109] bridge_slave_0: entered promiscuous mode [ 141.492559][ T7109] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.500294][ T7109] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.508953][ T7109] bridge_slave_1: entered allmulticast mode [ 141.516188][ T7109] bridge_slave_1: entered promiscuous mode [ 141.557807][ T7109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.571124][ T7109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.609947][ T7109] team0: Port device team_slave_0 added [ 141.619504][ T7109] team0: Port device team_slave_1 added [ 141.653834][ T7109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.660959][ T7109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.689237][ T7109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.701661][ T7109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.709073][ T7109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.736005][ T7109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.785861][ T7109] hsr_slave_0: entered promiscuous mode [ 141.794994][ T7109] hsr_slave_1: entered promiscuous mode [ 141.803250][ T7109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.811146][ T7109] Cannot create hsr debugfs directory [ 142.260839][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.312962][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.383236][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.485745][ T11] bridge_slave_1: left allmulticast mode [ 142.491567][ T11] bridge_slave_1: left promiscuous mode [ 142.498462][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.510948][ T11] bridge_slave_0: left allmulticast mode [ 142.518379][ T11] bridge_slave_0: left promiscuous mode [ 142.524125][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.025639][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.052276][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.078184][ T11] bond0 (unregistering): Released all slaves [ 143.124849][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.265566][ T7139] syz-executor.1[7139] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.265732][ T7139] syz-executor.1[7139] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.308157][ T53] Bluetooth: hci2: command tx timeout [ 143.513081][ T7143] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 143.568146][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 144.384819][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 144.459730][ T11] hsr_slave_0: left promiscuous mode [ 144.496627][ T11] hsr_slave_1: left promiscuous mode [ 144.503630][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.520642][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.542145][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.561553][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.610416][ T11] veth1_macvtap: left promiscuous mode [ 144.621800][ T11] veth0_macvtap: left promiscuous mode [ 144.631948][ T11] veth1_vlan: left promiscuous mode [ 144.642425][ T11] veth0_vlan: left promiscuous mode [ 145.398934][ T53] Bluetooth: hci2: command tx timeout [ 145.414040][ T11] team0 (unregistering): Port device team_slave_1 removed [ 145.451905][ T11] team0 (unregistering): Port device team_slave_0 removed [ 145.990881][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 146.018509][ T7109] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 146.055518][ T7109] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 146.105757][ T7109] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 146.113759][ T7219] sctp: [Deprecated]: syz-executor.3 (pid 7219) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.113759][ T7219] Use struct sctp_sack_info instead [ 146.170065][ T7109] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 146.523122][ T7109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.585907][ T7109] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.611048][ T7243] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 146.637916][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.646315][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.665184][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.672629][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.143613][ T7109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.304276][ T7109] veth0_vlan: entered promiscuous mode [ 147.327840][ T7109] veth1_vlan: entered promiscuous mode [ 147.385613][ T7109] veth0_macvtap: entered promiscuous mode [ 147.403895][ T7109] veth1_macvtap: entered promiscuous mode [ 147.452429][ T7109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.466954][ T53] Bluetooth: hci2: command tx timeout [ 147.506249][ T7109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.528952][ T7109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.547110][ T7109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.566493][ T7109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.579434][ T7109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.599643][ T7109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.611892][ T7109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.669476][ T7109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.707885][ T7109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.740995][ T7109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.767743][ T7109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.786197][ T7109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.806559][ T7109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.818263][ T7109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.850562][ T7109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.867461][ T7109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.883866][ T7109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.922205][ T7281] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 147.981297][ T7109] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.026456][ T7109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.054104][ T7109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.068238][ T7109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.333506][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.353711][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.441418][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.480568][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.535292][ T7325] Â: renamed from pim6reg1 [ 148.697345][ T7329] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 149.040110][ T7331] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 149.506342][ T7359] team0: entered promiscuous mode [ 149.511446][ T7359] team_slave_0: entered promiscuous mode [ 149.536331][ T7359] team_slave_1: entered promiscuous mode [ 149.576842][ T7357] team0: left promiscuous mode [ 149.581901][ T7357] team_slave_0: left promiscuous mode [ 149.611887][ T7357] team_slave_1: left promiscuous mode [ 149.648640][ T5112] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.658991][ T5112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.672171][ T5112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.681256][ T5112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.690528][ T5112] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 149.698141][ T5112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.945720][ T7367] chnl_net:caif_netlink_parms(): no params data found [ 150.201997][ T7367] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.212163][ T7367] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.222294][ T7367] bridge_slave_0: entered allmulticast mode [ 150.237692][ T7367] bridge_slave_0: entered promiscuous mode [ 150.247045][ T7367] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.254367][ T7367] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.261819][ T7367] bridge_slave_1: entered allmulticast mode [ 150.270499][ T7367] bridge_slave_1: entered promiscuous mode [ 150.338299][ T7367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.369048][ T7367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.414716][ T7398] Zero length message leads to an empty skb [ 150.450371][ T7367] team0: Port device team_slave_0 added [ 150.465090][ T7367] team0: Port device team_slave_1 added [ 150.548125][ T7367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.555133][ T7367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.600649][ T29] audit: type=1804 audit(1718734875.334:7): pid=7401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3102477797/syzkaller.UzMuGd/230/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 150.636465][ T7367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.850619][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.937631][ T7367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.944646][ T7367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.978890][ T7367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.988488][ T7415] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 151.009469][ T7415] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4. [ 151.158476][ T7367] hsr_slave_0: entered promiscuous mode [ 151.175608][ T7367] hsr_slave_1: entered promiscuous mode [ 151.186609][ T7367] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.194216][ T7367] Cannot create hsr debugfs directory [ 151.216436][ T7422] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 151.236289][ T7422] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 151.246404][ T7422] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 151.545973][ T7429] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 151.571187][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.581541][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.604050][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.612618][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.622774][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.632527][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.650055][ T7432] ================================================================== [ 151.658180][ T7432] BUG: KASAN: slab-use-after-free in skb_release_data+0x738/0x880 [ 151.666045][ T7432] Read of size 1 at addr ffff8880658bba7e by task syz-executor.2/7432 [ 151.674222][ T7432] [ 151.676581][ T7432] CPU: 1 PID: 7432 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 151.687019][ T7432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 151.697463][ T7432] Call Trace: [ 151.700838][ T7432] [ 151.703795][ T7432] dump_stack_lvl+0x241/0x360 [ 151.708512][ T7432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.713737][ T7432] ? __pfx__printk+0x10/0x10 [ 151.718350][ T7432] ? _printk+0xd5/0x120 [ 151.722523][ T7432] ? __virt_addr_valid+0x183/0x520 [ 151.727650][ T7432] ? __virt_addr_valid+0x183/0x520 [ 151.732772][ T7432] print_report+0x169/0x550 [ 151.737323][ T7432] ? __virt_addr_valid+0x183/0x520 [ 151.742440][ T7432] ? __virt_addr_valid+0x183/0x520 [ 151.747592][ T7432] ? __virt_addr_valid+0x44e/0x520 [ 151.752726][ T7432] ? __phys_addr+0xba/0x170 [ 151.757241][ T7432] ? skb_release_data+0x738/0x880 [ 151.762267][ T7432] kasan_report+0x143/0x180 [ 151.766800][ T7432] ? skb_release_data+0x738/0x880 [ 151.771839][ T7432] skb_release_data+0x738/0x880 [ 151.776704][ T7432] ? __hci_req_sync+0x62f/0x950 [ 151.781599][ T7432] kfree_skb_reason+0x1a3/0x3b0 [ 151.786462][ T7432] __hci_req_sync+0x62f/0x950 [ 151.791156][ T7432] ? __pfx___hci_req_sync+0x10/0x10 [ 151.796371][ T7432] ? __pfx___mutex_lock+0x10/0x10 [ 151.801412][ T7432] ? __pfx_hci_scan_req+0x10/0x10 [ 151.806438][ T7432] hci_req_sync+0xa9/0xd0 [ 151.810784][ T7432] hci_dev_cmd+0x4c5/0xa50 [ 151.815203][ T7432] ? security_capable+0x90/0xb0 [ 151.820075][ T7432] ? __pfx_hci_dev_cmd+0x10/0x10 [ 151.825018][ T7432] ? hci_sock_ioctl+0x6c4/0xa40 [ 151.829969][ T7432] sock_do_ioctl+0x158/0x460 [ 151.834622][ T7432] ? __pfx_sock_do_ioctl+0x10/0x10 [ 151.839752][ T7432] sock_ioctl+0x629/0x8e0 [ 151.844096][ T7432] ? __pfx_sock_ioctl+0x10/0x10 [ 151.848973][ T7432] ? __fget_files+0x29/0x470 [ 151.853595][ T7432] ? __fget_files+0x3f6/0x470 [ 151.858291][ T7432] ? __fget_files+0x29/0x470 [ 151.862902][ T7432] ? bpf_lsm_file_ioctl+0x9/0x10 [ 151.867856][ T7432] ? security_file_ioctl+0x87/0xb0 [ 151.872971][ T7432] ? __pfx_sock_ioctl+0x10/0x10 [ 151.877832][ T7432] __se_sys_ioctl+0xfc/0x170 [ 151.882431][ T7432] do_syscall_64+0xf3/0x230 [ 151.887048][ T7432] ? clear_bhb_loop+0x35/0x90 [ 151.891735][ T7432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.897648][ T7432] RIP: 0033:0x7fa84207cc8b [ 151.902067][ T7432] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 151.921676][ T7432] RSP: 002b:00007ffcfa20dd20 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.930111][ T7432] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fa84207cc8b [ 151.938085][ T7432] RDX: 00007ffcfa20dd98 RSI: 00000000400448dd RDI: 0000000000000003 [ 151.946063][ T7432] RBP: 000055556f33a430 R08: 0000000000000000 R09: 0000000000000000 [ 151.954048][ T7432] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000004 [ 151.962024][ T7432] R13: 0000000000000004 R14: 0000000000000003 R15: 000000000000000c [ 151.970010][ T7432] [ 151.973028][ T7432] [ 151.975347][ T7432] Allocated by task 53: [ 151.980104][ T7432] kasan_save_track+0x3f/0x80 [ 151.984893][ T7432] __kasan_slab_alloc+0x66/0x80 [ 151.989766][ T7432] kmem_cache_alloc_noprof+0x135/0x2a0 [ 151.995266][ T7432] skb_clone+0x20c/0x390 [ 151.999528][ T7432] hci_cmd_work+0x29e/0x670 [ 152.004051][ T7432] process_scheduled_works+0xa2c/0x1830 [ 152.009717][ T7432] worker_thread+0x86d/0xd70 [ 152.014318][ T7432] kthread+0x2f0/0x390 [ 152.018399][ T7432] ret_from_fork+0x4b/0x80 [ 152.022838][ T7432] ret_from_fork_asm+0x1a/0x30 [ 152.027744][ T7432] [ 152.030155][ T7432] Freed by task 53: [ 152.033977][ T7432] kasan_save_track+0x3f/0x80 [ 152.038673][ T7432] kasan_save_free_info+0x40/0x50 [ 152.043704][ T7432] poison_slab_object+0xe0/0x150 [ 152.048653][ T7432] __kasan_slab_free+0x37/0x60 [ 152.053435][ T7432] kmem_cache_free+0x145/0x350 [ 152.058198][ T7432] hci_req_sync_complete+0xe7/0x290 [ 152.063403][ T7432] hci_event_packet+0xc71/0x1540 [ 152.068344][ T7432] hci_rx_work+0x3e8/0xca0 [ 152.072766][ T7432] process_scheduled_works+0xa2c/0x1830 [ 152.078309][ T7432] worker_thread+0x86d/0xd70 [ 152.082901][ T7432] kthread+0x2f0/0x390 [ 152.086973][ T7432] ret_from_fork+0x4b/0x80 [ 152.091412][ T7432] ret_from_fork_asm+0x1a/0x30 [ 152.096183][ T7432] [ 152.098503][ T7432] The buggy address belongs to the object at ffff8880658bba00 [ 152.098503][ T7432] which belongs to the cache skbuff_head_cache of size 240 [ 152.113079][ T7432] The buggy address is located 126 bytes inside of [ 152.113079][ T7432] freed 240-byte region [ffff8880658bba00, ffff8880658bbaf0) [ 152.126880][ T7432] [ 152.129202][ T7432] The buggy address belongs to the physical page: [ 152.135613][ T7432] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x658bb [ 152.144379][ T7432] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 152.151494][ T7432] page_type: 0xffffefff(slab) [ 152.156196][ T7432] raw: 00fff00000000000 ffff888018ea1780 dead000000000122 0000000000000000 [ 152.164777][ T7432] raw: 0000000000000000 00000000000c000c 00000001ffffefff 0000000000000000 [ 152.173353][ T7432] page dumped because: kasan: bad access detected [ 152.179770][ T7432] page_owner tracks the page as allocated [ 152.185476][ T7432] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5158, tgid 5158 (kworker/0:5), ts 151646946846, free_ts 149094144585 [ 152.206267][ T7432] post_alloc_hook+0x1f3/0x230 [ 152.211053][ T7432] get_page_from_freelist+0x2e2d/0x2ee0 [ 152.216621][ T7432] __alloc_pages_noprof+0x256/0x6c0 [ 152.221845][ T7432] alloc_slab_page+0x5f/0x120 [ 152.226538][ T7432] allocate_slab+0x5a/0x2e0 [ 152.231066][ T7432] ___slab_alloc+0xcd1/0x14b0 [ 152.235761][ T7432] __slab_alloc+0x58/0xa0 [ 152.240112][ T7432] kmem_cache_alloc_node_noprof+0x1fe/0x320 [ 152.246014][ T7432] __alloc_skb+0x1c3/0x440 [ 152.250440][ T7432] nsim_dev_trap_report_work+0x254/0xaa0 [ 152.256083][ T7432] process_scheduled_works+0xa2c/0x1830 [ 152.261637][ T7432] worker_thread+0x86d/0xd70 [ 152.266232][ T7432] kthread+0x2f0/0x390 [ 152.270312][ T7432] ret_from_fork+0x4b/0x80 [ 152.274732][ T7432] ret_from_fork_asm+0x1a/0x30 [ 152.279510][ T7432] page last free pid 5158 tgid 5158 stack trace: [ 152.285852][ T7432] free_unref_page+0xd22/0xea0 [ 152.290624][ T7432] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 152.296348][ T7432] __apply_to_page_range+0x8a8/0xe50 [ 152.301640][ T7432] kasan_release_vmalloc+0x9a/0xb0 [ 152.306751][ T7432] purge_vmap_node+0x3e3/0x770 [ 152.311523][ T7432] __purge_vmap_area_lazy+0x708/0xae0 [ 152.316899][ T7432] drain_vmap_area_work+0x27/0x40 [ 