last executing test programs: 11.387812422s ago: executing program 1 (id=2): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0104000000000000000001000000000000000c4100000014001462726f6164636173742d6c696e6ba1"], 0x30}}, 0x0) 11.201883197s ago: executing program 0 (id=1): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}], 0x2, 0x4044800) 11.171296019s ago: executing program 2 (id=3): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000040)='^C', 0x2}, {0x0}], 0x2}}], 0x1, 0x20000011) 460.088293ms ago: executing program 2 (id=6): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000005a0001"], 0x4c}}, 0x0) 0s ago: executing program 0 (id=5): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$unix(0x1, 0x2, 0x0) gettid() r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="88008000080211000001080211000000505050505050d0ffebe5a5e0483c8ca4688a000000000000"], 0x28) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140), 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000008c0)=ANY=[], 0x3c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000003e0095"], &(0x7f0000000000)='syzkaller\x00'}, 0xc3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='contention_begin\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448ca, 0x0) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "97dded"}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'team_slave_1\x00'}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000080)={0x0, 'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'team0\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180), 0x0) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc) bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, 0x1}, 0x10) close(r0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000700)={'team_slave_1\x00', 0x800}) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) listen(0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000180)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0xd1, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x1b, 0x8, 0x8, &(0x7f0000000140)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', r7, 0x2f, 0xff, 0x40, 0x9, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x80, 0x40, 0x0, 0x7}}) socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.100' (ED25519) to the list of known hosts. [ 57.725956][ T5078] cgroup: Unknown subsys name 'net' [ 57.862335][ T5078] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.318134][ T5078] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.069132][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.077812][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.085842][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.093996][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.104537][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.114897][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.123675][ T5089] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.131719][ T5089] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.134914][ T5090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.140937][ T5089] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.164183][ T5089] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.172083][ T5089] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.189181][ T5090] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.198432][ T5090] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.206262][ T5090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.225986][ T5090] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.234422][ T5090] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.241936][ T5090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.499768][ T5085] chnl_net:caif_netlink_parms(): no params data found [ 61.585667][ T5088] chnl_net:caif_netlink_parms(): no params data found [ 61.673596][ T5085] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.681489][ T5085] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.689362][ T5085] bridge_slave_0: entered allmulticast mode [ 61.697165][ T5085] bridge_slave_0: entered promiscuous mode [ 61.706310][ T5085] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.713437][ T5085] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.720961][ T5085] bridge_slave_1: entered allmulticast mode [ 61.728126][ T5085] bridge_slave_1: entered promiscuous mode [ 61.753480][ T5092] chnl_net:caif_netlink_parms(): no params data found [ 61.794083][ T5085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.807109][ T5085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.832368][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.839650][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.847555][ T5088] bridge_slave_0: entered allmulticast mode [ 61.854293][ T5088] bridge_slave_0: entered promiscuous mode [ 61.882551][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.889801][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.897039][ T5088] bridge_slave_1: entered allmulticast mode [ 61.904045][ T5088] bridge_slave_1: entered promiscuous mode [ 61.944248][ T5085] team0: Port device team_slave_0 added [ 61.967828][ T5085] team0: Port device team_slave_1 added [ 61.986643][ T5088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.016216][ T5088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.046592][ T5085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.053563][ T5085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.079919][ T5085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.094013][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.101251][ T5092] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.108472][ T5092] bridge_slave_0: entered allmulticast mode [ 62.115500][ T5092] bridge_slave_0: entered promiscuous mode [ 62.132834][ T5085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.139962][ T5085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.165973][ T5085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.177325][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.184491][ T5092] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.192455][ T5092] bridge_slave_1: entered allmulticast mode [ 62.199688][ T5092] bridge_slave_1: entered promiscuous mode [ 62.209306][ T5088] team0: Port device team_slave_0 added [ 62.218469][ T5088] team0: Port device team_slave_1 added [ 62.259190][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.266715][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.292799][ T5088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.305456][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.312431][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.338854][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.376988][ T5092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.389140][ T5092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.412496][ T5085] hsr_slave_0: entered promiscuous mode [ 62.419833][ T5085] hsr_slave_1: entered promiscuous mode [ 62.452696][ T5092] team0: Port device team_slave_0 added [ 62.483379][ T5092] team0: Port device team_slave_1 added [ 62.512327][ T5088] hsr_slave_0: entered promiscuous mode [ 62.518649][ T5088] hsr_slave_1: entered promiscuous mode [ 62.526347][ T5088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.534156][ T5088] Cannot create hsr debugfs directory [ 62.600977][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.608001][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.634344][ T5092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.671099][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.678186][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.705293][ T5092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.822095][ T5092] hsr_slave_0: entered promiscuous mode [ 62.830199][ T5092] hsr_slave_1: entered promiscuous mode [ 62.837412][ T5092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.846080][ T5092] Cannot create hsr debugfs directory [ 62.980792][ T5088] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.992025][ T5088] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.017869][ T5088] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.033961][ T5088] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.088523][ T5085] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.120289][ T5085] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.146822][ T5085] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.168731][ T5092] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.181414][ T5085] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.191387][ T5092] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.199467][ T5090] Bluetooth: hci0: command tx timeout [ 63.210792][ T5092] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.225649][ T5092] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.265244][ T5090] Bluetooth: hci2: command tx timeout [ 63.271012][ T5090] Bluetooth: hci1: command tx timeout [ 63.350016][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.391763][ T5088] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.414520][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.422421][ T5107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.440343][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.447531][ T5114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.506525][ T5085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.547794][ T5085] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.562290][ T5092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.581352][ T5088] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.591963][ T5088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.618822][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.626129][ T5107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.643365][ T5092] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.668997][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.676140][ T5107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.718049][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.725258][ T5107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.762904][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.770130][ T5107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.947653][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.051882][ T5085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.078565][ T5088] veth0_vlan: entered promiscuous mode [ 64.091875][ T5088] veth1_vlan: entered promiscuous mode [ 64.108216][ T5092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.173546][ T5088] veth0_macvtap: entered promiscuous mode [ 64.189281][ T5085] veth0_vlan: entered promiscuous mode [ 64.203852][ T5088] veth1_macvtap: entered promiscuous mode [ 64.218570][ T5085] veth1_vlan: entered promiscuous mode [ 64.239566][ T5092] veth0_vlan: entered promiscuous mode [ 64.266656][ T5092] veth1_vlan: entered promiscuous mode [ 64.284062][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.320693][ T5092] veth0_macvtap: entered promiscuous mode [ 64.330496][ T5085] veth0_macvtap: entered promiscuous mode [ 64.343219][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.362659][ T5088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.372072][ T5088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.380972][ T5088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.392362][ T5088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.406309][ T5085] veth1_macvtap: entered promiscuous mode [ 64.413568][ T5092] veth1_macvtap: entered promiscuous mode [ 64.451685][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.462678][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.474555][ T5085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.505450][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.517732][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.530441][ T5085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.541356][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.555294][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.565405][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.576240][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.587962][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.603105][ T5085] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.612426][ T5085] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.621678][ T5085] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.632679][ T5085] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.651190][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.663907][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.674410][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.685067][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.696979][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.745230][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.745776][ T5092] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.753221][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.768420][ T5092] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.781368][ T5092] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.790865][ T5092] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.868801][ T2829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.895148][ T2829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.926625][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.934479][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.982828][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.007121][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.040624][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.057090][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.086779][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.094666][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.275514][ T5090] Bluetooth: hci0: command tx timeout [ 65.345874][ T5090] Bluetooth: hci1: command tx timeout [ 65.351352][ T5087] Bluetooth: hci2: command tx timeout [ 65.529077][ T5090] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.538552][ T5090] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.550573][ T5090] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.567466][ T5090] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.580259][ T5090] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.598000][ T5090] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.075895][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.085876][ T5089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.092592][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.104430][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.108540][ T5089] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.113069][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.126428][ T5089] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.127327][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.141620][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.161026][ T5087] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.178991][ T5087] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.187029][ T5087] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.450301][ T5137] chnl_net:caif_netlink_parms(): no params data found [ 66.589813][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.598267][ T5137] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.607065][ T5137] bridge_slave_0: entered allmulticast mode [ 66.613848][ T5137] bridge_slave_0: entered promiscuous mode [ 66.626295][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.633446][ T5137] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.641454][ T5137] bridge_slave_1: entered allmulticast mode [ 66.648684][ T5137] bridge_slave_1: entered