last executing test programs: 1m28.265446254s ago: executing program 1 (id=900): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000440)={0x48, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x48}}, 0x0) 1m27.094793996s ago: executing program 4 (id=1063): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x30, r1, 0x921, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) 1m15.372566587s ago: executing program 1 (id=900): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000440)={0x48, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x48}}, 0x0) 1m14.095358877s ago: executing program 4 (id=1063): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x30, r1, 0x921, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) 1m0.156598984s ago: executing program 1 (id=900): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000440)={0x48, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x48}}, 0x0) 57.279077562s ago: executing program 4 (id=1063): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x30, r1, 0x921, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) 44.371625062s ago: executing program 1 (id=900): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000440)={0x48, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x48}}, 0x0) 43.605643494s ago: executing program 4 (id=1063): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x30, r1, 0x921, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) 29.714337519s ago: executing program 1 (id=900): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000440)={0x48, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x48}}, 0x0) 29.065734721s ago: executing program 4 (id=1063): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x30, r1, 0x921, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) 12.808914331s ago: executing program 1 (id=900): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000440)={0x48, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x48}}, 0x0) 7.581264469s ago: executing program 4 (id=1063): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x30, r1, 0x921, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) 2.649879067s ago: executing program 3 (id=2291): socket$igmp6(0xa, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.592880372s ago: executing program 3 (id=2292): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0x21, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c"}]}, 0x44}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000200000018000000000000000000000000000090cd58562a15002c000064a6693bad890000000000"], 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 2.553847619s ago: executing program 0 (id=2294): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1}, 0xc) 2.433354343s ago: executing program 0 (id=2296): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x0, 0x0, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x78}, 0x1, 0xffffffff00000003}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) unshare(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 154.484287ms ago: executing program 3 (id=2298): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001ff700"/20, @ANYRES32=r2, @ANYBLOB="ff00000000000000140012800b000100626174616476"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xd60, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010001304000058650000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006e657464657673696d3000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 153.758996ms ago: executing program 2 (id=2299): socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRESDEC], 0x6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) connect$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r3, &(0x7f0000000500)={0x2a, 0x1, 0x7fff}, 0xc) bind$qrtr(r3, &(0x7f0000000080)={0x2a, 0x1, 0x4001}, 0xc) 152.088579ms ago: executing program 0 (id=2300): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GETFSUUID(r1, 0xc0c0583b, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r2, 0x8b1a, &(0x7f0000000040)) write$cgroup_int(r1, &(0x7f00000000c0)=0x2, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 151.620796ms ago: executing program 2 (id=2301): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000feff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 109.671797ms ago: executing program 2 (id=2302): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x5, 0x0, &(0x7f0000000080)=0xfffffffffffffdab) 109.096007ms ago: executing program 3 (id=2303): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) socket(0x10, 0x3, 0x0) recvmsg$kcm(r1, &(0x7f0000000400)={&(0x7f0000000140)=@nl, 0x80, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000240)=""/117, 0x75}, {&(0x7f0000000300)=""/129, 0x81}], 0x4, &(0x7f00000005c0)=""/204, 0xcc}, 0x40000001) pselect6(0x65b, 0x0, &(0x7f0000000480), &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x9000000}, &(0x7f0000000500)={0x0, 0x989680}, &(0x7f0000000580)={&(0x7f0000000540), 0x8}) 108.297317ms ago: executing program 0 (id=2304): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @IFLA_INET6_ADDR_GEN_MODE={0x4}]}]}]}, 0x4c}}, 0x0) 107.76447ms ago: executing program 2 (id=2305): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x1000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x10, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x16}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00'}, 0x90) 107.324955ms ago: executing program 3 (id=2306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x1f00, 0x3ff}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xc, 0x9, 0x0, 0x1, 0xe7030000}, {0x6, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7fff, 0x63}}}}, ["", "", "", "", "", "", ""]}, 0x28}}, 0x1040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x33, 0x0, &(0x7f0000001980)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) sendfile(r9, r8, 0x0, 0xffffffff00d) 106.344594ms ago: executing program 0 (id=2307): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x4}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000040), 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, 0x0, 0x138) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x3}}, 0x1c) 106.102308ms ago: executing program 2 (id=2308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) 105.953455ms ago: executing program 3 (id=2309): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in6=@loopback, 0x0, 0x2b}, 0x0, @in=@broadcast}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 47.518562ms ago: executing program 2 (id=2310): socket$inet(0x2b, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x100) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 0s ago: executing program 0 (id=2311): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x0, 0x0, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x78}, 0x1, 0xffffffff00000003}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) unshare(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): ng preconfigured BSSID 50:50:50:50:50:50 [ 174.457416][ T1850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.508642][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.527708][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.622951][ T5091] Bluetooth: hci1: command tx timeout [ 174.795044][ T9300] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1629'. [ 174.819217][ T9059] veth0_vlan: entered promiscuous mode [ 174.857901][ T9059] veth1_vlan: entered promiscuous mode [ 174.924154][ T9059] veth0_macvtap: entered promiscuous mode [ 174.950311][ T9059] veth1_macvtap: entered promiscuous mode [ 174.989434][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.020856][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.040968][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.060929][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.080730][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.102049][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.125299][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.137401][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.151828][ T9059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.166875][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.177883][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.205789][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.217341][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.229054][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.244959][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.257539][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.277831][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.289439][ T9059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.310328][ T9059] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.326086][ T9059] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.336537][ T9059] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.390627][ T9059] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.546773][ T9327] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 175.574096][ T1850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.603341][ T1850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.659196][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.695550][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.699239][ T9335] netlink: 'syz.2.1646': attribute type 10 has an invalid length. [ 175.748008][ T9335] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1646'. [ 175.768013][ T9335] bridge0: port 4(dummy0) entered blocking state [ 175.777176][ T9335] bridge0: port 4(dummy0) entered disabled state [ 175.786960][ T9335] dummy0: entered allmulticast mode [ 175.796371][ T9335] dummy0: entered promiscuous mode [ 175.803337][ T9335] bridge0: port 4(dummy0) entered blocking state [ 175.810117][ T9335] bridge0: port 4(dummy0) entered forwarding state [ 176.094529][ T9355] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 176.301158][ T5093] Bluetooth: hci3: command 0x0406 tx timeout [ 176.301461][ T4489] Bluetooth: hci4: command 0x0406 tx timeout [ 176.307484][ T5091] Bluetooth: hci2: command 0x0406 tx timeout [ 176.926154][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.983250][ T9382] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 177.812052][ T9393] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1668'. [ 178.094716][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.223291][ T5103] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.240204][ T5103] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.244900][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.260426][ T5103] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.275918][ T5103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.286121][ T5103] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 178.294973][ T5103] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.344051][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.475306][ T11] bridge_slave_1: left allmulticast mode [ 178.481497][ T11] bridge_slave_1: left promiscuous mode [ 178.487198][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.496187][ T11] bridge_slave_0: left allmulticast mode [ 178.502184][ T11] bridge_slave_0: left promiscuous mode [ 178.507867][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.931521][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.952301][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.970418][ T11] bond0 (unregistering): Released all slaves [ 179.158181][ T5096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 179.168196][ T5096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 179.177248][ T5096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 179.186986][ T5096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 179.196065][ T5096] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 179.205113][ T5096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 179.324829][ T9422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1676'. [ 179.692763][ T9404] chnl_net:caif_netlink_parms(): no params data found [ 180.015226][ T11] hsr_slave_0: left promiscuous mode [ 180.034676][ T11] hsr_slave_1: left promiscuous mode [ 180.051757][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.059232][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.083554][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.106772][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.132540][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 180.143842][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 180.152128][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 180.160279][ T11] veth1_macvtap: left promiscuous mode [ 180.160392][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 180.169324][ T11] veth0_macvtap: left promiscuous mode [ 180.181412][ T11] veth1_vlan: left promiscuous mode [ 180.186931][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 180.191138][ T11] veth0_vlan: left promiscuous mode [ 180.195977][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 180.386474][ T5103] Bluetooth: hci0: command tx timeout [ 180.648457][ T11] team0 (unregistering): Port device team_slave_1 removed [ 180.702064][ T11] team0 (unregistering): Port device team_slave_0 removed [ 181.260741][ T5103] Bluetooth: hci1: command tx timeout [ 181.417463][ T9404] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.434133][ T5098] syz-executor (5098) used greatest stack depth: 18512 bytes left [ 181.441155][ T9404] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.450242][ T9404] bridge_slave_0: entered allmulticast mode [ 181.463665][ T9404] bridge_slave_0: entered promiscuous mode [ 181.477769][ T9404] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.492831][ T9404] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.500329][ T9404] bridge_slave_1: entered allmulticast mode [ 181.512929][ T9404] bridge_slave_1: entered promiscuous mode [ 181.597344][ T9404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.617153][ T9404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.686706][ T9404] team0: Port device team_slave_0 added [ 181.714253][ T9404] team0: Port device team_slave_1 added [ 181.779775][ T9404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.787192][ T9404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.813213][ T9404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.861594][ T9404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.868570][ T9404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.900337][ T9404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.974903][ T9417] chnl_net:caif_netlink_parms(): no params data found [ 182.071332][ T9404] hsr_slave_0: entered promiscuous mode [ 182.078023][ T9404] hsr_slave_1: entered promiscuous mode [ 182.119596][ T9450] chnl_net:caif_netlink_parms(): no params data found [ 182.202766][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.220789][ T5103] Bluetooth: hci3: command tx timeout [ 182.229701][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.324007][ T9417] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.339070][ T9417] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.346627][ T9417] bridge_slave_0: entered allmulticast mode [ 182.361931][ T9417] bridge_slave_0: entered promiscuous mode [ 182.405838][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.416908][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.460819][ T5103] Bluetooth: hci0: command tx timeout [ 182.493177][ T9417] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.500381][ T9417] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.517810][ T9417] bridge_slave_1: entered allmulticast mode [ 182.535771][ T9417] bridge_slave_1: entered promiscuous mode [ 182.582988][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.593615][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.735934][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.746662][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.764627][ T9450] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.774099][ T9450] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.782320][ T9450] bridge_slave_0: entered allmulticast mode [ 182.790028][ T9450] bridge_slave_0: entered promiscuous mode [ 182.800336][ T9450] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.807929][ T9450] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.817794][ T9450] bridge_slave_1: entered allmulticast mode [ 182.833391][ T9450] bridge_slave_1: entered promiscuous mode [ 182.853346][ T9417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.879318][ T9417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.977332][ T9450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.039889][ T9417] team0: Port device team_slave_0 added [ 183.053225][ T9450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.084459][ T9417] team0: Port device team_slave_1 added [ 183.238117][ T9450] team0: Port device team_slave_0 added [ 183.265258][ T9417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.272710][ T9417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.299576][ T9417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.324432][ T9450] team0: Port device team_slave_1 added [ 183.339041][ T9417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.347171][ T9417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.351964][ T5103] Bluetooth: hci1: command tx timeout [ 183.374174][ T9417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.427782][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.474270][ T9450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.481467][ T9450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.513641][ T9450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.527255][ T9450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.534538][ T9450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.561482][ T9450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.587372][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.667275][ T9417] hsr_slave_0: entered promiscuous mode [ 183.674464][ T9417] hsr_slave_1: entered promiscuous mode [ 183.688915][ T9417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.697131][ T9417] Cannot create hsr debugfs directory [ 183.726612][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.773498][ T9450] hsr_slave_0: entered promiscuous mode [ 183.798492][ T9450] hsr_slave_1: entered promiscuous mode [ 183.809629][ T9450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.817591][ T9450] Cannot create hsr debugfs directory [ 183.884202][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.098973][ T9404] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 184.134202][ T9404] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 184.169680][ T9404] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 184.221124][ T9404] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 184.301016][ T5103] Bluetooth: hci3: command tx timeout [ 184.504033][ T11] dummy0: left allmulticast mode [ 184.509004][ T11] dummy0: left promiscuous mode [ 184.519246][ T11] bridge0: port 4(dummy0) entered disabled state [ 184.528207][ T11] hsr0: left allmulticast mode [ 184.535835][ T11] hsr_slave_0: left allmulticast mode [ 184.541590][ T5103] Bluetooth: hci0: command tx timeout [ 184.547083][ T11] hsr_slave_1: left allmulticast mode [ 184.552708][ T11] hsr0: left promiscuous mode [ 184.557599][ T11] bridge0: port 3(hsr0) entered disabled state [ 184.569789][ T11] bridge_slave_1: left allmulticast mode [ 184.581685][ T11] bridge_slave_1: left promiscuous mode [ 184.590789][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.610153][ T11] bridge_slave_0: left allmulticast mode [ 184.615956][ T11] bridge_slave_0: left promiscuous mode [ 184.622474][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.638400][ T11] bridge_slave_1: left allmulticast mode [ 184.645642][ T11] bridge_slave_1: left promiscuous mode [ 184.651534][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.661359][ T11] bridge_slave_0: left allmulticast mode [ 184.667050][ T11] bridge_slave_0: left promiscuous mode [ 184.673374][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.420777][ T5103] Bluetooth: hci1: command tx timeout [ 185.591279][ T11]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.602656][ T11]  (unregistering): Released all slaves [ 185.617559][ T11] bond0 (unregistering): Released all slaves [ 185.759244][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.772289][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.784089][ T11] bond0 (unregistering): Released all slaves [ 186.188410][ T9404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.352213][ T9404] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.381011][ T5103] Bluetooth: hci3: command tx timeout [ 186.404860][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.412052][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.426921][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.434164][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.622237][ T5103] Bluetooth: hci0: command tx timeout [ 186.883310][ T11] hsr_slave_0: left promiscuous mode [ 186.889365][ T11] hsr_slave_1: left promiscuous mode [ 186.898930][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.907184][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.915417][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.923108][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.938077][ T11] hsr_slave_0: left promiscuous mode [ 186.948486][ T11] hsr_slave_1: left promiscuous mode [ 186.958468][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.966198][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.975528][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.983653][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.018497][ T11] veth1_macvtap: left promiscuous mode [ 187.030804][ T11] veth0_macvtap: left promiscuous mode [ 187.036565][ T11] veth1_vlan: left promiscuous mode [ 187.047739][ T11] veth0_vlan: left promiscuous mode [ 187.055643][ T11] veth1_macvtap: left promiscuous mode [ 187.061387][ T11] veth0_macvtap: left promiscuous mode [ 187.066963][ T11] veth1_vlan: left promiscuous mode [ 187.072340][ T11] veth0_vlan: left promiscuous mode [ 187.285488][ T9609] netlink: 'syz.0.1746': attribute type 1 has an invalid length. [ 187.298658][ T9609] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1746'. [ 187.506602][ T5103] Bluetooth: hci1: command tx timeout [ 187.695940][ T11] team0 (unregistering): Port device team_slave_1 removed [ 187.733148][ T11] team0 (unregistering): Port device team_slave_0 removed [ 188.438136][ T11] team0 (unregistering): Port device team_slave_1 removed [ 188.460841][ T5103] Bluetooth: hci3: command tx timeout [ 188.479560][ T11] team0 (unregistering): Port device team_slave_0 removed [ 188.867347][ T9608] lo speed is unknown, defaulting to 1000 [ 188.949908][ T9608] lo speed is unknown, defaulting to 1000 [ 189.005602][ T9608] lo speed is unknown, defaulting to 1000 [ 189.056139][ T9608] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 189.136534][ T9417] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 189.177979][ T9417] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 189.210845][ T9417] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 189.218181][ T9608] lo speed is unknown, defaulting to 1000 [ 189.256931][ T9608] lo speed is unknown, defaulting to 1000 [ 189.257677][ T9450] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 189.284056][ T9417] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 189.306620][ T9608] lo speed is unknown, defaulting to 1000 [ 189.319900][ T9450] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 189.337798][ T9450] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 189.349905][ T9450] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 189.389158][ T9608] lo speed is unknown, defaulting to 1000 [ 189.413021][ T9608] lo speed is unknown, defaulting to 1000 [ 189.421873][ T9404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.673783][ T9404] veth0_vlan: entered promiscuous mode [ 189.764855][ T9404] veth1_vlan: entered promiscuous mode [ 189.894168][ T9417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.966648][ T9450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.987332][ T9404] veth0_macvtap: entered promiscuous mode [ 190.019853][ T9404] veth1_macvtap: entered promiscuous mode [ 190.048312][ T9404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.061847][ T9642] Bluetooth: MGMT ver 1.22 [ 190.066463][ T9404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.082892][ T9404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.096219][ T9404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.108375][ T9404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.140141][ T9404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.163025][ T9404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.173091][ T9404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.183732][ T9404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.195226][ T9404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.207342][ T9417] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.224096][ T9450] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.233677][ T9644] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1756'. [ 190.255865][ T9404] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.270622][ T9404] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.279396][ T9404] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.296770][ T9404] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.320278][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.327496][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.339488][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.346725][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.371993][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.379206][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.464511][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.471715][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.611866][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.621990][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.681814][ T1850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.689684][ T1850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.988159][ T9661] netlink: 'syz.0.1761': attribute type 3 has an invalid length. [ 190.995318][ T9450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.003956][ T9661] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1761'. [ 191.079241][ T9417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.123583][ T9450] veth0_vlan: entered promiscuous mode [ 191.160052][ T9450] veth1_vlan: entered promiscuous mode [ 191.231285][ T9450] veth0_macvtap: entered promiscuous mode [ 191.247732][ T9450] veth1_macvtap: entered promiscuous mode [ 191.288160][ T9450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.298844][ T9450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.315513][ T9450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.327938][ T9450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.338034][ T9450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.349741][ T9450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.365630][ T9450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.398007][ T9450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.423101][ T9450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.450595][ T9450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.470674][ T9450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.484822][ T9450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.495589][ T9450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.507396][ T9450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.525732][ T9450] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.535859][ T9450] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.546016][ T9450] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.555397][ T9450] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.642426][ T9417] veth0_vlan: entered promiscuous mode [ 191.680130][ T9417] veth1_vlan: entered promiscuous mode [ 191.730707][ T1850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.738553][ T1850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.775329][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.784438][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.812432][ T9417] veth0_macvtap: entered promiscuous mode [ 191.826372][ T9417] veth1_macvtap: entered promiscuous mode [ 191.863465][ T9417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.876337][ T9417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.886642][ T9417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.898110][ T9417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.908418][ T9417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.918879][ T9417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.928723][ T9417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.939303][ T9417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.953165][ T9417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.967984][ T9417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.978972][ T9417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.017406][ T9417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.032920][ T9417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.050653][ T9417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.069190][ T9417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.079491][ T9417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.095413][ T9417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.107399][ T9417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.204908][ T1850] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.241770][ T9686] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1767'. [ 192.291196][ T9417] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.304607][ T9417] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.314081][ T9417] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.323006][ T9417] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.436891][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.446162][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.474808][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.483305][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.728381][ T1850] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.051967][ T9694] netlink: 'syz.3.1770': attribute type 1 has an invalid length. [ 193.059764][ T9694] netlink: 9348 bytes leftover after parsing attributes in process `syz.3.1770'. [ 193.105990][ T9694] netlink: 'syz.3.1770': attribute type 1 has an invalid length. [ 193.126790][ T1850] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.153028][ T9694] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1770'. [ 193.158775][ T29] audit: type=1804 audit(1719420361.037:21): pid=9697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1772" name="/root/syzkaller.WzqYUh/3/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 193.298988][ T1850] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.412255][ T5096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 193.430434][ T5096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 193.440246][ T5096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 193.449766][ T5096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 193.468153][ T5096] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 193.479231][ T5096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 193.606176][ T1850] bridge_slave_1: left allmulticast mode [ 193.615438][ T1850] bridge_slave_1: left promiscuous mode [ 193.630821][ T1850] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.654903][ T1850] bridge_slave_0: left allmulticast mode [ 193.662476][ T1850] bridge_slave_0: left promiscuous mode [ 193.676869][ T1850] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.768146][ T9717] netlink: 'syz.3.1778': attribute type 5 has an invalid length. [ 193.938460][ T9725] xt_socket: unknown flags 0x8 [ 194.197494][ T1850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.210264][ T1850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.226972][ T1850] bond0 (unregistering): Released all slaves [ 194.257107][ T9704] lo speed is unknown, defaulting to 1000 [ 194.265423][ T9730] netlink: 'syz.0.1784': attribute type 1 has an invalid length. [ 194.274221][ T9714] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1778'. [ 194.277054][ T9730] netlink: 636 bytes leftover after parsing attributes in process `syz.0.1784'. [ 194.314638][ T9717] : entered