last executing test programs: 57.436876509s ago: executing program 1: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65, 0x0, 0x6}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x7, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 57.265177796s ago: executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r2, 0xffffffffffffffff, 0x2, 0x0, 0x4000}, 0x10) 57.140752528s ago: executing program 1: r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)='io.pressure\x00', 0x2, 0x0) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe80, 0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PPPIOCGIDLE64(r3, 0x80111500, 0xfffffffffffffffd) sendto$packet(r1, &(0x7f00000000c0)="3f030e02dce012002c051e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdc9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r2, 0x4, 0x0, 0x6, @multicast}, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x6, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) nanosleep(&(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000280)) socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) bind$packet(r5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e0000001801000020646c2500000000002020177b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x3b6, &(0x7f00000020c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000ffffc0fe4023493b87aafaffffffffffffff2373247202fa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "0000001d001c00000800ee00"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23a5026e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x18, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e4163ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d52cfb3f27fafa40845f90b6dfc87c6905bbc94d33e4575c853105f543e8e8a8a73b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb1fdc5fd020000000000006ae88c001a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbfeb532188b196e213408c"}, {0x0, 0x5, "d517fb2cf1a4ffdc1b7e018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r6}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) 56.780629169s ago: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000005980)=[{{&(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000003080)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 56.658732899s ago: executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r2, 0xffffffffffffffff, 0x2, 0x0, 0x4000}, 0x10) 56.521695446s ago: executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x20000000], 0x2, 0x0, &(0x7f0000000000)=[{}, {}, {}]}, 0x108) 36.958123425s ago: executing program 1: r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)='io.pressure\x00', 0x2, 0x0) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe80, 0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PPPIOCGIDLE64(r3, 0x80111500, 0xfffffffffffffffd) sendto$packet(r1, &(0x7f00000000c0)="3f030e02dce012002c051e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdc9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r2, 0x4, 0x0, 0x6, @multicast}, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x6, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) nanosleep(&(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000280)) socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) bind$packet(r5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e0000001801000020646c2500000000002020177b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x3b6, &(0x7f00000020c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000ffffc0fe4023493b87aafaffffffffffffff2373247202fa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "0000001d001c00000800ee00"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23a5026e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x18, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e4163ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d52cfb3f27fafa40845f90b6dfc87c6905bbc94d33e4575c853105f543e8e8a8a73b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb1fdc5fd020000000000006ae88c001a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbfeb532188b196e213408c"}, {0x0, 0x5, "d517fb2cf1a4ffdc1b7e018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r6}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) 36.850751195s ago: executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x20000000], 0x2, 0x0, &(0x7f0000000000)=[{}, {}, {}]}, 0x108) 21.534643029s ago: executing program 1: r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)='io.pressure\x00', 0x2, 0x0) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe80, 0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PPPIOCGIDLE64(r3, 0x80111500, 0xfffffffffffffffd) sendto$packet(r1, &(0x7f00000000c0)="3f030e02dce012002c051e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdc9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r2, 0x4, 0x0, 0x6, @multicast}, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x6, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) nanosleep(&(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000280)) socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) bind$packet(r5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e0000001801000020646c2500000000002020177b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x3b6, &(0x7f00000020c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000ffffc0fe4023493b87aafaffffffffffffff2373247202fa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "0000001d001c00000800ee00"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23a5026e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x18, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e4163ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d52cfb3f27fafa40845f90b6dfc87c6905bbc94d33e4575c853105f543e8e8a8a73b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb1fdc5fd020000000000006ae88c001a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbfeb532188b196e213408c"}, {0x0, 0x5, "d517fb2cf1a4ffdc1b7e018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r6}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) 19.920907296s ago: executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x20000000], 0x2, 0x0, &(0x7f0000000000)=[{}, {}, {}]}, 0x108) 9.075086835s ago: executing program 1: r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)='io.pressure\x00', 0x2, 0x0) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe80, 0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PPPIOCGIDLE64(r3, 0x80111500, 0xfffffffffffffffd) sendto$packet(r1, &(0x7f00000000c0)="3f030e02dce012002c051e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdc9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r2, 0x4, 0x0, 0x6, @multicast}, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x6, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) nanosleep(&(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000280)) socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) bind$packet(r5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e0000001801000020646c2500000000002020177b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x3b6, &(0x7f00000020c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000ffffc0fe4023493b87aafaffffffffffffff2373247202fa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "0000001d001c00000800ee00"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23a5026e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x18, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e4163ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d52cfb3f27fafa40845f90b6dfc87c6905bbc94d33e4575c853105f543e8e8a8a73b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb1fdc5fd020000000000006ae88c001a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbfeb532188b196e213408c"}, {0x0, 0x5, "d517fb2cf1a4ffdc1b7e018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r6}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) 6.71511983s ago: executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x20000000], 0x2, 0x0, &(0x7f0000000000)=[{}, {}, {}]}, 0x108) 5.939861617s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@mangle={'mangle\x00', 0x64, 0x6, 0x598, 0x0, 0x3a8, 0x1e8, 0x0, 0x118, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev, @ipv6=@dev, 0xed}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev, 'veth1_virt_wifi\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) 5.86747707s ago: executing program 4: bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104000000000000000000000004", @ANYRES32=r2, @ANYBLOB="00002f04e3df02002c001280110001006272696467655f736c6176650000000014000580080022"], 0x4c}}, 0x0) 4.947108093s ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x10, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffb}, 0x48) 4.830793341s ago: executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c00000001010125"], 0x2c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[], 0x14}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000200), 0x4) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000100)) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) unshare(0x0) unshare(0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "df1d00", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 4.491008238s ago: executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x4e8, 0x2f0, 0x2f0, 0x108, 0x108, 0x2f0, 0x400, 0x4, 0x0, {[{{@arp={@remote, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="6e5f6a98158c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'syz_tun\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:getty_etc_t:s0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="4a236bb17d83", @empty, @multicast2, @loopback}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x538) 4.338303885s ago: executing program 4: socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c851, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@beacon={{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0x1f, 0x1f, 0x4, 0x3cb}}, @val={0x6, 0x2, 0xb4e}, @void, @void, @void, @void, @void, @void, @void, @void}, 0x42) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000580)={@cgroup, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xc, 0x0, 0x0) 1.810409152s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.703048197s ago: executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x30}}, 0x0) 1.615601853s ago: executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000200)={@initdev, @multicast1}, &(0x7f0000000240)=0xc) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0xf, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000000704000002feffffb70200000892000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.460451442s ago: executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001180)={'wg0\x00', 0x0}) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000003a80)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000300000000000000000000000000000000000000000000000000000000000000000008000100", @ANYRES32=r1], 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x300, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000004000009000100000008000100", @ANYRES32=r1, @ANYBLOB="24000300a0"], 0x40}, 0x5, 0x6000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x20}}, 0x0) 1.399196043s ago: executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x48, &(0x7f0000001d80), &(0x7f0000001dc0)=0xc) 1.366837641s ago: executing program 3: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}]}}}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x34}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000600", 0x33fe0}], 0x1}, 0x0) 1.277517048s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00018008000100000004000c0002"], 0x30}}, 0x0) 474.535696ms ago: executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000), 0x4) r1 = accept$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @private1}, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af3650400410038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0xad}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44000) 446.255251ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0x9) 344.37443ms ago: executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 297.460472ms ago: executing program 2: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x6, &(0x7f00000014c0)=""/145, &(0x7f0000000080)=0x91) listen(r0, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x4, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_type(r7, &(0x7f00000000c0), 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c) sendto$inet6(r8, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmmsg(r6, &(0x7f0000001500), 0x588, 0x0) 0s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c030000", @ANYRESOCT=r2, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r2, @ANYRES32=r1], 0x4c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00}, 0x90) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10}, 0x90) r4 = socket$kcm(0x10, 0x7, 0x4) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)="28db52a2418619a9e69b5a373c86df9a5e683656c08a575a2eebe22e73ed6579e11ce4e6b75c347823b919c0c7f9c58a042f323798dbc024035b2076ccdfaa6dcfdcecff5c7e18390d3b92b8aedef5fcb0fe714ff59889d079eb", 0x5a}, {&(0x7f0000000540)="bd4d92cda33fa0ddbef11cdbd25822464b4e025d5371a8980ab74fba273aa87e4585749dda59a0d0c6f559fd83e41cf7e9fca8f824658451359b1bd7817ef5cdd95d08d12147ef48621852", 0x4b}, {&(0x7f0000000900)="5d5f738844b4818eac150b038940e01fdb2647bb83b1b7c8604eb8ca566c72665d8e4ad2f393aef86599068b9638d7efb6b7d370b6b82a6534a32e221ae57ada6e5deb76862a65a6c247aef310e0943148d7f3f461e661ff9d09724897a30fca6b563b0fce9548a2b50742d2e2ff6dbfcb9c475968ac2198cdfbf1a9d4d21c8b37cb1bce619c017fff673594ec7b2a42390c41e126c6f1e8fd395b7704ccecd8d851308fa3ffa24f2cbc240ec5b139e73d3e492e24a314abb0b1993b4e17df6485ea19bb16a5d6", 0xc7}], 0x3}, 0x2e76460fadfbfab0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x81, 0x10001, 0x5a, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, 0xffffffffffffffff, 0x26}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_emit_ethernet(0x62, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a0100002c2b0000000000000000000000000000000000fe8000000000000000000000000000aa3a"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000000)="b9ff06", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007200000095000000000000001fd78800a257a5ee0b4b88b761826fb40338658c30dfe2fef4f4b469"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.218' (ED25519) to the list of known hosts. 