promiscuous mode [ 66.693418][ T5137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.717872][ T5137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.789867][ T5137] team0: Port device team_slave_0 added [ 66.844098][ T5137] team0: Port device team_slave_1 added [ 66.878949][ T5143] chnl_net:caif_netlink_parms(): no params data found [ 66.900295][ T5137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.914877][ T5137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.943620][ T5137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.959058][ T5137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.966304][ T5137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.994634][ T5137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.060645][ T5145] chnl_net:caif_netlink_parms(): no params data found [ 67.104195][ T5137] hsr_slave_0: entered promiscuous mode [ 67.111115][ T5137] hsr_slave_1: entered promiscuous mode [ 67.120600][ T5137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.128565][ T5137] Cannot create hsr debugfs directory [ 67.203391][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.212163][ T5143] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.221531][ T5143] bridge_slave_0: entered allmulticast mode [ 67.229035][ T5143] bridge_slave_0: entered promiscuous mode [ 67.238744][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.246042][ T5143] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.253199][ T5143] bridge_slave_1: entered allmulticast mode [ 67.260306][ T5143] bridge_slave_1: entered promiscuous mode [ 67.358612][ T5143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.371125][ T5143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.432363][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.439664][ T5145] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.447739][ T5145] bridge_slave_0: entered allmulticast mode [ 67.454498][ T5145] bridge_slave_0: entered promiscuous mode [ 67.488635][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.497374][ T5145] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.504560][ T5145] bridge_slave_1: entered allmulticast mode [ 67.512307][ T5145] bridge_slave_1: entered promiscuous mode [ 67.537714][ T5143] team0: Port device team_slave_0 added [ 67.562748][ T5137] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.595980][ T5145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.606955][ T5143] team0: Port device team_slave_1 added [ 67.615771][ T5145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.661594][ T5143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.668701][ T5087] Bluetooth: hci3: command tx timeout [ 67.676168][ T5143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.703297][ T5143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.727392][ T5143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.736102][ T5143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.763371][ T5143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.779263][ T5145] team0: Port device team_slave_0 added [ 67.795640][ T5145] team0: Port device team_slave_1 added [ 67.828708][ T5145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.837688][ T5145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.864433][ T5145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.898545][ T5145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.906059][ T5145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.932656][ T5145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.956393][ T5143] hsr_slave_0: entered promiscuous mode [ 67.962811][ T5143] hsr_slave_1: entered promiscuous mode [ 67.970731][ T5143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.978437][ T5143] Cannot create hsr debugfs directory [ 68.025328][ T5145] hsr_slave_0: entered promiscuous mode [ 68.031782][ T5145] hsr_slave_1: entered promiscuous mode [ 68.039875][ T5145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.048168][ T5145] Cannot create hsr debugfs directory [ 68.225172][ T4490] Bluetooth: hci1: command tx timeout [ 68.230990][ T5087] Bluetooth: hci4: command tx timeout [ 68.631697][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.058984][ T5137] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.121775][ T5137] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.187851][ T5137] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.267874][ T5143] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.607663][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.664275][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.698338][ T5143] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.728516][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.745880][ T5087] Bluetooth: hci3: command tx timeout [ 69.779788][ T5143] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.863526][ T5143] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.940397][ T51] bridge_slave_1: left allmulticast mode [ 69.947357][ T51] bridge_slave_1: left promiscuous mode [ 69.953847][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.970464][ T51] bridge_slave_0: left allmulticast mode [ 69.976282][ T51] bridge_slave_0: left promiscuous mode [ 69.983812][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.305565][ T5087] Bluetooth: hci4: command tx timeout [ 70.305755][ T4490] Bluetooth: hci1: command tx timeout [ 70.381952][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.396046][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.408902][ T51] bond0 (unregistering): Released all slaves [ 70.556377][ T5143] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.602965][ T5143] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.613606][ T5143] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.688607][ T5143] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.891532][ T51] hsr_slave_0: left promiscuous mode [ 70.906647][ T51] hsr_slave_1: left promiscuous mode [ 70.919568][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.927220][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.942862][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.952196][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.982809][ T51] veth1_macvtap: left promiscuous mode [ 70.988741][ T51] veth0_macvtap: left promiscuous mode [ 70.994369][ T51] veth1_vlan: left promiscuous mode [ 71.000340][ T51] veth0_vlan: left promiscuous mode [ 71.330630][ T51] team0 (unregistering): Port device team_slave_1 removed [ 71.359037][ T51] team0 (unregistering): Port device team_slave_0 removed [ 71.701502][ T5143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.750932][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.762375][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.821382][ T5143] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.834989][ T4490] Bluetooth: hci3: command tx timeout [ 71.843968][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.851244][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.875942][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.883105][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.903745][ T5145] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.920211][ T5145] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.931712][ T5145] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.956944][ T5145] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.130935][ T5137] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.199323][ T5137] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.227935][ T5137] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.253545][ T5145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.280599][ T5137] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.322743][ T51] bridge_slave_1: left allmulticast mode [ 72.345079][ T51] bridge_slave_1: left promiscuous mode [ 72.350879][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.374157][ T51] bridge_slave_0: left allmulticast mode [ 72.380361][ T51] bridge_slave_0: left promiscuous mode [ 72.387281][ T4490] Bluetooth: hci1: command tx timeout [ 72.401602][ T4490] Bluetooth: hci4: command tx timeout [ 72.405553][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.424245][ T51] bridge_slave_1: left allmulticast mode [ 72.430538][ T51] bridge_slave_1: left promiscuous mode [ 72.443300][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.461349][ T51] bridge_slave_0: left allmulticast mode [ 72.469349][ T51] bridge_slave_0: left promiscuous mode [ 72.481025][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.184103][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.201816][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.215523][ T51] bond0 (unregistering): Released all slaves [ 73.295924][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.309475][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.320560][ T51] bond0 (unregistering): Released all slaves [ 73.339322][ T5145] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.388960][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.396157][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.409248][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.416463][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.488476][ T5143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.516426][ T5145] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.710451][ T5143] veth0_vlan: entered promiscuous mode [ 73.739688][ T5137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.770544][ T5143] veth1_vlan: entered promiscuous mode [ 73.832969][ T5137] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.869811][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.877013][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.905368][ T4490] Bluetooth: hci3: command tx timeout [ 73.927355][ T5145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.944541][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.951672][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.980410][ T5143] veth0_macvtap: entered promiscuous mode [ 73.992635][ T5143] veth1_macvtap: entered promiscuous mode [ 74.010389][ T51] hsr_slave_0: left promiscuous mode [ 74.017023][ T51] hsr_slave_1: left promiscuous mode [ 74.022920][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.032095][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.040483][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.048327][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.060463][ T51] hsr_slave_0: left promiscuous mode [ 74.066789][ T51] hsr_slave_1: left promiscuous mode [ 74.072862][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.081393][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.090154][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.098513][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.125311][ T51] veth1_macvtap: left promiscuous mode [ 74.130973][ T51] veth0_macvtap: left promiscuous mode [ 74.136920][ T51] veth1_vlan: left promiscuous mode [ 74.142369][ T51] veth0_vlan: left promiscuous mode [ 74.149665][ T51] veth1_macvtap: left promiscuous mode [ 74.155320][ T51] veth0_macvtap: left promiscuous mode [ 74.161164][ T51] veth1_vlan: left promiscuous mode [ 74.166687][ T51] veth0_vlan: left promiscuous mode [ 74.466426][ T5087] Bluetooth: hci1: command tx timeout [ 74.472046][ T4490] Bluetooth: hci4: command tx timeout [ 74.581644][ T51] team0 (unregistering): Port device team_slave_1 removed [ 74.618447][ T51] team0 (unregistering): Port device team_slave_0 removed [ 75.087484][ T51] team0 (unregistering): Port device team_slave_1 removed [ 75.119140][ T51] team0 (unregistering): Port device team_slave_0 removed [ 75.379416][ T5143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.432722][ T5143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.461375][ T5143] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.471246][ T5143] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.480343][ T5143] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.489440][ T5143] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.530261][ T5145] veth0_vlan: entered promiscuous mode [ 75.561831][ T5137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.578165][ T5145] veth1_vlan: entered promiscuous mode [ 75.712055][ T5145] veth0_macvtap: entered promiscuous mode [ 75.725890][ T5145] veth1_macvtap: entered promiscuous mode [ 75.727836][ T2829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.750736][ T2829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.800985][ T5145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.813600][ T5145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.829713][ T5145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.852436][ T3897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.859963][ T5145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.862481][ T3897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.874696][ T5145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.892683][ T5145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.925665][ T5145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.934404][ T5145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.949350][ T5145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.958312][ T5145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.033321][ T5247] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6'. [ 76.099526][ T5137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.162953][ T2829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.194046][ T2829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.262210][ T5137] veth0_vlan: entered promiscuous mode [ 76.308049][ T5137] veth1_vlan: entered promiscuous mode [ 76.316247][ T2829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.324176][ T2829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.401025][ T5137] veth0_macvtap: entered promiscuous mode [ 76.434509][ T5137] veth1_macvtap: entered promiscuous mode [ 76.518758][ T5250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.538691][ T5250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.569820][ T5137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.582416][ T5087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.591887][ T5087] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.599979][ T5137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.610055][ T5087] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.617102][ T5137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.617124][ T5137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.633441][ T5087] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.642837][ T5137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.653781][ T5087] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.661868][ T5087] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.675619][ T5253] ================================================================== [ 76.683715][ T5253] BUG: KASAN: slab-use-after-free in skb_release_head_state+0x39/0x250 [ 76.691993][ T5253] Read of size 8 at addr ffff88801a6faa58 by task syz.0.5/5253 [ 76.699551][ T5253] [ 76.701896][ T5253] CPU: 0 PID: 5253 Comm: syz.0.5 Not tainted 6.10.0-rc6-syzkaller-01269-g0787ab206f80 #0 [ 76.705644][ T5137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.711694][ T5253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 76.711717][ T5253] Call Trace: [ 76.711725][ T5253] [ 76.711733][ T5253] dump_stack_lvl+0x241/0x360 [ 76.743105][ T5253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.744812][ T5137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.748391][ T5253] ? __pfx__printk+0x10/0x10 [ 76.748411][ T5253] ? _printk+0xd5/0x120 [ 76.748427][ T5253] ? __virt_addr_valid+0x183/0x520 [ 76.772116][ T5253] ? __virt_addr_valid+0x183/0x520 [ 