promiscuous mode [ 194.325842][ T9720] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1778'. [ 194.361199][ T9720] bridge_slave_1: left allmulticast mode [ 194.366922][ T9720] bridge_slave_1: left promiscuous mode [ 194.376573][ T9720] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.387616][ T9720] bridge_slave_0: left allmulticast mode [ 194.397445][ T9720] bridge_slave_0: left promiscuous mode [ 194.403488][ T9720] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.629658][ T9734] netlink: 'syz.3.1786': attribute type 1 has an invalid length. [ 194.646733][ T9734] netlink: 9348 bytes leftover after parsing attributes in process `syz.3.1786'. [ 194.675581][ T9734] netlink: 'syz.3.1786': attribute type 1 has an invalid length. [ 194.685921][ T9734] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1786'. [ 194.706120][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.864979][ T1850] hsr_slave_0: left promiscuous mode [ 194.878211][ T1850] hsr_slave_1: left promiscuous mode [ 194.889959][ T1850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.905180][ T1850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.946273][ T1850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.969491][ T1850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.022938][ T1850] veth1_macvtap: left promiscuous mode [ 195.028583][ T1850] veth0_macvtap: left promiscuous mode [ 195.034507][ T1850] veth1_vlan: left promiscuous mode [ 195.039885][ T1850] veth0_vlan: left promiscuous mode [ 195.484126][ T1850] team0 (unregistering): Port device team_slave_1 removed [ 195.500908][ T5103] Bluetooth: hci0: command tx timeout [ 195.532893][ T1850] team0 (unregistering): Port device team_slave_0 removed [ 196.107698][ T5096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 196.132710][ T5096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 196.150487][ T5096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 196.166780][ T5096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 196.183153][ T5096] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 196.187341][ T9762] netlink: 'syz.3.1795': attribute type 1 has an invalid length. [ 196.200488][ T5096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 196.210727][ T9762] netlink: 636 bytes leftover after parsing attributes in process `syz.3.1795'. [ 196.344380][ T9704] chnl_net:caif_netlink_parms(): no params data found [ 196.418093][ T9759] lo speed is unknown, defaulting to 1000 [ 196.664990][ T9775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1799'. [ 196.720280][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1799'. [ 196.837208][ T9775] bond0: (slave bond_slave_1): Releasing backup interface [ 196.858954][ T9704] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.867627][ T9704] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.875235][ T9704] bridge_slave_0: entered allmulticast mode [ 196.886929][ T9704] bridge_slave_0: entered promiscuous mode [ 196.900611][ T9704] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.909151][ T9704] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.916745][ T9704] bridge_slave_1: entered allmulticast mode [ 196.925349][ T9704] bridge_slave_1: entered promiscuous mode [ 197.005242][ T9704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.007429][ T9792] netlink: 'syz.2.1806': attribute type 1 has an invalid length. [ 197.033313][ T9704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.175899][ T9704] team0: Port device team_slave_0 added [ 197.246944][ T9704] team0: Port device team_slave_1 added [ 197.358809][ T9704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.368312][ T9704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.401919][ T9704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.506156][ T1850] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.544802][ T9704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.557454][ T9704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.583920][ T5096] Bluetooth: hci0: command tx timeout [ 197.590351][ T9704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.615516][ T9815] bridge_slave_1: left allmulticast mode [ 197.625294][ T9815] bridge_slave_1: left promiscuous mode [ 197.631958][ T9815] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.749301][ T1850] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.764509][ T9826] netlink: 'syz.2.1819': attribute type 1 has an invalid length. [ 197.784818][ T9759] chnl_net:caif_netlink_parms(): no params data found [ 197.855225][ T9704] hsr_slave_0: entered promiscuous mode [ 197.871524][ T9704] hsr_slave_1: entered promiscuous mode [ 197.914597][ T9831] netlink: 'syz.0.1822': attribute type 1 has an invalid length. [ 197.964466][ T1850] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.113009][ T1850] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.217431][ T9848] __nla_validate_parse: 6 callbacks suppressed [ 198.217453][ T9848] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1830'. [ 198.301313][ T5096] Bluetooth: hci1: command tx timeout [ 198.387721][ T9858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1833'. [ 198.507382][ T9759] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.525264][ T9759] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.561108][ T9759] bridge_slave_0: entered allmulticast mode [ 198.568545][ T9759] bridge_slave_0: entered promiscuous mode [ 198.613494][ T9759] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.640204][ T9759] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.660898][ T9759] bridge_slave_1: entered allmulticast mode [ 198.668290][ T9759] bridge_slave_1: entered promiscuous mode [ 198.850210][ T1850] bridge_slave_1: left allmulticast mode [ 198.868195][ T1850] bridge_slave_1: left promiscuous mode [ 198.891576][ T1850] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.918692][ T1850] bridge_slave_0: left allmulticast mode [ 198.931533][ T1850] bridge_slave_0: left promiscuous mode [ 198.941479][ T1850] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.982123][ T5103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 198.994009][ T5103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 199.003223][ T5103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 199.013878][ T5103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 199.023344][ T5103] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 199.033911][ T5103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 199.315687][ T1850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.327073][ T1850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.337890][ T1850] bond0 (unregistering): Released all slaves [ 199.379453][ T9759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.400433][ T9759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.588110][ T9759] team0: Port device team_slave_0 added [ 199.637911][ T9885] tipc: Started in network mode [ 199.653025][ T9885] tipc: Node identity ac1414aa, cluster identity 4711 [ 199.661131][ T5103] Bluetooth: hci0: command tx timeout [ 199.669603][ T9885] tipc: Enabled bearer , priority 10 [ 199.694987][ T9759] team0: Port device team_slave_1 added [ 199.760127][ T9888] tipc: Disabling bearer [ 199.818189][ T9759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.843269][ T9759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.900830][ T9759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.922554][ T9878] lo speed is unknown, defaulting to 1000 [ 200.082135][ T9759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.104429][ T9759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.160987][ T9759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.235034][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1855'. [ 200.284166][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1855'. [ 200.350474][ T9910] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 200.380707][ T5103] Bluetooth: hci1: command tx timeout [ 200.450790][ T1850] hsr_slave_0: left promiscuous mode [ 200.483620][ T1850] hsr_slave_1: left promiscuous mode [ 200.500750][ T1850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.522077][ T1850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.551350][ T1850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.559379][ T1850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.577005][ T9916] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1860'. [ 200.598134][ T9916] netlink: 'syz.2.1860': attribute type 1 has an invalid length. [ 200.624448][ T1850] veth1_macvtap: left promiscuous mode [ 200.630046][ T1850] veth0_macvtap: left promiscuous mode [ 200.636544][ T1850] veth1_vlan: left promiscuous mode [ 200.643554][ T1850] veth0_vlan: left promiscuous mode [ 200.757917][ T9924] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 201.116455][ T5103] Bluetooth: hci4: command tx timeout [ 201.134764][ T1850] team0 (unregistering): Port device team_slave_1 removed [ 201.173622][ T1850] team0 (unregistering): Port device team_slave_0 removed [ 201.643475][ T9759] hsr_slave_0: entered promiscuous mode [ 201.651150][ T9759] hsr_slave_1: entered promiscuous mode [ 201.659677][ T9759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.667681][ T9759] Cannot create hsr debugfs directory [ 201.679494][ T9922] netlink: 'syz.2.1863': attribute type 4 has an invalid length. [ 201.741190][ T5103] Bluetooth: hci0: command tx timeout [ 201.809728][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1867'. [ 201.819088][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1867'. [ 201.888364][ T9935] netlink: 'syz.3.1868': attribute type 2 has an invalid length. [ 201.913563][ T9935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1868'. [ 202.095009][ T9704] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 202.133544][ T9704] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 202.193249][ T9704] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 202.211438][ T9950] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1873'. [ 202.242956][ T9878] chnl_net:caif_netlink_parms(): no params data found [ 202.259954][ T9704] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 202.461105][ T9959] syz.3.1877 (9959) used greatest stack depth: 17304 bytes left [ 202.463248][ T5103] Bluetooth: hci1: command tx timeout [ 202.617266][ T9878] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.624852][ T9878] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.632830][ T9878] bridge_slave_0: entered allmulticast mode [ 202.640126][ T9878] bridge_slave_0: entered promiscuous mode [ 202.675100][ T9878] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.686823][ T9878] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.694175][ T9878] bridge_slave_1: entered allmulticast mode [ 202.707982][ T9878] bridge_slave_1: entered promiscuous mode [ 202.765866][ T9878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.803041][ T9878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.865840][ T9878] team0: Port device team_slave_0 added [ 202.876141][ T9878] team0: Port device team_slave_1 added [ 202.953783][ T9878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.963997][ T9878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.990397][ T9878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.008909][ T9980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.046728][ T9878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.056686][ T9878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.092382][ T9878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.150978][ T9984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1887'. [ 203.168782][ T9759] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 203.181940][ T5103] Bluetooth: hci4: command tx timeout [ 203.220234][ T9759] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 203.232618][ T9759] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 203.248239][ T9878] hsr_slave_0: entered promiscuous mode [ 203.256085][ T9878] hsr_slave_1: entered promiscuous mode [ 203.264617][ T9878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.272327][ T9878] Cannot create hsr debugfs directory [ 203.282809][ T9704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.290392][ T9759] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 203.548222][ T9704] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.551709][ T9996] syz.3.1892[9996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.555103][ T9996] syz.3.1892[9996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.655101][ T9878] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.713699][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.720928][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.771186][T10000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.803904][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.811143][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.883952][ T9878] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.977205][T10008] tipc: Started in network mode [ 203.991900][T10008] tipc: Node identity ac1414aa, cluster identity 4711 [ 204.007529][T10008] tipc: Enabled bearer , priority 10 [ 204.041721][ T9878] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.078820][ T9759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.164842][ T9878] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.233320][ T9759] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.328864][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.336104][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.383504][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.390722][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.542581][ T5103] Bluetooth: hci1: command tx timeout [ 204.574866][ T9878] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 204.603158][ T9878] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 204.630197][ T9878] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 204.646325][ T9878] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 204.688289][ T9704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.936291][T10050] xt_TCPMSS: Only works on TCP SYN packets [ 204.948374][ T9704] veth0_vlan: entered promiscuous mode [ 205.007649][ T9878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.063651][ T9704] veth1_vlan: entered promiscuous mode [ 205.089759][ T9878] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.122585][ T25] tipc: Node number set to 2886997162 [ 205.157241][ T9759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.181535][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.188764][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.218651][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.226310][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.261598][ T5103] Bluetooth: hci4: command tx timeout [ 205.432899][ T9704] veth0_macvtap: entered promiscuous mode [ 205.475079][ T9704] veth1_macvtap: entered promiscuous mode [ 205.573776][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.609726][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.637689][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.658208][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.688948][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.711648][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.729478][ T9704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.772161][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.807584][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.830970][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.854701][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.877332][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.895371][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.917980][ T9704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.973998][ T9704] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.991105][ T9704] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.002492][ T9704] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.021352][ T9704] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.060151][ T9878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.244031][ T9759] veth0_vlan: entered promiscuous mode [ 206.313445][ T9759] veth1_vlan: entered promiscuous mode [ 206.338658][ T9878] veth0_vlan: entered promiscuous mode [ 206.346412][T10102] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1928'. [ 206.357001][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.376992][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.483444][ T9878] veth1_vlan: entered promiscuous mode [ 206.498911][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.517602][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.523672][ T9759] veth0_macvtap: entered promiscuous mode [ 206.556329][ T9759] veth1_macvtap: entered promiscuous mode [ 206.680127][ T9878] veth0_macvtap: entered promiscuous mode [ 206.696189][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.712476][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.723025][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.734836][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.747124][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.758178][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.768645][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.781845][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.793319][ T9759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.815874][ T9878] veth1_macvtap: entered promiscuous mode [ 206.834678][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.851424][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.865927][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.876760][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.889868][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.901285][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.911208][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.921920][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.934758][ T9759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.956276][ T9878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.967658][ T9878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.985132][ T9878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.998942][ T9878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.009894][ T9878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.023042][ T9878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.033091][ T9878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.044273][ T9878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.054343][ T9878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.064929][ T9878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.078430][ T9878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.092023][ T9759] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.106131][ T9759] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.115896][ T9759] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.124747][ T9759] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.140236][ T9878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.182293][ T9878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.197438][ T9878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.213007][ T9878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.228182][ T9878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.243738][ T9878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.255823][ T9878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.268136][ T9878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.278151][ T9878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.289061][ T9878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.300818][ T9878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.350596][ T5103] Bluetooth: hci4: command tx timeout [ 207.362074][ T9878] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.381694][ T9878] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.391569][ T9878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.401565][ T9878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.607310][ T1057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.616366][ T1057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.654174][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.674488][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.691922][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.700717][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.733811][ T1850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.764910][ T1850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.957660][ T1057] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.603320][T10138] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1942'. [ 208.664356][ T1057] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.689294][T10142] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1837'. [ 208.773880][ T1057] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.864182][ T1057] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.889057][ T5096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.899341][ T5096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.908595][ T5096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.918492][ T5096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.928754][ T5096] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 208.937542][ T5096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.995826][ T1057] bridge_slave_1: left allmulticast mode [ 209.001784][ T1057] bridge_slave_1: left promiscuous mode [ 209.007465][ T1057] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.016306][ T1057] bridge_slave_0: left allmulticast mode [ 209.025127][ T1057] bridge_slave_0: left