152.321925][ T7432] process_scheduled_works+0xa2c/0x1830 [ 152.327468][ T7432] worker_thread+0x86d/0xd70 [ 152.332059][ T7432] kthread+0x2f0/0x390 [ 152.336134][ T7432] ret_from_fork+0x4b/0x80 [ 152.340569][ T7432] ret_from_fork_asm+0x1a/0x30 [ 152.345343][ T7432] [ 152.347665][ T7432] Memory state around the buggy address: [ 152.353292][ T7432] ffff8880658bb900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 152.361444][ T7432] ffff8880658bb980: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 152.369504][ T7432] >ffff8880658bba00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 152.377560][ T7432] ^ [ 152.385531][ T7432] ffff8880658bba80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 152.393589][ T7432] ffff8880658bbb00: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 152.401647][ T7432] ================================================================== [ 152.420789][ T53] Bluetooth: hci2: command tx timeout 2024/06/18 18:21:17 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 152.570234][ T7432] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 152.577485][ T7432] CPU: 0 PID: 7432 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 152.587899][ T7432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 152.597966][ T7432] Call Trace: [ 152.601271][ T7432] [ 152.604223][ T7432] dump_stack_lvl+0x241/0x360 [ 152.608918][ T7432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.614128][ T7432] ? __pfx__printk+0x10/0x10 [ 152.618736][ T7432] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 152.624724][ T7432] ? vscnprintf+0x5d/0x90 [ 152.629068][ T7432] panic+0x349/0x860 [ 152.632975][ T7432] ? check_panic_on_warn+0x21/0xb0 [ 152.638099][ T7432] ? __pfx_panic+0x10/0x10 [ 152.642532][ T7432] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 152.648520][ T7432] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 152.654858][ T7432] check_panic_on_warn+0x86/0xb0 [ 152.659890][ T7432] ? skb_release_data+0x738/0x880 [ 152.664916][ T7432] end_report+0x77/0x160 [ 152.669166][ T7432] kasan_report+0x154/0x180 [ 152.673679][ T7432] ? skb_release_data+0x738/0x880 [ 152.678725][ T7432] skb_release_data+0x738/0x880 [ 152.683585][ T7432] ? __hci_req_sync+0x62f/0x950 [ 152.688442][ T7432] kfree_skb_reason+0x1a3/0x3b0 [ 152.693316][ T7432] __hci_req_sync+0x62f/0x950 [ 152.698004][ T7432] ? __pfx___hci_req_sync+0x10/0x10 [ 152.703215][ T7432] ? __pfx___mutex_lock+0x10/0x10 [ 152.708255][ T7432] ? __pfx_hci_scan_req+0x10/0x10 [ 152.713288][ T7432] hci_req_sync+0xa9/0xd0 [ 152.717630][ T7432] hci_dev_cmd+0x4c5/0xa50 [ 152.722045][ T7432] ? security_capable+0x90/0xb0 [ 152.726927][ T7432] ? __pfx_hci_dev_cmd+0x10/0x10 [ 152.731864][ T7432] ? hci_sock_ioctl+0x6c4/0xa40 [ 152.736736][ T7432] sock_do_ioctl+0x158/0x460 [ 152.741338][ T7432] ? __pfx_sock_do_ioctl+0x10/0x10 [ 152.746480][ T7432] sock_ioctl+0x629/0x8e0 [ 152.750818][ T7432] ? __pfx_sock_ioctl+0x10/0x10 [ 152.755756][ T7432] ? __fget_files+0x29/0x470 [ 152.760355][ T7432] ? __fget_files+0x3f6/0x470 [ 152.765037][ T7432] ? __fget_files+0x29/0x470 [ 152.769638][ T7432] ? bpf_lsm_file_ioctl+0x9/0x10 [ 152.774592][ T7432] ? security_file_ioctl+0x87/0xb0 [ 152.779702][ T7432] ? __pfx_sock_ioctl+0x10/0x10 [ 152.784559][ T7432] __se_sys_ioctl+0xfc/0x170 [ 152.789173][ T7432] do_syscall_64+0xf3/0x230 [ 152.793684][ T7432] ? clear_bhb_loop+0x35/0x90 [ 152.798369][ T7432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.804273][ T7432] RIP: 0033:0x7fa84207cc8b [ 152.808718][ T7432] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 152.828425][ T7432] RSP: 002b:00007ffcfa20dd20 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.836845][ T7432] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fa84207cc8b [ 152.844819][ T7432] RDX: 00007ffcfa20dd98 RSI: 00000000400448dd RDI: 0000000000000003 [ 152.852797][ T7432] RBP: 000055556f33a430 R08: 0000000000000000 R09: 0000000000000000 [ 152.860776][ T7432] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000004 [ 152.868748][ T7432] R13: 0000000000000004 R14: 0000000000000003 R15: 000000000000000c [ 152.876726][ T7432] [ 152.880052][ T7432] Kernel Offset: disabled [ 152.884376][ T7432] Rebooting in 86400 seconds..