76.774869][ T5137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.777663][ T5253] print_report+0x169/0x550 [ 76.792702][ T5253] ? __virt_addr_valid+0x183/0x520 [ 76.797841][ T5253] ? __virt_addr_valid+0x183/0x520 [ 76.802975][ T5253] ? __virt_addr_valid+0x44e/0x520 [ 76.804818][ T5137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.808089][ T5253] ? __phys_addr+0xba/0x170 [ 76.808112][ T5253] ? skb_release_head_state+0x39/0x250 [ 76.808134][ T5253] kasan_report+0x143/0x180 [ 76.832561][ T5253] ? skb_release_head_state+0x39/0x250 [ 76.836403][ T5137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.838035][ T5253] skb_release_head_state+0x39/0x250 [ 76.850530][ T5253] sk_skb_reason_drop+0x170/0x3d0 [ 76.855584][ T5253] __hci_req_sync+0x631/0x950 [ 76.860285][ T5253] ? __pfx___hci_req_sync+0x10/0x10 [ 76.865501][ T5253] ? __pfx___mutex_lock+0x10/0x10 [ 76.870547][ T5253] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 76.876554][ T5253] ? __pfx_hci_inq_req+0x10/0x10 [ 76.881506][ T5253] hci_req_sync+0xa9/0xd0 [ 76.881699][ T5137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.885868][ T5253] hci_inquiry+0x3e1/0x7d0 [ 76.885890][ T5253] ? do_raw_spin_unlock+0x13c/0x8b0 [ 76.885915][ T5253] ? __pfx_hci_inquiry+0x10/0x10 [ 76.885932][ T5253] ? hci_sock_ioctl+0x55e/0xa40 [ 76.885958][ T5253] sock_do_ioctl+0x158/0x460 [ 76.885979][ T5253] ? __pfx_sock_do_ioctl+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 76.886012][ T5253] sock_ioctl+0x629/0x8e0 [ 76.886031][ T5253] ? __pfx_sock_ioctl+0x10/0x10 [ 76.886048][ T5253] ? __fget_files+0x29/0x470 [ 76.886072][ T5253] ? __fget_files+0x3f6/0x470 [ 76.886092][ T5253] ? __fget_files+0x29/0x470 [ 76.886116][ T5253] ? bpf_lsm_file_ioctl+0x9/0x10 [ 76.886137][ T5253] ? security_file_ioctl+0x87/0xb0 [ 76.886161][ T5253] ? __pfx_sock_ioctl+0x10/0x10 [ 76.886179][ T5253] __se_sys_ioctl+0xfc/0x170 [ 76.886203][ T5253] do_syscall_64+0xf3/0x230 [ 76.886220][ T5253] ? clear_bhb_loop+0x35/0x90 [ 76.886240][ T5253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.886270][ T5253] RIP: 0033:0x7f7c33b75bd9 [ 76.886295][ T5253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.913826][ T5137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.914552][ T5253] RSP: 002b:00007f7c349b2048 EFLAGS: 00000246 [ 76.919356][ T5137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.924463][ T5253] ORIG_RAX: 0000000000000010 [ 76.928803][ T5137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.933586][ T5253] RAX: ffffffffffffffda RBX: 00007f7c33d04038 RCX: 00007f7c33b75bd9 [ 77.050547][ T5253] RDX: 0000000020000000 RSI: 00000000800448f0 RDI: 000000000000000b [ 77.058524][ T5253] RBP: 00007f7c33be4e60 R08: 0000000000000000 R09: 0000000000000000 [ 77.066487][ T5253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.074461][ T5253] R13: 000000000000006e R14: 00007f7c33d04038 R15: 00007ffc22060ec8 [ 77.082461][ T5253] [ 77.085486][ T5253] [ 77.087806][ T5253] Allocated by task 5087: [ 77.092122][ T5253] kasan_save_track+0x3f/0x80 [ 77.096800][ T5253] __kasan_slab_alloc+0x66/0x80 [ 77.101648][ T5253] kmem_cache_alloc_noprof+0x135/0x2a0 [ 77.107135][ T5253] skb_clone+0x20c/0x390 [ 77.111383][ T5253] hci_cmd_work+0x2a2/0x670 [ 77.115896][ T5253] process_scheduled_works+0xa2c/0x1830 [ 77.121448][ T5253] worker_thread+0x86d/0xd50 [ 77.126035][ T5253] kthread+0x2f0/0x390 [ 77.130092][ T5253] ret_from_fork+0x4b/0x80 [ 77.134499][ T5253] ret_from_fork_asm+0x1a/0x30 [ 77.139272][ T5253] [ 77.141611][ T5253] Freed by task 5087: [ 77.145594][ T5253] kasan_save_track+0x3f/0x80 [ 77.150288][ T5253] kasan_save_free_info+0x40/0x50 [ 77.155336][ T5253] poison_slab_object+0xe0/0x150 [ 77.160269][ T5253] __kasan_slab_free+0x37/0x60 [ 77.165026][ T5253] kmem_cache_free+0x145/0x350 [ 77.169776][ T5253] hci_cmd_sync_complete+0xe3/0x330 [ 77.174963][ T5253] hci_event_packet+0xc75/0x1540 [ 77.179997][ T5253] hci_rx_work+0x3e8/0xca0 [ 77.184395][ T5253] process_scheduled_works+0xa2c/0x1830 [ 77.189950][ T5253] worker_thread+0x86d/0xd50 [ 77.194558][ T5253] kthread+0x2f0/0x390 [ 77.198636][ T5253] ret_from_fork+0x4b/0x80 [ 77.203037][ T5253] ret_from_fork_asm+0x1a/0x30 [ 77.207895][ T5253] [ 77.210199][ T5253] The buggy address belongs to the object at ffff88801a6faa00 [ 77.210199][ T5253] which belongs to the cache skbuff_head_cache of size 240 [ 77.224759][ T5253] The buggy address is located 88 bytes inside of [ 77.224759][ T5253] freed 240-byte region [ffff88801a6faa00, ffff88801a6faaf0) [ 77.238471][ T5253] [ 77.240781][ T5253] The buggy address belongs to the physical page: [ 77.247178][ T5253] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1a6fa [ 77.255922][ T5253] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 77.263463][ T5253] page_type: 0xffffefff(slab) [ 77.268152][ T5253] raw: 00fff00000000000 ffff888018adc000 ffffea0000bab640 dead000000000005 [ 77.276733][ T5253] raw: 0000000000000000 00000000000c000c 00000001ffffefff 0000000000000000 [ 77.285391][ T5253] page dumped because: kasan: bad access detected [ 77.291808][ T5253] page_owner tracks the page as allocated [ 77.297502][ T5253] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5088, tgid 5088 (syz-executor), ts 64091120371, free_ts 63892275846 [ 77.316762][ T5253] post_alloc_hook+0x1f3/0x230 [ 