promiscuous mode [ 209.031020][ T1057] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.544711][ T1057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.575179][ T1057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.596424][ T1057] bond0 (unregistering): Released all slaves [ 209.638721][T10152] netlink: 'syz.3.1946': attribute type 7 has an invalid length. [ 209.651020][T10152] netlink: 'syz.3.1946': attribute type 39 has an invalid length. [ 209.676705][ T5103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.691361][ T5103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.701836][ T5103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.720277][ T5103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.732308][ T5103] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.742316][ T5103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.914672][T10144] lo speed is unknown, defaulting to 1000 [ 210.021064][T10157] lo speed is unknown, defaulting to 1000 [ 210.081078][ T1057] hsr_slave_0: left promiscuous mode [ 210.087436][ T1057] hsr_slave_1: left promiscuous mode [ 210.099646][ T1057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.108787][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.141167][ T1057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.157376][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.196908][ T1057] veth1_macvtap: left promiscuous mode [ 210.208336][ T1057] veth0_macvtap: left promiscuous mode [ 210.216928][ T1057] veth1_vlan: left promiscuous mode [ 210.225859][ T1057] veth0_vlan: left promiscuous mode [ 210.284556][T10179] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1956'. [ 210.716384][ T1057] team0 (unregistering): Port device team_slave_1 removed [ 210.759254][ T1057] team0 (unregistering): Port device team_slave_0 removed [ 211.021925][ T5096] Bluetooth: hci0: command tx timeout [ 211.200687][T10177] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1955'. [ 211.304932][T10183] batadv_slave_1: entered promiscuous mode [ 211.327870][T10182] batadv_slave_1: left promiscuous mode [ 211.792366][T10207] netlink: 'syz.3.1964': attribute type 10 has an invalid length. [ 211.817715][T10207] : (slave team0): Releasing backup interface [ 211.826176][ T5096] Bluetooth: hci1: command tx timeout [ 211.838043][T10207] batman_adv: batadv0: Adding interface: team0 [ 211.844632][T10207] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 211.876360][T10144] chnl_net:caif_netlink_parms(): no params data found [ 211.887667][T10157] chnl_net:caif_netlink_parms(): no params data found [ 211.927820][ T1057] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.954311][T10207] netlink: 'syz.3.1964': attribute type 10 has an invalid length. [ 211.963790][T10207] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1964'. [ 211.973146][T10207] team0: entered promiscuous mode [ 211.978216][T10207] team_slave_1: entered promiscuous mode [ 211.985457][T10207] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.993162][T10207] batman_adv: batadv0: Interface activated: team0 [ 211.999801][T10207] batman_adv: batadv0: Interface deactivated: team0 [ 212.012177][T10207] batman_adv: batadv0: Removing interface: team0 [ 212.097177][ T1057] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.169256][T10221] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1969'. [ 212.241197][ T1057] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.268319][T10225] batadv_slave_1: entered promiscuous mode [ 212.333477][ T1057] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.381872][T10224] batadv_slave_1: left promiscuous mode [ 212.476610][T10144] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.487707][T10144] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.495432][T10144] bridge_slave_0: entered allmulticast mode [ 212.503300][T10144] bridge_slave_0: entered promiscuous mode [ 212.519147][T10157] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.536370][T10157] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.546555][T10157] bridge_slave_0: entered allmulticast mode [ 212.568265][T10157] bridge_slave_0: entered promiscuous mode [ 212.584862][T10144] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.602304][T10144] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.646398][T10144] bridge_slave_1: entered allmulticast mode [ 212.662058][T10144] bridge_slave_1: entered promiscuous mode [ 212.715130][T10157] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.737721][T10157] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.747418][T10157] bridge_slave_1: entered allmulticast mode [ 212.761013][T10157] bridge_slave_1: entered promiscuous mode [ 212.824769][T10144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.877425][T10144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.985015][T10259] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1985'. [ 213.005086][T10157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.030663][T10144] team0: Port device team_slave_0 added [ 213.049050][ T1057] bridge_slave_1: left allmulticast mode [ 213.060704][ T1057] bridge_slave_1: left promiscuous mode [ 213.067224][ T1057] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.085020][ T1057] bridge_slave_0: left allmulticast mode [ 213.099101][ T1057] bridge_slave_0: left promiscuous mode [ 213.108108][ T5096] Bluetooth: hci0: command tx timeout [ 213.123700][ T1057] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.534388][ T1057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.549404][ T1057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.563931][ T1057] bond0 (unregistering): Released all slaves [ 213.576938][T10157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.605579][T10144] team0: Port device team_slave_1 added [ 213.777305][T10279] netlink: 'syz.2.1993': attribute type 29 has an invalid length. [ 213.809357][T10157] team0: Port device team_slave_0 added [ 213.893961][T10279] netlink: 'syz.2.1993': attribute type 29 has an invalid length. [ 213.902715][ T5096] Bluetooth: hci1: command tx timeout [ 213.903894][T10282] netlink: 'syz.2.1993': attribute type 29 has an invalid length. [ 213.926319][T10157] team0: Port device team_slave_1 added [ 213.928249][T10283] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1994'. [ 213.958789][T10144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.970803][T10144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.014284][T10144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.025580][T10285] netlink: 'syz.2.1993': attribute type 29 has an invalid length. [ 214.065509][T10157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.086803][T10157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.124059][T10157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.139149][T10144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.148102][T10144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.174763][T10144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.189121][T10282] netlink: 'syz.2.1993': attribute type 29 has an invalid length. [ 214.240194][T10157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.249412][T10157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.279020][T10157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.338509][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1999'. [ 214.404965][ T1057] hsr_slave_0: left promiscuous mode [ 214.437001][ T1057] hsr_slave_1: left promiscuous mode [ 214.452597][ T1057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.460688][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.484534][ T1057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.510700][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.557049][ T1057] veth1_macvtap: left promiscuous mode [ 214.562877][ T1057] veth0_macvtap: left promiscuous mode [ 214.568543][ T1057] veth1_vlan: left promiscuous mode [ 214.574626][ T1057] veth0_vlan: left promiscuous mode [ 215.117425][ T1057] team0 (unregistering): Port device team_slave_1 removed [ 215.166885][ T1057] team0 (unregistering): Port device team_slave_0 removed [ 215.184465][ T5096] Bluetooth: hci0: command tx timeout [ 215.770356][T10144] hsr_slave_0: entered promiscuous mode [ 215.785836][T10144] hsr_slave_1: entered promiscuous mode [ 215.933128][T10157] hsr_slave_0: entered promiscuous mode [ 215.948201][T10157] hsr_slave_1: entered promiscuous mode [ 215.962897][T10157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.978527][T10157] Cannot create hsr debugfs directory [ 215.978978][T10331] netlink: 134312 bytes leftover after parsing attributes in process `syz.2.2014'. [ 215.994365][ T5096] Bluetooth: hci1: command tx timeout [ 216.042217][T10331] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 216.051558][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2014'. [ 216.053161][T10331] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 216.117707][T10329] batman_adv: batadv0: adding TT local entry 4a:c8:93:75:00:00 to non-existent VLAN 2358 [ 216.635667][T10344] Cannot find add_set index 0 as target [ 217.182313][T10375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2033'. [ 217.255077][T10144] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 217.261014][ T5096] Bluetooth: hci0: command tx timeout [ 217.277256][T10144] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 217.330173][T10144] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 217.385488][T10144] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 217.466800][T10380] Cannot find add_set index 0 as target [ 217.473252][T10157] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 217.500986][T10157] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 217.522589][T10157] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 217.629254][T10385] IPv6: Can't replace route, no match found [ 217.657506][T10157] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 217.832462][T10392] xt_CONNSECMARK: invalid mode: 0 [ 217.841256][T10392] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 218.012612][T10144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.061678][ T5096] Bluetooth: hci1: command tx timeout [ 218.185861][T10144] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.254446][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.261724][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.302239][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.309430][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.360071][T10157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.482446][T10405] netlink: 134312 bytes leftover after parsing attributes in process `syz.0.2044'. [ 218.513312][T10405] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 218.528578][T10157] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.538558][T10405] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 