2024/06/24 11:50:09 fuzzer started 2024/06/24 11:50:09 dialing manager at 10.128.0.169:30018 [ 55.973554][ T5088] cgroup: Unknown subsys name 'net' [ 56.169207][ T5088] cgroup: Unknown subsys name 'rlimit' 2024/06/24 11:50:11 starting 5 executor processes [ 57.269636][ T5097] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.087277][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.119632][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.128828][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.137064][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.145983][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.156253][ T5122] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.164440][ T5119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.165516][ T5122] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.173237][ T5123] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.179551][ T5122] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.186548][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.193060][ T5122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.200488][ T5123] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.208281][ T5122] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.214814][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.224249][ T5123] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.228950][ T5119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.237153][ T5123] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.241233][ T5125] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.249257][ T5123] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.262502][ T5125] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.262507][ T5123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.262879][ T5125] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.270674][ T5123] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.286741][ T5125] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.290997][ T5123] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.298090][ T5125] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.305498][ T5123] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.312223][ T5125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.318728][ T5123] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.939107][ T5108] chnl_net:caif_netlink_parms(): no params data found [ 58.956882][ T5107] chnl_net:caif_netlink_parms(): no params data found [ 58.982490][ T5113] chnl_net:caif_netlink_parms(): no params data found [ 59.082340][ T5115] chnl_net:caif_netlink_parms(): no params data found [ 59.096176][ T5111] chnl_net:caif_netlink_parms(): no params data found [ 59.219002][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.228666][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.237765][ T5113] bridge_slave_0: entered allmulticast mode [ 59.245396][ T5113] bridge_slave_0: entered promiscuous mode [ 59.283638][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.290956][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.298446][ T5113] bridge_slave_1: entered allmulticast mode [ 59.306480][ T5113] bridge_slave_1: entered promiscuous mode [ 59.328057][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.335314][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.342436][ T5108] bridge_slave_0: entered allmulticast mode [ 59.350164][ T5108] bridge_slave_0: entered promiscuous mode [ 59.357276][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.364644][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.371794][ T5107] bridge_slave_0: entered allmulticast mode [ 59.378782][ T5107] bridge_slave_0: entered promiscuous mode [ 59.411506][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.426585][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.433745][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.441189][ T5108] bridge_slave_1: entered allmulticast mode [ 59.448362][ T5108] bridge_slave_1: entered promiscuous mode [ 59.466982][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.474829][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.481995][ T5107] bridge_slave_1: entered allmulticast mode [ 59.492526][ T5107] bridge_slave_1: entered promiscuous mode [ 59.526201][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.572477][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.623525][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.646268][ T5107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.659248][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.668747][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.676066][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.683213][ T5115] bridge_slave_0: entered allmulticast mode [ 59.691209][ T5115] bridge_slave_0: entered promiscuous mode [ 59.703742][ T5113] team0: Port device team_slave_0 added [ 59.710071][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.717432][ T5111] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.725016][ T5111] bridge_slave_0: entered allmulticast mode [ 59.731813][ T5111] bridge_slave_0: entered promiscuous mode [ 59.773156][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.780523][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.788045][ T5115] bridge_slave_1: entered allmulticast mode [ 59.795303][ T5115] bridge_slave_1: entered promiscuous mode [ 59.803344][ T5113] team0: Port device team_slave_1 added [ 59.820031][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.827475][ T5111] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.834835][ T5111] bridge_slave_1: entered allmulticast mode [ 59.841915][ T5111] bridge_slave_1: entered promiscuous mode [ 59.865189][ T5108] team0: Port device team_slave_0 added [ 59.873490][ T5107] team0: Port device team_slave_0 added [ 59.917185][ T5108] team0: Port device team_slave_1 added [ 59.926119][ T5111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.940381][ T5107] team0: Port device team_slave_1 added [ 59.959069][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.966792][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.993577][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.007636][ T5111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.042351][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.056331][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.067002][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.080411][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.107320][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.192049][ T5111] team0: Port device team_slave_0 added [ 60.198755][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.206601][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.233009][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.247364][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.254377][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.281077][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.292936][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.300073][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.326892][ T5125] Bluetooth: hci0: command tx timeout [ 60.333723][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.347305][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.354367][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.380320][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.391094][ T5125] Bluetooth: hci4: command tx timeout [ 60.392299][ T5110] Bluetooth: hci2: command tx timeout [ 60.397129][ T5125] Bluetooth: hci3: command tx timeout [ 60.397268][ T5125] Bluetooth: hci1: command tx timeout [ 60.417812][ T5115] team0: Port device team_slave_0 added [ 60.432206][ T5111] team0: Port device team_slave_1 added [ 60.477201][ T5115] team0: Port device team_slave_1 added [ 60.497298][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.504516][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.531210][ T5111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.583460][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.590606][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.617425][ T5111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.639629][ T5107] hsr_slave_0: entered promiscuous mode [ 60.647193][ T5107] hsr_slave_1: entered promiscuous mode [ 60.666140][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.673112][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.699165][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.715420][ T5113] hsr_slave_0: entered promiscuous mode [ 60.721826][ T5113] hsr_slave_1: entered promiscuous mode [ 60.728636][ T5113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.736767][ T5113] Cannot create hsr debugfs directory [ 60.767782][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.775276][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.801843][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.845359][ T5108] hsr_slave_0: entered promiscuous mode [ 60.851681][ T5108] hsr_slave_1: entered promiscuous mode [ 60.858299][ T5108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.866208][ T5108] Cannot create hsr debugfs directory [ 60.918188][ T5111] hsr_slave_0: entered promiscuous mode [ 60.927718][ T5111] hsr_slave_1: entered promiscuous mode [ 60.933746][ T5111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.941453][ T5111] Cannot create hsr debugfs directory [ 61.052773][ T5115] hsr_slave_0: entered promiscuous mode [ 61.059568][ T5115] hsr_slave_1: entered promiscuous mode [ 61.066912][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.074644][ T5115] Cannot create hsr debugfs directory [ 61.438997][ T5107] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.451651][ T5107] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.461763][ T5107] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.481566][ T5107] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.541601][ T5108] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.551665][ T5108] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.570490][ T5108] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.580194][ T5108] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.668354][ T5111] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.702944][ T5111] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.714213][ T5111] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.740712][ T5111] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.797718][ T5113] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.822896][ T5113] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.835406][ T5113] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.850541][ T5113] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.891404][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.967815][ T5115] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.978100][ T5115] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.991918][ T5115] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.005997][ T5107] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.020370][ T5115] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.073143][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.080508][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.091452][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.098573][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.132274][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.239207][ T5111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.272137][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.303902][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.311079][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.341709][ T5111] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.386991][ T5125] Bluetooth: hci0: command tx timeout [ 62.422760][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.430062][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.466903][ T5125] Bluetooth: hci1: command tx timeout [ 62.472367][ T5125] Bluetooth: hci2: command tx timeout [ 62.474564][ T5118] Bluetooth: hci3: command tx timeout [ 62.478238][ T5110] Bluetooth: hci4: command tx timeout [ 62.488975][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.489104][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.525901][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.533021][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.560396][ T5111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.591428][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.613842][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.647137][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.686878][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.706422][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.713610][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.746507][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.778341][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.785630][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.831423][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.838638][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.902348][ T5107] veth0_vlan: entered promiscuous mode [ 62.920025][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.927232][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.996773][ T5115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.038318][ T5111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.058642][ T5107] veth1_vlan: entered promiscuous mode [ 63.196625][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.281675][ T5107] veth0_macvtap: entered promiscuous mode [ 63.343159][ T5111] veth0_vlan: entered promiscuous mode [ 63.356459][ T5107] veth1_macvtap: entered promiscuous mode [ 63.387303][ T5111] veth1_vlan: entered promiscuous mode [ 63.490867][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.547746][ T5111] veth0_macvtap: entered promiscuous mode [ 63.566491][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.578172][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.599487][ T5111] veth1_macvtap: entered promiscuous mode [ 63.615966][ T5107] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.625556][ T5107] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.634742][ T5107] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.643434][ T5107] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.699229][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.742396][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.763161][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.777644][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.801731][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.812419][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.823745][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.868215][ T5111] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.879782][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.881327][ T5111] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.898116][ T5111] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.907457][ T5111] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.909714][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.964750][ T5108] veth0_vlan: entered promiscuous mode [ 64.013708][ T5113] veth0_vlan: entered promiscuous mode [ 64.023687][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.033723][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.060237][ T5108] veth1_vlan: entered promiscuous mode [ 64.125857][ T5113] veth1_vlan: entered promiscuous mode [ 64.177264][ T5115] veth0_vlan: entered promiscuous mode [ 64.197214][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.214411][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.298027][ T5115] veth1_vlan: entered promiscuous mode [ 64.349140][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.360637][ T5108] veth0_macvtap: entered promiscuous mode [ 64.390292][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.422857][ T5113] veth0_macvtap: entered promiscuous mode [ 64.432303][ T5196] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 64.452674][ T5108] veth1_macvtap: entered promiscuous mode [ 64.467296][ T5110] Bluetooth: hci0: command tx timeout [ 64.477408][ T5113] veth1_macvtap: entered promiscuous mode [ 64.523611][ T5115] veth0_macvtap: entered promiscuous mode [ 64.545676][ T5110] Bluetooth: hci4: command tx timeout [ 64.555802][ T5110] Bluetooth: hci2: command tx timeout [ 64.555834][ T5123] Bluetooth: hci1: command tx timeout [ 64.563679][ T5115] veth1_macvtap: entered promiscuous mode [ 64.569508][ T5125] Bluetooth: hci3: command tx timeout [ 64.606725][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.650069][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.700018][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.744133][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.747949][ T5205] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.779279][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.805891][ T5205] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 64.807627][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.829018][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.840038][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.851249][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.868538][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.880771][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.898633][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.911395][ T5210] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 64.912384][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.956315][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.972856][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.985384][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.996452][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.011393][ T5113] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.020413][ T5113] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.031204][ T5113] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.040253][ T5113] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.133501][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.145901][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.156669][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.167365][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.190579][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.201177][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.216655][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.230862][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.242385][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.257618][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.270057][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.280606][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.292080][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.303864][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.318931][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.330175][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.421268][ T5108] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.441540][ T5108] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.450676][ T5108] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.459953][ T5108] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.470567][ T5222] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 65.498430][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.513149][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.523907][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.536750][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.548798][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.559534][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.573549][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.585154][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.605996][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.662220][ T5115] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.672464][ T5115] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.681425][ T5115] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.690344][ T5115] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.829080][ T5231] IPv6: Can't replace route, no match found [ 65.885926][ T2819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.893790][ T2819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.002789][ T2875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.016837][ T2875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.098792][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.113626][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.135810][ T5242] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 66.152030][ T5242] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 66.203425][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.223952][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.280423][ T2875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.323583][ T2875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.411286][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.449308][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.545280][ T5125] Bluetooth: hci0: command tx timeout [ 66.624698][ T5125] Bluetooth: hci3: command tx timeout [ 66.630167][ T5125] Bluetooth: hci1: command tx timeout [ 66.635939][ T5123] Bluetooth: hci2: command tx timeout [ 66.635957][ T5110] Bluetooth: hci4: command tx timeout [ 66.659668][ T5250] pim6reg: entered allmulticast mode [ 66.718695][ T5256] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 66.806369][ T5250] pim6reg: left allmulticast mode [ 67.093773][ T5270] tun0: tun_chr_ioctl cmd 1074025677 [ 67.134539][ T5270] tun0: linktype set to 823 [ 67.482460][ T5286] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 67.534499][ T5291] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 67.541551][ T5291] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 67.750091][ T5299] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 67.798289][ T5299] Bluetooth: MGMT ver 1.22 [ 67.847809][ T5299] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 67.856544][ T5303] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 69.141612][ T5354] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 69.167197][ T5354] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 69.337183][ T5358] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 69.351365][ T5361] syzkaller0: entered allmulticast mode [ 69.420801][ T5361] syzkaller0 (unregistering): left allmulticast mode [ 69.490466][ T5372] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 69.497215][ T5372] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 69.568344][ T5371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.600872][ T5371] team0: Port device bond0 added [ 69.682758][ T5371] syz-executor.0 (5371) used greatest stack depth: 17616 bytes left [ 69.933783][ T5391] sctp: [Deprecated]: syz-executor.1 (pid 5391) Use of struct sctp_assoc_value in delayed_ack socket option. [ 69.933783][ T5391] Use struct sctp_sack_info instead [ 69.982846][ T5391] syz-executor.1 (5391) used greatest stack depth: 17392 bytes left [ 70.074430][ T5405] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 70.524990][ T5429] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 70.681077][ T5438] syzkaller0: entered allmulticast mode [ 70.716146][ T5438] syzkaller0 (unregistering): left allmulticast mode [ 71.214747][ T5460] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 71.295681][ T5464] x_tables: duplicate underflow at hook 2 [ 71.438232][ T5472] dvmrp0: entered allmulticast mode [ 71.493392][ T5472] dvmrp0: left allmulticast mode [ 71.506209][ T5475] Bluetooth: MGMT ver 1.22 [ 71.749623][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.759085][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.777098][ T5486] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.831770][ T5486] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.956764][ T5486] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 72.390210][ T5506] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 72.413446][ T29] audit: type=1804 audit(1719229826.461:2): pid=5506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2398963144/syzkaller.vKCoZQ/26/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 72.505927][ T5504] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. [ 72.633896][ T5512] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.973281][ T5519] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.110483][ T5519] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.315159][ T5529] tun0: tun_chr_ioctl cmd 2147767519 [ 73.333464][ T5519] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.638637][ T5538] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.656100][ T5543] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 73.723019][ T5543] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 73.772424][ T5538] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.887766][ T5538] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.017475][ T5538] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.185005][ T5558] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 74.225965][ T5538] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.273149][ T5538] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.302291][ T5538] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.353178][ T5538] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.599326][ T5575] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 74.674172][ T5575] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 75.128631][ T5597] __nla_validate_parse: 8 callbacks suppressed [ 75.128651][ T5597] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 75.211950][ T5600] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 75.314839][ T5606] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 75.342835][ T5609] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 75.385611][ T5606] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 75.403551][ T5600] Illegal XDP return value 4294967274 on prog (id 33) dev N/A, expect packet loss! [ 75.421011][ T5609] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 75.446357][ T5609] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.1'. [ 75.469455][ T5613] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 75.503128][ T5613] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 75.633923][ T5618] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 75.672020][ T5622] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 75.698913][ T5621] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 76.767149][ T5672] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 76.875720][ T8] cfg80211: failed to load regulatory.db [ 77.099883][ T5690] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 77.170286][ T5691] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 77.894862][ T5719] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 78.127626][ T5734] bond0: (slave vlan3): Error -34 calling dev_set_mtu [ 78.334532][ T5738] ipip0: entered promiscuous mode [ 78.748499][ T5771] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 78.774150][ T5771] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 79.336855][ T5796] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 79.392279][ T5796] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 79.851756][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.970576][ T5809] Zero length message leads to an empty skb [ 