77.321514][ T5253] get_page_from_freelist+0x2e4c/0x2f10 [ 77.327083][ T5253] __alloc_pages_noprof+0x256/0x6c0 [ 77.332318][ T5253] alloc_slab_page+0x5f/0x120 [ 77.337025][ T5253] allocate_slab+0x5a/0x2f0 [ 77.341541][ T5253] ___slab_alloc+0xcd1/0x14b0 [ 77.346208][ T5253] __slab_alloc+0x58/0xa0 [ 77.350522][ T5253] kmem_cache_alloc_noprof+0x1c1/0x2a0 [ 77.356058][ T5253] skb_clone+0x20c/0x390 [ 77.360291][ T5253] __netlink_deliver_tap+0x3cc/0x7c0 [ 77.365566][ T5253] netlink_deliver_tap+0x19d/0x1b0 [ 77.370674][ T5253] netlink_unicast+0x7be/0x990 [ 77.375414][ T5253] netlink_sendmsg+0x8e4/0xcb0 [ 77.380154][ T5253] __sock_sendmsg+0x221/0x270 [ 77.384813][ T5253] __sys_sendto+0x3a4/0x4f0 [ 77.389320][ T5253] __x64_sys_sendto+0xde/0x100 [ 77.394090][ T5253] page last free pid 5122 tgid 5122 stack trace: [ 77.400399][ T5253] free_unref_page+0xd22/0xea0 [ 77.405157][ T5253] __slab_free+0x31b/0x3d0 [ 77.409557][ T5253] qlist_free_all+0x9e/0x140 [ 77.414215][ T5253] kasan_quarantine_reduce+0x14f/0x170 [ 77.419661][ T5253] __kasan_slab_alloc+0x23/0x80 [ 77.424499][ T5253] kmem_cache_alloc_noprof+0x135/0x2a0 [ 77.430029][ T5253] vm_area_alloc+0x24/0x1d0 [ 77.434518][ T5253] mmap_region+0xc3d/0x2090 [ 77.439100][ T5253] do_mmap+0x8ad/0xfa0 [ 77.443171][ T5253] vm_mmap_pgoff+0x1dd/0x3d0 [ 77.447754][ T5253] ksys_mmap_pgoff+0x4f1/0x720 [ 77.452517][ T5253] do_syscall_64+0xf3/0x230 [ 77.457036][ T5253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.462937][ T5253] [ 77.465259][ T5253] Memory state around the buggy address: [ 77.470961][ T5253] ffff88801a6fa900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.479000][ T5253] ffff88801a6fa980: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 77.487072][ T5253] >ffff88801a6faa00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.495107][ T5253] ^ [ 77.502011][ T5253] ffff88801a6faa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 77.510048][ T5253] ffff88801a6fab00: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 77.518082][ T5253] ================================================================== [ 77.635198][ T5253] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 77.642425][ T5253] CPU: 1 PID: 5253 Comm: syz.0.5 Not tainted 6.10.0-rc6-syzkaller-01269-g0787ab206f80 #0 [ 77.652238][ T5253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 77.662303][ T5253] Call Trace: [ 77.665587][ T5253] [ 77.668520][ T5253] dump_stack_lvl+0x241/0x360 [ 77.673204][ T5253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.678428][ T5253] ? __pfx__printk+0x10/0x10 [ 77.683039][ T5253] ? preempt_schedule+0xe1/0xf0 [ 77.687905][ T5253] ? vscnprintf+0x5d/0x90 [ 77.692247][ T5253] panic+0x349/0x860 [ 77.696155][ T5253] ? check_panic_on_warn+0x21/0xb0 [ 77.701273][ T5253] ? __pfx_panic+0x10/0x10 [ 77.705702][ T5253] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 77.711687][ T5253] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 77.718021][ T5253] ? print_report+0x502/0x550 [ 77.722708][ T5253] check_panic_on_warn+0x86/0xb0 [ 77.727739][ T5253] ? skb_release_head_state+0x39/0x250 [ 77.733209][ T5253] end_report+0x77/0x160 [ 77.737475][ T5253] kasan_report+0x154/0x180 [ 77.742078][ T5253] ? skb_release_head_state+0x39/0x250 [ 77.747554][ T5253] skb_release_head_state+0x39/0x250 [ 77.752838][ T5253] sk_skb_reason_drop+0x170/0x3d0 [ 77.757856][ T5253] __hci_req_sync+0x631/0x950 [ 77.762526][ T5253] ? __pfx___hci_req_sync+0x10/0x10 [ 77.767722][ T5253] ? __pfx___mutex_lock+0x10/0x10 [ 77.772744][ T5253] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 77.779066][ T5253] ? __pfx_hci_inq_req+0x10/0x10 [ 77.783990][ T5253] hci_req_sync+0xa9/0xd0 [ 77.788311][ T5253] hci_inquiry+0x3e1/0x7d0 [ 77.792714][ T5253] ? do_raw_spin_unlock+0x13c/0x8b0 [ 77.797913][ T5253] ? __pfx_hci_inquiry+0x10/0x10 [ 77.802841][ T5253] ? hci_sock_ioctl+0x55e/0xa40 [ 77.807687][ T5253] sock_do_ioctl+0x158/0x460 [ 77.812271][ T5253] ? __pfx_sock_do_ioctl+0x10/0x10 [ 77.817463][ T5253] sock_ioctl+0x629/0x8e0 [ 77.821782][ T5253] ? __pfx_sock_ioctl+0x10/0x10 [ 77.826627][ T5253] ? __fget_files+0x29/0x470 [ 77.831212][ T5253] ? __fget_files+0x3f6/0x470 [ 77.835970][ T5253] ? __fget_files+0x29/0x470 [ 77.840570][ T5253] ? bpf_lsm_file_ioctl+0x9/0x10 [ 77.845512][ T5253] ? security_file_ioctl+0x87/0xb0 [ 77.850644][ T5253] ? __pfx_sock_ioctl+0x10/0x10 [ 77.855498][ T5253] __se_sys_ioctl+0xfc/0x170 [ 77.860101][ T5253] do_syscall_64+0xf3/0x230 [ 77.864613][ T5253] ? clear_bhb_loop+0x35/0x90 [ 77.869298][ T5253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.875190][ T5253] RIP: 0033:0x7f7c33b75bd9 [ 77.880033][ T5253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.899631][ T5253] RSP: 002b:00007f7c349b2048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.908040][ T5253] RAX: ffffffffffffffda RBX: 00007f7c33d04038 RCX: 00007f7c33b75bd9 [ 77.916006][ T5253] RDX: 0000000020000000 RSI: 00000000800448f0 RDI: 000000000000000b [ 77.923971][ T5253] RBP: 00007f7c33be4e60 R08: 0000000000000000 R09: 0000000000000000 [ 77.931931][ T5253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.939894][ T5253] R13: 000000000000006e R14: 00007f7c33d04038 R15: 00007ffc22060ec8 [ 77.947862][ T5253] [ 77.951105][ T5253] Kernel Offset: disabled [ 77.955414][ T5253] Rebooting in 86400 seconds..