80.039758][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.258251][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.293027][ T5826] __nla_validate_parse: 8 callbacks suppressed [ 80.293046][ T5826] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 80.454859][ T5825] ipip0: entered promiscuous mode [ 80.541773][ T5125] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.552383][ T5125] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.561675][ T5125] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.571262][ T5125] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.584275][ T5125] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.591992][ T5125] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.632987][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.009084][ T5854] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 81.109235][ T35] bridge_slave_1: left allmulticast mode [ 81.116792][ T35] bridge_slave_1: left promiscuous mode [ 81.123543][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.143941][ T35] bridge_slave_0: left allmulticast mode [ 81.149795][ T35] bridge_slave_0: left promiscuous mode [ 81.156305][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.405349][ T5125] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.416094][ T5125] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.427975][ T5125] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.437758][ T5125] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.452315][ T5125] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.460463][ T5125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.725209][ T5881] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 81.746231][ T5881] openvswitch: netlink: VXLAN extension 5 out of range max 1 [ 81.884354][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.898074][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.909863][ T35] bond0 (unregistering): Released all slaves [ 82.624279][ T5110] Bluetooth: hci0: command tx timeout [ 82.647058][ T5914] xt_recent: hitcount (4294967295) is larger than allowed maximum (255) [ 82.773830][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 82.932964][ T35] hsr_slave_0: left promiscuous mode [ 82.959120][ T35] hsr_slave_1: left promiscuous mode [ 82.971650][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.995229][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.019904][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.044072][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.109643][ T35] veth1_macvtap: left promiscuous mode [ 83.119693][ T35] veth0_macvtap: left promiscuous mode [ 83.126166][ T35] veth1_vlan: left promiscuous mode [ 83.132115][ T35] veth0_vlan: left promiscuous mode [ 83.316673][ T5932] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.2'. [ 83.507771][ T5110] Bluetooth: hci4: command tx timeout [ 83.687169][ T35] team0 (unregistering): Port device team_slave_1 removed [ 83.721823][ T35] team0 (unregistering): Port device team_slave_0 removed [ 84.085485][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 84.448187][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.485309][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.498493][ T5841] bridge_slave_0: entered allmulticast mode [ 84.508155][ T5841] bridge_slave_0: entered promiscuous mode [ 84.579545][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.595455][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.612156][ T5841] bridge_slave_1: entered allmulticast mode [ 84.621050][ T5841] bridge_slave_1: entered promiscuous mode [ 84.705330][ T5110] Bluetooth: hci0: command tx timeout [ 84.779348][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.832653][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.867644][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 85.087449][ T5841] team0: Port device team_slave_0 added [ 85.132267][ T5841] team0: Port device team_slave_1 added [ 85.343348][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.358597][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.388113][ T5862] bridge_slave_0: entered allmulticast mode [ 85.410090][ T5862] bridge_slave_0: entered promiscuous mode [ 85.434794][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.441791][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.512216][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.546826][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.553894][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.584448][ T5110] Bluetooth: hci4: command tx timeout [ 85.611427][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.635838][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.654571][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.661837][ T5862] bridge_slave_1: entered allmulticast mode [ 85.706129][ T5862] bridge_slave_1: entered promiscuous mode [ 85.963338][ T6008] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'. [ 85.981672][ T6008] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 85.996832][ T6008] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 86.062027][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.140223][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.297738][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.352554][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.371041][ T29] audit: type=1800 audit(1719229840.421:3): pid=6026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1951 res=0 errno=0 [ 86.411997][ T29] audit: type=1804 audit(1719229840.461:4): pid=6026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1856527969/syzkaller.QTIIDv/61/memory.events" dev="sda1" ino=1951 res=1 errno=0 [ 86.454125][ T29] audit: type=1804 audit(1719229840.501:5): pid=6026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1856527969/syzkaller.QTIIDv/61/memory.events" dev="sda1" ino=1951 res=1 errno=0 [ 86.504638][ T5841] hsr_slave_0: entered promiscuous mode [ 86.517116][ T5841] hsr_slave_1: entered promiscuous mode [ 86.528994][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.538218][ T5841] Cannot create hsr debugfs directory [ 86.795049][ T5110] Bluetooth: hci0: command tx timeout [ 87.594456][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.603756][ T6040] xt_recent: hitcount (4294967295) is larger than allowed maximum (255) [ 87.674162][ T5110] Bluetooth: hci4: command tx timeout [ 87.676415][ T5862] team0: Port device team_slave_0 added [ 87.703804][ T6038] dummy0: entered promiscuous mode [ 87.745214][ T6038] dummy0: left promiscuous mode [ 87.840667][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.898194][ T5862] team0: Port device team_slave_1 added [ 87.912869][ T6043] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 87.927669][ T6043] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 88.149081][ T6062] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 88.183593][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.190258][ T6062] openvswitch: netlink: VXLAN extension 5 out of range max 1 [ 88.210639][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.322651][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.367281][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.381474][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.455437][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.480687][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 88.758402][ T5862] hsr_slave_0: entered promiscuous mode [ 88.769368][ T5862] hsr_slave_1: entered promiscuous mode [ 88.771011][ T6090] netlink: 199356 bytes leftover after parsing attributes in process `syz-executor.4'. [ 88.786470][ T5862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.795398][ T5862] Cannot create hsr debugfs directory [ 88.845697][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 88.852675][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 88.864568][ T5110] Bluetooth: hci0: command tx timeout [ 89.101195][ T6093] dummy0: entered promiscuous mode [ 89.117469][ T6093] dummy0: left promiscuous mode [ 89.211530][ T6100] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 89.266594][ T35] bridge_slave_1: left allmulticast mode [ 89.272479][ T35] bridge_slave_1: left promiscuous mode [ 89.279907][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.292782][ T35] bridge_slave_0: left allmulticast mode [ 89.300006][ T35] bridge_slave_0: left promiscuous mode [ 89.329028][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.370972][ T6105] xt_recent: hitcount (4294967295) is larger than allowed maximum (255) [ 89.709589][ T35] team0: Port device bond0 removed [ 89.717295][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.729630][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.740269][ T35] bond0 (unregistering): Released all slaves [ 89.746823][ T5110] Bluetooth: hci4: command tx timeout [ 90.717699][ T35] hsr_slave_0: left promiscuous mode [ 90.726801][ T35] hsr_slave_1: left promiscuous mode [ 90.735413][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.749197][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.771134][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.780747][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.803153][ T35] veth1_macvtap: left promiscuous mode [ 90.808942][ T35] veth0_macvtap: left promiscuous mode [ 90.815781][ T35] veth1_vlan: left promiscuous mode [ 90.821141][ T35] veth0_vlan: left promiscuous mode [ 91.361518][ T35] team0 (unregistering): Port device team_slave_1 removed [ 91.395703][ T35] team0 (unregistering): Port device team_slave_0 removed [ 92.610365][ T6165] __nla_validate_parse: 2 callbacks suppressed [ 92.610385][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 92.645484][ T6165] team_slave_0: entered promiscuous mode [ 92.651381][ T6165] team_slave_1: entered promiscuous mode [ 92.659633][ T6165] macvtap1: entered promiscuous mode [ 92.670416][ T6165] team0: entered promiscuous mode [ 92.676655][ T6165] macvtap1: entered allmulticast mode [ 92.682182][ T6165] team0: entered allmulticast mode [ 92.687514][ T6165] team_slave_0: entered allmulticast mode [ 92.693341][ T6165] team_slave_1: entered allmulticast mode [ 92.701283][ T6165] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 92.933470][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.016505][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.019388][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.152094][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.185675][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.460032][ T6191] warning: `syz-executor.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.736837][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.818089][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.919862][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.950622][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.972628][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.008702][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.057146][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.064376][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.164656][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.171876][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.388346][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.633355][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.705748][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.764839][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.771998][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.822267][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.830185][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.982438][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.167932][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.180286][ T5841] veth0_vlan: entered promiscuous mode [ 95.240875][ T5841] veth1_vlan: entered promiscuous mode [ 95.348660][ T5841] veth0_macvtap: entered promiscuous mode [ 95.393095][ T5841] veth1_macvtap: entered promiscuous mode [ 95.465332][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.489034][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.515183][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.558108][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.581024][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.591948][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.612002][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.679146][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.718534][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.732331][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.748198][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.759612][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.772213][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.806309][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.927552][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.968328][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.994098][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.003284][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.107316][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.172714][ T6302] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 96.246572][ T6302] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 96.277352][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.345412][ T6302] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 96.385181][ T6315] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.392439][ T6315] IPv6: NLM_F_CREATE should be set when creating new route [ 96.414124][ T6307] tipc: Started in network mode [ 96.419052][ T6307] tipc: Node identity ac1414aa, cluster identity 4711 [ 96.436776][ T6307] tipc: Enabled bearer , priority 10 [ 96.486428][ T6312] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.521988][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.800524][ T2819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.842281][ T2819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.889031][ T5862] veth0_vlan: entered promiscuous mode [ 96.961377][ T2875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.000280][ T2875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.002618][ T5862] veth1_vlan: entered promiscuous mode [ 97.013199][ T6306] syz-executor.3: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 97.075407][ T6306] CPU: 1 PID: 6306 Comm: syz-executor.3 Not tainted 6.10.0-rc4-syzkaller-00875-g568ebdaba637 #0 [ 97.085964][ T6306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 97.096046][ T6306] Call Trace: [ 97.099347][ T6306] [ 97.102301][ T6306] dump_stack_lvl+0x241/0x360 [ 97.107047][ T6306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.112279][ T6306] ? __pfx__printk+0x10/0x10 [ 97.116952][ T6306] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 97.123401][ T6306] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 97.129941][ T6306] warn_alloc+0x278/0x410 [ 97.134307][ T6306] ? __pfx_warn_alloc+0x10/0x10 [ 97.139191][ T6306] ? packet_set_ring+0x6da/0x2450 [ 97.144243][ T6306] ? __get_vm_area_node+0x23d/0x270 [ 97.149476][ T6306] __vmalloc_node_range_noprof+0x69f/0x1460 [ 97.155405][ T6306] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 97.161180][ T6306] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 97.167540][ T6306] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 97.173556][ T6306] ? packet_set_ring+0x62b/0x2450 [ 97.178614][ T6306] ? rcu_is_watching+0x15/0xb0 [ 97.183405][ T6306] ? packet_set_ring+0x6da/0x2450 [ 97.188450][ T6306] vzalloc_noprof+0x79/0x90 [ 97.193024][ T6306] ? packet_set_ring+0x6da/0x2450 [ 97.198070][ T6306] packet_set_ring+0x6da/0x2450 [ 97.202979][ T6306] ? __pfx_packet_set_ring+0x10/0x10 [ 97.208301][ T6306] ? __might_fault+0xaa/0x120 [ 97.213001][ T6306] ? __might_fault+0xc6/0x120 [ 97.217718][ T6306] packet_setsockopt+0x1140/0x1970 [ 97.222864][ T6306] ? __pfx___might_resched+0x10/0x10 [ 97.228260][ T6306] ? __pfx_packet_setsockopt+0x10/0x10 [ 97.233775][ T6306] ? aa_sk_perm+0x967/0xab0 [ 97.238338][ T6306] ? __pfx_aa_sk_perm+0x10/0x10 [ 97.243219][ T6306] ? __pfx_lock_acquire+0x10/0x10 [ 97.248269][ T6306] ? aa_sock_opt_perm+0x79/0x120 [ 97.253248][ T6306] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 97.258824][ T6306] ? security_socket_setsockopt+0x87/0xb0 [ 97.264588][ T6306] ? __pfx_packet_setsockopt+0x10/0x10 [ 97.270082][ T6306] do_sock_setsockopt+0x3af/0x720 [ 97.275159][ T6306] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 97.280748][ T6306] ? __fget_files+0x29/0x470 [ 97.285379][ T6306] ? __fget_files+0x3f6/0x470 [ 97.290100][ T6306] __sys_setsockopt+0x1ae/0x250 [ 97.294993][ T6306] __x64_sys_setsockopt+0xb5/0xd0 [ 97.300054][ T6306] do_syscall_64+0xf3/0x230 [ 97.304587][ T6306] ? clear_bhb_loop+0x35/0x90 [ 97.309305][ T6306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.315248][ T6306] RIP: 0033:0x7f7e7527d0a9 [ 97.319690][ T6306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 97.339321][ T6306] RSP: 002b:00007f7e760020c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 97.347769][ T6306] RAX: ffffffffffffffda RBX: 00007f7e753b3f80 RCX: 00007f7e7527d0a9 [ 97.355767][ T6306] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000006 [ 97.363764][ T6306] RBP: 00007f7e752ec074 R08: 000000000000001c R09: 0000000000000000 [ 97.371767][ T6306] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 97.379764][ T6306] R13: 000000000000000b R14: 00007f7e753b3f80 R15: 00007fffcfd1c428 [ 97.387776][ T6306] [ 97.408192][ T6306] Mem-Info: [ 97.420378][ T6306] active_anon:15598 inactive_anon:0 isolated_anon:0 [ 97.420378][ T6306] active_file:0 inactive_file:46477 isolated_file:0 [ 97.420378][ T6306] unevictable:768 dirty:67 writeback:0 [ 97.420378][ T6306] slab_reclaimable:9565 slab_unreclaimable:103316 [ 97.420378][ T6306] mapped:18574 shmem:1516 pagetables:755 [ 97.420378][ T6306] sec_pagetables:0 bounce:0 [ 97.420378][ T6306] kernel_misc_reclaimable:0 [ 97.420378][ T6306] free:1365107 free_pcp:494 free_cma:0 [ 97.479318][ T6306] Node 0 active_anon:62392kB inactive_anon:0kB active_file:0kB inactive_file:185836kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:74296kB dirty:264kB writeback:0kB shmem:4528kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10444kB pagetables:2820kB sec_pagetables:0kB all_unreclaimable? no [ 97.534734][ T5159] tipc: Node number set to 2886997162 [ 97.547198][ T6306] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 97.622415][ T6306] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 97.757721][ T5862] veth0_macvtap: entered promiscuous mode [ 97.777935][ T6306] lowmem_reserve[]: 0 2571 2571 0 0 [ 97.783250][ T6306] Node 0 DMA32 free:1494076kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:62140kB inactive_anon:0kB active_file:0kB inactive_file:185528kB unevictable:1536kB writepending:260kB present:3129332kB managed:2659872kB mlocked:0kB bounce:0kB free_pcp:7648kB local_pcp:6492kB free_cma:0kB [ 97.828313][ T5862] veth1_macvtap: entered promiscuous mode [ 97.847153][ T6365] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.856829][ T6306] lowmem_reserve[]: 0 0 0 0 0 [ 97.861590][ T6306] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 97.907897][ T6362] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.921212][ T6306] lowmem_reserve[]: 0 0 0 0 0 [ 97.934126][ T6306] Node 1 Normal free:3951548kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 97.968847][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.989062][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.000134][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.005013][ T6306] lowmem_reserve[]: [ 98.010777][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.011338][ T6306] 0 [ 98.014886][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.014907][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.014929][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.014942][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.016673][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.077315][ T6306] 0 0 0 0 [ 98.080414][ T6306] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 98.093872][ T6306] Node 0 DMA32: 503*4kB (UE) 50*8kB (UE) 146*16kB (UME) 186*32kB (UME) 79*64kB (UME) 45*128kB (UME) 6*256kB (UM) 4*512kB (ME) 4*1024kB (UME) 2*2048kB (ME) 358*4096kB (M) = 1499660kB [ 98.123044][ T6365] tipc: Enabling of bearer rejected, already enabled [ 98.131721][ T6306] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 98.143520][ T6306] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 6*16kB (UM) 8*32kB (UM) 5*64kB (U) 2*128kB (U) 4*256kB (UM) 4*512kB (UM) 3*1024kB (U) 2*2048kB (UM) 962*4096kB (M) = 3951548kB [ 98.154941][ T6362] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.167655][ T6306] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.182723][ T6306] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.221493][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.234305][ T6306] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.241347][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.254202][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.263919][ T6306] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.264632][ T6306] 47996 total pagecache pages [ 98.264867][ T6306] 0 pages in swap cache [ 98.274195][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.274210][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.274226][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.274248][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.274260][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.275804][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.291933][ T6306] Free swap = 124996kB [ 98.349916][ T5862] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.374134][ T6306] Total swap = 124996kB [ 98.377014][ T5862] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.378313][ T6306] 2097051 pages RAM [ 98.406722][ T5862] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.410145][ T6306] 0 pages HighMem/MovableOnly [ 98.422248][ T6306] 400873 pages reserved [ 98.426853][ T6306] 0 pages cma reserved [ 98.431230][ T5862] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.746653][ T2819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.790151][ T2819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.924093][ T2875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.952268][ T2875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.446828][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.427303][ T5125] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.437619][ T5125] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.446298][ T5125] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.455672][ T5125] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.463497][ T5125] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 100.472204][ T5125] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.512196][ T5125] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.522750][ T5125] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.531151][ T5125] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.541062][ T5125] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.550642][ T5125] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 100.559574][ T5125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.811739][ T6444] dccp_close: ABORT with 190 bytes unread [ 101.229928][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.342285][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.558987][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.859165][ T6469] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 102.068863][ T61] bridge_slave_1: left allmulticast mode [ 102.089939][ T61] bridge_slave_1: left promiscuous mode [ 102.099786][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.117085][ T61] bridge_slave_0: left allmulticast mode [ 102.122870][ T61] bridge_slave_0: left promiscuous mode [ 102.133654][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.204198][ T6477] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 102.296205][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 102.544493][ T5110] Bluetooth: hci0: command tx timeout [ 102.589934][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.601522][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.613727][ T61] bond0 (unregistering): Released all slaves [ 102.625252][ T5110] Bluetooth: hci4: command tx timeout [ 102.844072][ T29] audit: type=1800 audit(1719229856.891:6): pid=6487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1941 res=0 errno=0 [ 102.931482][ T29] audit: type=1804 audit(1719229856.931:7): pid=6487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2420208982/syzkaller.if6cD3/128/memory.events" dev="sda1" ino=1941 res=1 errno=0 [ 102.975542][ T29] audit: type=1804 audit(1719229856.991:8): pid=6487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2420208982/syzkaller.if6cD3/128/memory.events" dev="sda1" ino=1941 res=1 errno=0 [ 103.535238][ T6451] chnl_net:caif_netlink_parms(): no params data found [ 103.629134][ T6449] chnl_net:caif_netlink_parms(): no params data found [ 103.752218][ T61] hsr_slave_0: left promiscuous mode [ 103.762297][ T61] hsr_slave_1: left promiscuous mode [ 103.793644][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.813133][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.834486][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.844144][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.874212][ T61] veth1_macvtap: left promiscuous mode [ 103.879901][ T61] veth0_macvtap: left promiscuous mode [ 103.885810][ T61] veth1_vlan: left promiscuous mode [ 103.891266][ T61] veth0_vlan: left promiscuous mode [ 104.624867][ T5110] Bluetooth: hci0: command tx timeout [ 104.633321][ T61] team0 (unregistering): Port device team_slave_1 removed [ 104.704346][ T5110] Bluetooth: hci4: command tx timeout [ 104.713505][ T61] team0 (unregistering): Port device team_slave_0 removed [ 105.094918][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 105.112982][ T6531] team_slave_0: entered promiscuous mode [ 105.118760][ T6531] team_slave_1: entered promiscuous mode [ 105.132421][ T6531] macvtap1: entered promiscuous mode [ 105.139473][ T6531] team0: entered promiscuous mode [ 105.145491][ T6531] macvtap1: entered allmulticast mode [ 105.150985][ T6531] team0: entered allmulticast mode [ 105.157640][ T6531] team_slave_0: entered allmulticast mode [ 105.163420][ T6531] team_slave_1: entered allmulticast mode [ 105.170767][ T6531] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 105.357317][ T6451] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.366612][ T2819] tipc: Subscription rejected, illegal request [ 105.383870][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.405955][ T6451] bridge_slave_0: entered allmulticast mode [ 105.413856][ T6451] bridge_slave_0: entered promiscuous mode [ 105.423803][ T6449] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.434529][ T6449] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.441889][ T6449] bridge_slave_0: entered allmulticast mode [ 105.450390][ T6449] bridge_slave_0: entered promiscuous mode [ 105.479698][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.504762][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.512052][ T6451] bridge_slave_1: entered allmulticast mode [ 105.557498][ T6451] bridge_slave_1: entered promiscuous mode [ 105.647423][ T6449] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.657593][ T6449] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.674286][ T6449] bridge_slave_1: entered allmulticast mode [ 105.682696][ T6449] bridge_slave_1: entered promiscuous mode [ 105.735607][ T6451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.805652][ T6451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.941606][ T6449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.022147][ T6451] team0: Port device team_slave_0 added [ 106.071258][ T6449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.101267][ T6451] team0: Port device team_slave_1 added [ 106.216083][ T6611] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 106.230028][ T6611] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 106.250302][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.300004][ T6449] team0: Port device team_slave_0 added [ 106.361615][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.375690][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.419266][ T6451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.462223][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.508983][ T6449] team0: Port device team_slave_1 added [ 106.559204][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.569089][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.598522][ T6451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.624518][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.697047][ T6449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.710285][ T6449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.714380][ T5110] Bluetooth: hci0: command tx timeout [ 106.779212][ T6449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.795022][ T5110] Bluetooth: hci4: command tx timeout [ 106.847825][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.871267][ T6449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.878535][ T6449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.907373][ T6449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.997639][ T6451] hsr_slave_0: entered promiscuous mode [ 107.008256][ T6451] hsr_slave_1: entered promiscuous mode [ 107.093583][ T6449] hsr_slave_0: entered promiscuous mode [ 107.103519][ T6449] hsr_slave_1: entered promiscuous mode [ 107.119510][ T6449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.133187][ T6449] Cannot create hsr debugfs directory [ 107.232877][ T61] bridge_slave_1: left allmulticast mode [ 107.241809][ T61] bridge_slave_1: left promiscuous mode [ 107.252250][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.267267][ T61] bridge_slave_0: left allmulticast mode [ 107.273173][ T61] bridge_slave_0: left promiscuous mode [ 107.293195][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.350910][ T29] audit: type=1804 audit(1719229861.401:9): pid=6646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2420208982/syzkaller.if6cD3/144/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 107.526263][ T6630] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 107.589617][ T6656] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 107.606282][ T6656] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.843645][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.857444][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.868198][ T61] bond0 (unregistering): Released all slaves [ 108.023377][ T6667] xt_cgroup: xt_cgroup: no path or classid specified [ 108.193359][ T6677] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 108.342048][ T6682] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.457977][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 108.503803][ T61] hsr_slave_0: left promiscuous mode [ 108.511700][ T61] hsr_slave_1: left promiscuous mode [ 108.518061][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.526119][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.535190][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.543718][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.598370][ T61] veth1_macvtap: left promiscuous mode [ 108.604678][ T61] veth0_macvtap: left promiscuous mode [ 108.610373][ T61] veth1_vlan: left promiscuous mode [ 108.616166][ T61] veth0_vlan: left promiscuous mode [ 108.864751][ T5110] Bluetooth: hci4: command tx timeout [ 108.899407][ T6693] sctp: [Deprecated]: syz-executor.2 (pid 6693) Use of struct sctp_assoc_value in delayed_ack socket option. [ 108.899407][ T6693] Use struct sctp_sack_info instead [ 109.423228][ T61] team0 (unregistering): Port device team_slave_1 removed [ 109.475440][ T61] team0 (unregistering): Port device team_slave_0 removed [ 109.493053][ T6718] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.052644][ T6725] sctp: [Deprecated]: syz-executor.3 (pid 6725) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.052644][ T6725] Use struct sctp_sack_info instead [ 110.342234][ T6449] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 110.351913][ T6449] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 110.378074][ T6449] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 110.392215][ T6449] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 110.491901][ T6449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.517453][ T6449] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.531447][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.538634][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.558464][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.565726][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.672305][ T6451] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.683723][ T6451] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.704926][ T6451] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.718644][ T6451] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.941175][ T6451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.023879][ T6451] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.074523][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.081694][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.093122][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.100243][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.205205][ T6449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.398421][ T6449] veth0_vlan: entered promiscuous mode [ 111.418633][ T6764] sctp: [Deprecated]: syz-executor.4 (pid 6764) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.418633][ T6764] Use struct sctp_sack_info instead [ 111.429789][ T6449] veth1_vlan: entered promiscuous mode [ 111.542222][ T6449] veth0_macvtap: entered promiscuous mode [ 111.572687][ T6449] veth1_macvtap: entered promiscuous mode [ 111.619264][ T6449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.637479][ T6449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.649256][ T6449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.661261][ T6449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.675341][ T6449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.685944][ T6449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.700891][ T6449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.740176][ T6449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.758108][ T6449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.768091][ T6449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.778762][ T6449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.788762][ T6449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.799553][ T6449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.812103][ T6449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.850456][ T6449] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.884393][ T6449] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.893141][ T6449] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.920137][ T6449] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.970736][ T6451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.013650][ T6789] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 112.018763][ T6788] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 112.181226][ T6451] veth0_vlan: entered promiscuous mode [ 112.218894][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.228347][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.283437][ T6451] veth1_vlan: entered promiscuous mode [ 112.313075][ T6789] tipc: Started in network mode [ 112.320007][ T6789] tipc: Node identity , cluster identity 4711 [ 112.326559][ T6789] tipc: Failed to set node id, please configure manually [ 112.335232][ T6789] tipc: Enabling of bearer rejected, failed to enable media [ 112.365950][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.410953][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.443094][ T6451] veth0_macvtap: entered promiscuous mode [ 112.491987][ T6451] veth1_macvtap: entered promiscuous mode [ 112.640471][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.662455][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.681635][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.692299][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.708962][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.720710][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.732427][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.746084][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.758118][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.782057][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.808840][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.825035][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.874257][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.901833][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.934522][ T6826] IPVS: set_ctl: invalid protocol: 0 172.20.20.0:0 [ 112.935113][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.960654][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.973479][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.991109][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.006833][ T6451] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.025465][ T6451] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.055855][ T6451] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.073257][ T6451] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.098843][ T6831] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 113.192911][ T6836] sctp: [Deprecated]: syz-executor.3 (pid 6836) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.192911][ T6836] Use struct sctp_sack_info instead [ 113.306170][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.320304][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.372269][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.382969][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.793517][ T6867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.990413][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 114.226036][ T5125] Bluetooth: hci4: command 0x0405 tx timeout [ 114.857094][ T2875] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.390499][ T5125] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.402683][ T5125] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.411688][ T5125] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.420222][ T5125] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.437346][ T5125] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 115.445288][ T5125] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.717610][ T6913] chnl_net:caif_netlink_parms(): no params data found [ 115.819233][ T6913] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.827985][ T6913] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.837004][ T6913] bridge_slave_0: entered allmulticast mode [ 115.845768][ T6913] bridge_slave_0: entered promiscuous mode [ 115.856232][ T6913] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.863798][ T6913] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.871285][ T6913] bridge_slave_1: entered allmulticast mode [ 115.879410][ T6913] bridge_slave_1: entered promiscuous mode [ 115.931854][ T6913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.951926][ T6913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.013110][ T6913] team0: Port device team_slave_0 added [ 116.030636][ T6913] team0: Port device team_slave_1 added [ 116.069255][ T6923] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 116.082477][ T6913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.091189][ T6913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.151382][ T6913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.185208][ T6913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.192210][ T6913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.233666][ T6913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.246183][ T6923] tipc: Started in network mode [ 116.251067][ T6923] tipc: Node identity , cluster identity 4711 [ 116.281891][ T6923] tipc: Failed to set node id, please configure manually [ 116.293361][ T6923] tipc: Enabling of bearer rejected, failed to enable media [ 116.352586][ T2875] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.484068][ T29] audit: type=1800 audit(1719229870.531:10): pid=6852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="memory.events" dev="sda1" ino=1940 res=0 errno=0 [ 116.654229][ T2875] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.729628][ T6913] hsr_slave_0: entered promiscuous mode [ 116.782812][ T6913] hsr_slave_1: entered promiscuous mode [ 116.794160][ T6913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.812781][ T6913] Cannot create hsr debugfs directory [ 116.907172][ T2875] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.143680][ T6947] netlink: 105120 bytes leftover after parsing attributes in process `syz-executor.2'. [ 117.296393][ T2875] bridge_slave_1: left allmulticast mode [ 117.302130][ T2875] bridge_slave_1: left promiscuous mode [ 117.316031][ T2875] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.345790][ T2875] bridge_slave_0: left allmulticast mode [ 117.352325][ T2875] bridge_slave_0: left promiscuous mode [ 117.372978][ T2875] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.373042][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 117.395333][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 117.406224][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 117.419643][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 117.428761][ T5118] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 117.440463][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 117.505289][ T5118] Bluetooth: hci0: command tx timeout [ 118.156200][ T2875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.170333][ T2875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.181063][ T2875] bond0 (unregistering): Released all slaves [ 118.612959][ T6984] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 118.634174][ T6984] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 118.659092][ T2875] hsr_slave_0: left promiscuous mode [ 118.672845][ T2875] hsr_slave_1: left promiscuous mode [ 118.682390][ T2875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.697433][ T2875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.705670][ T2875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.727976][ T2875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.803230][ T2875] veth1_macvtap: left promiscuous mode [ 118.809079][ T2875] veth0_macvtap: left promiscuous mode [ 118.815135][ T2875] veth1_vlan: left promiscuous mode [ 118.820575][ T2875] veth0_vlan: left promiscuous mode [ 119.051587][ T7002] x_tables: unsorted underflow at hook 2 [ 119.142043][ T7004] Bluetooth: MGMT ver 1.22 [ 119.430660][ T2875] team0 (unregistering): Port device team_slave_1 removed [ 119.430909][ T7013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.473315][ T2875] team0 (unregistering): Port device team_slave_0 removed [ 119.521809][ T5118] Bluetooth: hci4: command tx timeout [ 119.586177][ T5118] Bluetooth: hci0: command 0x041b tx timeout [ 119.881004][ T6984] syzkaller0: entered promiscuous mode [ 119.888288][ T6984] syzkaller0: entered allmulticast mode [ 120.142654][ T6948] chnl_net:caif_netlink_parms(): no params data found [ 120.203260][ T7025] syzkaller1: entered promiscuous mode [ 120.209106][ T7025] syzkaller1: entered allmulticast mode [ 120.253729][ T6913] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 120.297337][ T6913] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 120.310582][ T6913] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 120.337095][ T6913] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 120.409675][ T6948] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.418340][ T6948] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.426448][ T6948] bridge_slave_0: entered allmulticast mode [ 120.439695][ T6948] bridge_slave_0: entered promiscuous mode [ 120.451520][ T6948] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.459943][ T6948] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.468477][ T6948] bridge_slave_1: entered allmulticast mode [ 120.476215][ T6948] bridge_slave_1: entered promiscuous mode [ 120.502790][ T7036] x_tables: unsorted underflow at hook 2 [ 120.553639][ T6948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.573312][ T6948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.631158][ T6948] team0: Port device team_slave_0 added [ 120.652376][ T6948] team0: Port device team_slave_1 added [ 120.697333][ T2875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.758589][ T6948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.772470][ T6948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.804642][ T6948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.867021][ T2875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.905710][ T6948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.919734][ T6948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.992745][ T6948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.082769][ T2875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.148706][ T6948] hsr_slave_0: entered promiscuous mode [ 121.156179][ T6948] hsr_slave_1: entered promiscuous mode [ 121.163021][ T6948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.179424][ T6948] Cannot create hsr debugfs directory [ 121.218898][ T2875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.241170][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 121.389447][ T7069] x_tables: unsorted underflow at hook 2 [ 121.403434][ T6913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.532719][ T6913] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.566749][ T2875] bridge_slave_1: left allmulticast mode [ 121.572656][ T2875] bridge_slave_1: left promiscuous mode [ 121.579492][ T2875] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.588166][ T5118] Bluetooth: hci4: command tx timeout [ 121.596879][ T2875] bridge_slave_0: left allmulticast mode [ 121.602555][ T2875] bridge_slave_0: left promiscuous mode [ 121.608592][ T2875] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.675336][ T5118] Bluetooth: hci0: command 0x041b tx timeout [ 121.681520][ T5110] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 121.921712][ T7083] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.032508][ T2875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.044808][ T2875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.058632][ T2875] bond0 (unregistering): Released all slaves [ 122.072288][ T7075] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 122.092223][ T7075] bond1: entered promiscuous mode [ 122.132822][ T7076] bond1: (slave ip6gretap1): making interface the new active one [ 122.147732][ T7076] ip6gretap1: entered promiscuous mode [ 122.156500][ T7076] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 122.186054][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.198350][ T7077] bond1: entered allmulticast mode [ 122.203620][ T7077] ip6gretap1: entered allmulticast mode [ 122.210437][ T7077] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.229269][ T7086] syz_tun: entered promiscuous mode [ 122.240835][ T7086] macvtap2: entered promiscuous mode [ 122.254363][ T7086] macvtap2: entered allmulticast mode [ 122.264195][ T7086] syz_tun: entered allmulticast mode [ 122.272635][ T7086] syz_tun: left allmulticast mode [ 122.300998][ T7086] syz_tun: left promiscuous mode [ 122.437826][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.445029][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.477991][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.485192][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.575134][ T7102] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.791986][ T2875] hsr_slave_0: left promiscuous mode [ 122.816327][ T2875] hsr_slave_1: left promiscuous mode [ 122.836573][ T2875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.867567][ T2875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.901063][ T2875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.921942][ T2875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.987677][ T2875] veth1_macvtap: left promiscuous mode [ 123.000466][ T2875] veth0_macvtap: left promiscuous mode [ 123.006517][ T2875] veth1_vlan: left promiscuous mode [ 123.022072][ T2875] veth0_vlan: left promiscuous mode [ 123.069656][ T7116] openvswitch: netlink: Missing key (keys=40, expected=80) [ 123.667518][ T5110] Bluetooth: hci4: command tx timeout [ 123.744673][ T5110] Bluetooth: hci0: command 0x041b tx timeout [ 123.766056][ T2875] team0 (unregistering): Port device team_slave_1 removed [ 123.829668][ T2875] team0 (unregistering): Port device team_slave_0 removed [ 124.411092][ T6948] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.443086][ T6948] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.474643][ T6948] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.545994][ T7132] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 124.564107][ T7132] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.691174][ T6948] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.749918][ T6913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.905059][ T6913] veth0_vlan: entered promiscuous mode [ 124.946992][ T6913] veth1_vlan: entered promiscuous mode [ 125.105049][ T6913] veth0_macvtap: entered promiscuous mode [ 125.137888][ T6913] veth1_macvtap: entered promiscuous mode [ 125.163609][ T6948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.232021][ T6948] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.254146][ T6913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.265255][ T6913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.281353][ T6913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.292569][ T6913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.303667][ T6913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.314298][ T6913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.325863][ T6913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.336911][ T6913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.349360][ T6913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.359914][ T6913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.370530][ T6913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.380462][ T6913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.390959][ T6913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.402561][ T6913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.417951][ T7154] syz_tun: entered promiscuous mode [ 125.423331][ T7154] macvtap2: entered promiscuous mode [ 125.428851][ T7154] macvtap2: entered allmulticast mode [ 125.434794][ T7154] syz_tun: entered allmulticast mode [ 125.442203][ T7154] syz_tun: left allmulticast mode [ 125.447743][ T7154] syz_tun: left promiscuous mode [ 125.487806][ T5191] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.495060][ T5191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.505653][ T5191] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.512753][ T5191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.531892][ T6913] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.541109][ T6913] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.550204][ T6913] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.572834][ T6913] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.753009][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.754339][ T5110] Bluetooth: hci4: command tx timeout [ 125.770695][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.824737][ T5110] Bluetooth: hci0: command 0x041b tx timeout [ 125.878666][ T2875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.908955][ T2875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.170227][ T7170] syzkaller1: entered promiscuous mode [ 126.177511][ T7170] syzkaller1: entered allmulticast mode [ 126.236969][ T6948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.305544][ T7174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.386124][ T6948] veth0_vlan: entered promiscuous mode [ 126.408033][ T6948] veth1_vlan: entered promiscuous mode [ 126.457988][ T6948] veth0_macvtap: entered promiscuous mode [ 126.479247][ T6948] veth1_macvtap: entered promiscuous mode [ 126.513078][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.532879][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.545862][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.570223][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.583435][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.598668][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.610342][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.621200][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.635600][ T6948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.655517][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.673263][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.683886][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.696388][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.714100][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.727417][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.737665][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.748248][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.760078][ T6948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.786017][ T6948] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.798670][ T6948] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.809955][ T6948] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.831560][ T6948] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.230204][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.262287][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.360763][ T2819] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.559940][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.577380][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.969351][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 127.978766][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 127.987623][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 128.010524][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 128.018994][ T5118] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 128.028435][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 128.309829][ T2819] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.343873][ T7248] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 128.363664][ T7248] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 128.481424][ T2819] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.627481][ T2819] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.940814][ T7234] chnl_net:caif_netlink_parms(): no params data found [ 129.012661][ T2819] bridge_slave_1: left allmulticast mode [ 129.018693][ T2819] bridge_slave_1: left promiscuous mode [ 129.025591][ T2819] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.036145][ T2819] bridge_slave_0: left allmulticast mode [ 129.041824][ T2819] bridge_slave_0: left promiscuous mode [ 129.048247][ T2819] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.467591][ T2819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.485607][ T2819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.509919][ T2819] bond0 (unregistering): Released all slaves [ 129.817305][ T7286] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.839258][ T7286] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. [ 130.064400][ T5118] Bluetooth: hci0: command tx timeout [ 130.156081][ T7234] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.163318][ T7234] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.184315][ T7234] bridge_slave_0: entered allmulticast mode [ 130.195813][ T7234] bridge_slave_0: entered promiscuous mode [ 130.215629][ T7234] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.222772][ T7234] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.262736][ T7234] bridge_slave_1: entered allmulticast mode [ 130.275047][ T7234] bridge_slave_1: entered promiscuous mode [ 130.302218][ T5110] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 130.318832][ T5110] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 130.326449][ T2819] hsr_slave_0: left promiscuous mode [ 130.332499][ T5110] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 130.340246][ T2819] hsr_slave_1: left promiscuous mode [ 130.347589][ T5110] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 130.360014][ T2819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.368125][ T2819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.374228][ T5110] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 130.385068][ T2819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.393343][ T2819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.400715][ T5110] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 130.439993][ T2819] veth1_macvtap: left promiscuous mode [ 130.448073][ T2819] veth0_macvtap: left promiscuous mode [ 130.453849][ T2819] veth1_vlan: left promiscuous mode [ 130.461174][ T2819] veth0_vlan: left promiscuous mode [ 130.876236][ T2819] team0 (unregistering): Port device team_slave_1 removed [ 130.909073][ T2819] team0 (unregistering): Port device team_slave_0 removed [ 131.222008][ T7300] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 131.252071][ T7300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.280558][ T7300] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 131.338132][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 131.362454][ T7234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.413441][ T7234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.540852][ T7234] team0: Port device team_slave_0 added [ 131.562386][ T7319] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 131.568008][ T7234] team0: Port device team_slave_1 added [ 131.839571][ T7234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.854255][ T7234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.909745][ T7234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.936834][ T7234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.952694][ T7234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.985898][ T7234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.098175][ T7341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.144620][ T5118] Bluetooth: hci0: command tx timeout [ 132.157635][ T7340] gretap0: entered promiscuous mode [ 132.166319][ T7340] gretap0: left promiscuous mode [ 132.245722][ T7234] hsr_slave_0: entered promiscuous mode [ 132.275744][ T7234] hsr_slave_1: entered promiscuous mode [ 132.317893][ T7347] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 132.327805][ T7303] chnl_net:caif_netlink_parms(): no params data found [ 132.335084][ T7347] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 132.348875][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.465012][ T5118] Bluetooth: hci4: command tx timeout [ 132.583685][ T2819] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.719644][ T2819] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.841136][ T7303] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.856255][ T7303] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.884382][ T7303] bridge_slave_0: entered allmulticast mode [ 132.895684][ T7303] bridge_slave_0: entered promiscuous mode [ 132.913806][ T7303] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.923836][ T7303] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.940122][ T7303] bridge_slave_1: entered allmulticast mode [ 132.960143][ T7303] bridge_slave_1: entered promiscuous mode [ 133.172363][ T2819] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.192528][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.199097][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.200850][ T5110] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 133.222255][ T5110] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 133.231515][ T5110] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 133.240498][ T5110] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 133.254306][ T5110] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 133.261865][ T5110] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 133.327928][ T7303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.365612][ T2819] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.393859][ T7303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.542015][ T7303] team0: Port device team_slave_0 added [ 133.587571][ T7303] team0: Port device team_slave_1 added [ 133.646438][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 133.719387][ T7303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.737638][ T7303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.769537][ T7303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.815976][ T7303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.840817][ T7303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.868210][ T7303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.962914][ T7400] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.2'. [ 133.999068][ T7303] hsr_slave_0: entered promiscuous mode [ 134.007312][ T7303] hsr_slave_1: entered promiscuous mode [ 134.013844][ T7303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.032926][ T7303] Cannot create hsr debugfs directory [ 134.040157][ T2819] bridge_slave_1: left allmulticast mode [ 134.059736][ T2819] bridge_slave_1: left promiscuous mode [ 134.073541][ T2819] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.078731][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 134.092518][ T2819] bridge_slave_0: left allmulticast mode [ 134.098914][ T2819] bridge_slave_0: left promiscuous mode [ 134.105002][ T2819] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.234325][ T5118] Bluetooth: hci0: command tx timeout [ 134.442707][ T2819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.453800][ T2819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.465716][ T2819] bond0 (unregistering): Released all slaves [ 134.561399][ T5118] Bluetooth: hci4: command tx timeout [ 134.835718][ T7372] chnl_net:caif_netlink_parms(): no params data found [ 134.861764][ T7234] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 134.908694][ T2819] hsr_slave_0: left promiscuous mode [ 134.922664][ T2819] hsr_slave_1: left promiscuous mode [ 134.931293][ T2819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.944516][ T2819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.960262][ T2819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.968399][ T2819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.983219][ T7422] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 134.991438][ T2819] veth1_macvtap: left promiscuous mode [ 134.993737][ T7422] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 134.998481][ T2819] veth0_macvtap: left promiscuous mode [ 134.998644][ T2819] veth1_vlan: left promiscuous mode [ 135.017689][ T2819] veth0_vlan: left promiscuous mode [ 135.344428][ T5118] Bluetooth: hci1: command tx timeout [ 135.440423][ T2819] team0 (unregistering): Port device team_slave_1 removed [ 135.479799][ T2819] team0 (unregistering): Port device team_slave_0 removed [ 135.801689][ T7234] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 135.910609][ T7428] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 135.921238][ T7234] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 135.964998][ T7428] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 135.985808][ T7234] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 136.227219][ T7372] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.264469][ T7372] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.271804][ T7372] bridge_slave_0: entered allmulticast mode [ 136.281420][ T7372] bridge_slave_0: entered promiscuous mode [ 136.295871][ T7372] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.303091][ T7372] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.312851][ T7372] bridge_slave_1: entered allmulticast mode [ 136.315145][ T5118] Bluetooth: hci0: command tx timeout [ 136.326652][ T7372] bridge_slave_1: entered promiscuous mode [ 136.377512][ T7441] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 136.390140][ T7441] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 136.398571][ T7441] CPU: 1 PID: 7441 Comm: syz-executor.3 Not tainted 6.10.0-rc4-syzkaller-00875-g568ebdaba637 #0 [ 136.409000][ T7441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 136.419063][ T7441] RIP: 0010:dev_map_enqueue+0x31/0x3e0 [ 136.424551][ T7441] Code: 41 56 41 55 41 54 53 48 83 ec 18 49 89 d4 49 89 f5 48 89 fd 49 be 00 00 00 00 00 fc ff df e8 b6 9b d7 ff 48 89 e8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 ef e8 f0 58 3d 00 4c 8b 7d 00 48 83 c5 [ 136.444186][ T7441] RSP: 0018:ffffc9000387f678 EFLAGS: 00010246 [ 136.450289][ T7441] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 136.458282][ T7441] RDX: ffffc9000a3ba000 RSI: 00000000000008db RDI: 00000000000008dc [ 136.466267][ T7441] RBP: 0000000000000000 R08: ffffffff8961e3b6 R09: ffffffff8961e373 [ 136.474228][ T7441] R10: 0000000000000004 R11: ffff888029cd8000 R12: ffff888060ad4000 [ 136.482183][ T7441] R13: ffff888018ecb070 R14: dffffc0000000000 R15: 0000000000000000 [ 136.490169][ T7441] FS: 00007f7e760026c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 136.499103][ T7441] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.505694][ T7441] CR2: 0000001b32e41000 CR3: 000000001fb44000 CR4: 00000000003506f0 [ 136.513652][ T7441] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 136.521626][ T7441] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 136.529584][ T7441] Call Trace: [ 136.532862][ T7441] [ 136.535787][ T7441] ? __die_body+0x88/0xe0 [ 136.540106][ T7441] ? die_addr+0x108/0x140 [ 136.544433][ T7441] ? exc_general_protection+0x3dd/0x5d0 [ 136.549985][ T7441] ? asm_exc_general_protection+0x26/0x30 [ 136.555701][ T7441] ? xdp_do_redirect_frame+0x243/0x660 [ 136.561169][ T7441] ? xdp_do_redirect_frame+0x286/0x660 [ 136.566655][ T7441] ? dev_map_enqueue+0x31/0x3e0 [ 136.571510][ T7441] ? dev_map_enqueue+0x2a/0x3e0 [ 136.576392][ T7441] xdp_do_redirect_frame+0x2a6/0x660 [ 136.581675][ T7441] bpf_test_run_xdp_live+0xe60/0x1e60 [ 136.587048][ T7441] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 136.592600][ T7441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 136.598421][ T7441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 136.604304][ T7441] ? __might_fault+0xaa/0x120 [ 136.608986][ T7441] ? __might_fault+0xc6/0x120 [ 136.613640][ T7441] ? _copy_from_user+0xa6/0xe0 [ 136.618474][ T7441] ? bpf_test_init+0x15a/0x180 [ 136.623247][ T7441] ? xdp_convert_md_to_buff+0x5b/0x330 [ 136.628694][ T7441] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 136.634084][ T7441] ? __pfx_lock_release+0x10/0x10 [ 136.639103][ T7441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 136.644919][ T7441] ? __fget_files+0x29/0x470 [ 136.649565][ T7441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 136.655463][ T7441] bpf_prog_test_run+0x33a/0x3b0 [ 136.660417][ T7441] __sys_bpf+0x48d/0x810 [ 136.664654][ T7441] ? __pfx___sys_bpf+0x10/0x10 [ 136.669443][ T7441] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 136.675548][ T7441] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 136.681517][ T7441] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 136.687925][ T7441] ? do_syscall_64+0x100/0x230 [ 136.692688][ T7441] __x64_sys_bpf+0x7c/0x90 [ 136.697103][ T7441] do_syscall_64+0xf3/0x230 [ 136.701610][ T7441] ? clear_bhb_loop+0x35/0x90 [ 136.706279][ T7441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.712166][ T7441] RIP: 0033:0x7f7e7527d0a9 [ 136.716581][ T7441] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 136.736174][ T7441] RSP: 002b:00007f7e760020c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 136.744573][ T7441] RAX: ffffffffffffffda RBX: 00007f7e753b3f80 RCX: 00007f7e7527d0a9 [ 136.752538][ T7441] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a [ 136.760578][ T7441] RBP: 00007f7e752ec074 R08: 0000000000000000 R09: 0000000000000000 [ 136.768532][ T7441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.776483][ T7441] R13: 000000000000000b R14: 00007f7e753b3f80 R15: 00007fffcfd1c428 [ 136.784459][ T7441] [ 136.787482][ T7441] Modules linked in: [ 136.791552][ T7441] ---[ end trace 0000000000000000 ]--- [ 136.797051][ T7441] RIP: 0010:dev_map_enqueue+0x31/0x3e0 [ 136.802536][ T7441] Code: 41 56 41 55 41 54 53 48 83 ec 18 49 89 d4 49 89 f5 48 89 fd 49 be 00 00 00 00 00 fc ff df e8 b6 9b d7 ff 48 89 e8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 ef e8 f0 58 3d 00 4c 8b 7d 00 48 83 c5 [ 136.822262][ T7441] RSP: 0018:ffffc9000387f678 EFLAGS: 00010246 [ 136.828365][ T7441] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 136.836353][ T7441] RDX: ffffc9000a3ba000 RSI: 00000000000008db RDI: 00000000000008dc [ 136.844356][ T7441] RBP: 0000000000000000 R08: ffffffff8961e3b6 R09: ffffffff8961e373 [ 136.852340][ T7441] R10: 0000000000000004 R11: ffff888029cd8000 R12: ffff888060ad4000 [ 136.860329][ T7441] R13: ffff888018ecb070 R14: dffffc0000000000 R15: 0000000000000000 [ 136.868315][ T7441] FS: 00007f7e760026c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 136.877250][ T7441] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.883818][ T7441] CR2: 0000001b32e41000 CR3: 000000001fb44000 CR4: 00000000003506f0 [ 136.891833][ T7441] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 136.899843][ T7441] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 136.907853][ T7441] Kernel panic - not syncing: Fatal exception in interrupt [ 136.915158][ T7441] Kernel Offset: disabled [ 136.919477][ T7441] Rebooting in 86400 seconds..