218.590169][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.597538][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.633124][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2044'. [ 218.676320][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.683594][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.965531][T10144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.106808][T10144] veth0_vlan: entered promiscuous mode [ 219.125692][T10144] veth1_vlan: entered promiscuous mode [ 219.212861][T10144] veth0_macvtap: entered promiscuous mode [ 219.254147][T10157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.269460][T10144] veth1_macvtap: entered promiscuous mode [ 219.288916][T10429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2050'. [ 219.357836][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.397030][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.423513][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.448013][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.480246][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.493372][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.510857][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.528646][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.564768][T10144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.589068][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.616682][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.637740][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.662515][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.674207][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.685099][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.695020][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.706242][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.718255][T10144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.742204][T10144] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.752337][T10144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.761814][T10144] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.775780][T10144] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.790184][T10439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2053'. [ 220.018352][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.035305][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.139650][ T1850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.150490][T10157] veth0_vlan: entered promiscuous mode [ 220.156386][ T1850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.203959][T10157] veth1_vlan: entered promiscuous mode [ 220.398386][T10157] veth0_macvtap: entered promiscuous mode [ 220.438921][T10157] veth1_macvtap: entered promiscuous mode [ 220.485773][T10157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.520948][T10157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.540086][T10157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.567183][T10157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.579138][T10157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.590960][T10157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.607263][T10157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.621323][T10157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.643075][T10157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.661707][T10157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.686144][T10157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.707618][T10157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.729164][T10157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.747664][T10157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.759426][T10157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.786189][T10157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.808917][T10157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.821086][T10157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.839562][T10157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.850161][T10157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.882224][T10157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.903828][T10157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.965247][T10157] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.985707][T10157] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.018867][T10157] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.040767][T10157] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.220270][ T4094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.251293][ T4094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.344659][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.361432][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.736357][T10547] xt_TPROXY: Can be used only with -p tcp or -p udp [ 221.827797][T10554] x_tables: duplicate underflow at hook 1 [ 222.138429][T10559] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 222.343485][T10570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2108'. [ 222.352924][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2108'. [ 222.513984][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.327791][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.337640][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.349176][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.359682][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.368122][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 223.376974][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.410512][T10590] lo speed is unknown, defaulting to 1000 [ 223.531190][T10590] chnl_net:caif_netlink_parms(): no params data found [ 223.604183][T10590] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.612641][T10590] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.619860][T10590] bridge_slave_0: entered allmulticast mode [ 223.626717][T10590] bridge_slave_0: entered promiscuous mode [ 223.637883][T10590] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.645533][T10590] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.653037][T10590] bridge_slave_1: entered allmulticast mode [ 223.659817][T10590] bridge_slave_1: entered promiscuous mode [ 223.686059][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.724759][T10590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.754708][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.770074][T10590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.805955][T10590] team0: Port device team_slave_0 added [ 223.815283][T10590] team0: Port device team_slave_1 added [ 223.850928][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.876520][T10590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.886595][T10590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.932710][T10590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.988641][T10590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.001777][T10590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.074298][T10590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.434985][T10590] hsr_slave_0: entered promiscuous mode [ 224.478861][T10590] hsr_slave_1: entered promiscuous mode [ 224.510935][T10590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.523601][T10590] Cannot create hsr debugfs directory [ 224.634354][ T5096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 224.645657][ T5096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 224.655908][ T5096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 224.665919][ T5096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 224.681082][ T5096] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 224.691941][ T5096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 224.721582][ T4489] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 224.730488][ T4489] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 224.739760][ T4489] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 224.757753][ T4489] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 224.770402][ T4489] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 224.780223][ T35] bridge_slave_1: left allmulticast mode [ 224.784915][ T4489] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 224.786325][ T35] bridge_slave_1: left promiscuous mode [ 224.808827][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.851775][ T35] bridge_slave_0: left allmulticast mode [ 224.857576][ T35] bridge_slave_0: left promiscuous mode [ 224.878056][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.042275][T10638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2128'. [ 225.365311][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.378514][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.389458][ T35] bond0 (unregistering): Released all slaves [ 225.429680][ T5096] Bluetooth: hci0: command tx timeout [ 225.553873][T10622] lo speed is unknown, defaulting to 1000 [ 225.612088][T10621] lo speed is unknown, defaulting to 1000 [ 226.049470][ T35] hsr_slave_0: left promiscuous mode [ 226.057306][ T35] hsr_slave_1: left promiscuous mode [ 226.077805][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.107082][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.123324][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.141448][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.162942][T10664] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2137'. [ 226.175982][ T35] veth1_macvtap: left promiscuous mode [ 226.180896][T10664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2137'. [ 226.182508][ T35] veth0_macvtap: left promiscuous mode [ 226.210744][ T35] veth1_vlan: left promiscuous mode [ 226.222142][ T35] veth0_vlan: left promiscuous mode [ 226.288908][T10667] Bluetooth: MGMT ver 1.22 [ 226.787104][ T5096] Bluetooth: hci1: command tx timeout [ 226.869542][ T5096] Bluetooth: hci3: command tx timeout [ 226.888023][ T35] team0 (unregistering): Port device team_slave_1 removed [ 226.936275][ T35] team0 (unregistering): Port device team_slave_0 removed [ 227.388650][T10659] netlink: 'syz.3.2136': attribute type 11 has an invalid length. [ 227.396782][T10659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2136'. [ 227.500819][ T5096] Bluetooth: hci0: command tx timeout [ 227.826734][T10622] chnl_net:caif_netlink_parms(): no params data found [ 227.940413][T10679] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2139'. [ 227.985323][T10621] chnl_net:caif_netlink_parms(): no params data found [ 228.225945][T10590] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 228.339285][T10590] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 228.371396][T10590] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 228.384005][T10590] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 228.446827][T10622] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.461824][T10622] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.475749][T10622] bridge_slave_0: entered allmulticast mode [ 228.500850][T10622] bridge_slave_0: entered promiscuous mode [ 228.566739][T10622] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.588157][T10622] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.605319][T10622] bridge_slave_1: entered allmulticast mode [ 228.619963][T10622] bridge_slave_1: entered promiscuous mode [ 228.653066][T10621] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.660404][T10621] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.667973][T10621] bridge_slave_0: entered allmulticast mode [ 228.675853][T10621] bridge_slave_0: entered promiscuous mode [ 228.731453][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.796424][T10622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.821786][T10621] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.835603][T10621] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.849174][T10621] bridge_slave_1: entered allmulticast mode [ 228.860952][ T5096] Bluetooth: hci1: command tx timeout [ 228.871277][T10621] bridge_slave_1: entered promiscuous mode [ 228.945447][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.955925][ T5096] Bluetooth: hci3: command tx timeout [ 228.976795][T10622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.041799][T10621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.065374][T10621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.089231][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.212920][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.251533][T10622] team0: Port device team_slave_0 added [ 229.325717][T10621] team0: Port device team_slave_0 added [ 229.355808][T10622] team0: Port device team_slave_1 added [ 229.435351][T10621] team0: Port device team_slave_1 added [ 229.477054][T10622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.500741][T10622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.546824][T10622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.569729][T10622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.580931][ T5096] Bluetooth: hci0: command tx timeout [ 229.600583][T10622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.670062][T10622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.719561][T10621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.735524][T10621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.799410][T10621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.827078][T10621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.844690][T10621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.882485][T10621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.031678][T10622] hsr_slave_0: entered promiscuous mode [ 230.041589][T10622] hsr_slave_1: entered promiscuous mode [ 230.306098][T10621] hsr_slave_0: entered promiscuous mode [ 230.319057][T10621] hsr_slave_1: entered promiscuous mode [ 230.333460][T10621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.347174][T10621] Cannot create hsr debugfs directory [ 230.432817][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.664703][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.808831][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.941314][ T5096] Bluetooth: hci1: command tx timeout [ 231.017290][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.020912][ T5096] Bluetooth: hci3: command tx timeout [ 231.286097][T10590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.328290][T10590] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.369517][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.376744][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.399420][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.406666][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.535952][ T35] bridge_slave_0: left allmulticast mode [ 231.547551][ T35] bridge_slave_0: left promiscuous mode [ 231.562495][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.583874][ T35] bridge_slave_1: left allmulticast mode [ 231.596751][ T35] bridge_slave_1: left promiscuous mode [ 231.608735][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.629399][ T35] bridge_slave_0: left allmulticast mode [ 231.643409][ T35] bridge_slave_0: left promiscuous mode [ 231.656013][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.665250][ T5096] Bluetooth: hci0: command tx timeout [ 232.628360][T10726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2154'. [ 232.727755][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.738928][ T35] bond0 (unregistering): Released all slaves [ 232.848047][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.859684][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.871066][ T35] bond0 (unregistering): Released all slaves [ 232.917834][T10726] IPVS: Error joining to the multicast group [ 233.021304][ T5096] Bluetooth: hci1: command tx timeout [ 233.027653][ T29] audit: type=1107 audit(1719420400.907:22): pid=10731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 233.063052][ T35] tipc: Disabling bearer [ 233.068890][ T35] tipc: Left network mode [ 233.102139][ T5096] Bluetooth: hci3: command tx timeout [ 233.495359][T10590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.512850][T10746] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2161'. [ 233.610233][T10746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2161'. [ 233.660839][ C0] syz_tun: tun_net_xmit 58 [ 233.785194][T10753] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2164'. [ 233.800928][ C1] syz_tun: tun_net_xmit 58 [ 233.863326][T10590] veth0_vlan: entered promiscuous mode [ 233.904434][T10757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2166'. [ 233.924696][T10757] IPVS: Error joining to the multicast group [ 233.938284][T10590] veth1_vlan: entered promiscuous mode [ 234.037375][ T35] hsr_slave_0: left promiscuous mode [ 234.061937][ T35] hsr_slave_1: left promiscuous mode [ 234.068462][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.080985][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.101863][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.109336][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.135810][ T35] hsr_slave_0: left promiscuous mode [ 234.147898][ T35] hsr_slave_1: left promiscuous mode [ 234.154420][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.162299][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.170504][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.178421][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.247574][ T35] veth1_macvtap: left promiscuous mode [ 234.260843][ T35] veth0_macvtap: left promiscuous mode [ 234.266564][ T35] veth1_vlan: left promiscuous mode [ 234.280877][ T35] veth0_vlan: left promiscuous mode [ 234.287805][ T35] veth1_macvtap: left promiscuous mode [ 234.293589][ T35] veth0_macvtap: left promiscuous mode [ 234.300498][ T35] veth1_vlan: left promiscuous mode [ 234.307067][ T35] veth0_vlan: left promiscuous mode [ 234.460815][ C0] syz_tun: tun_net_xmit 58 [ 235.296709][ T35] team0 (unregistering): Port device team_slave_1 removed [ 235.381620][ T35] team0 (unregistering): Port device team_slave_0 removed [ 236.499186][ T35] team0 (unregistering): Port device team_slave_1 removed [ 236.584875][ T35] team0 (unregistering): Port device team_slave_0 removed [ 237.280797][ C0] syz_tun: tun_net_xmit 58 [ 237.349553][T10621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 237.381381][T10621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 237.425527][ C0] syz_tun: tun_net_xmit 58 [ 237.428056][T10621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 237.471598][T10590] veth0_macvtap: entered promiscuous mode [ 237.520231][T10621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 237.578380][T10590] veth1_macvtap: entered promiscuous mode [ 237.649851][T10590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.663448][T10590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.675543][T10590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.686677][T10590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.697028][T10590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.708076][T10590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.728210][T10590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.738184][T10622] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 237.762186][T10764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2169'. [ 237.793178][T10590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.814104][T10590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.831012][T10590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.848955][T10590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.859251][T10590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.880474][T10590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.908895][T10590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.929908][T10622] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 237.963993][T10590] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.979498][T10590] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.010950][T10590] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.019709][T10590] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.043050][T10622] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 238.059780][T10622] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 238.377999][ T1850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.421135][ T1850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.521023][ T1850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.538585][ T1850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.548788][T10621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.614989][T10777] sctp: [Deprecated]: syz.3.2173 (pid 10777) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.614989][T10777] Use struct sctp_sack_info instead [ 238.638721][T10777] sctp: [Deprecated]: syz.3.2173 (pid 10777) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.638721][T10777] Use struct sctp_sack_info instead [ 238.648611][T10621] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.677025][T10622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.770025][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.777270][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.798738][ T5211] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.805908][ T5211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.859991][T10622] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.887191][ T5211] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.894387][ T5211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.916630][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.923859][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.249863][T10622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.543681][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.561236][T10811] syz_tun: tun_net_xmit 42 [ 239.592269][T10621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.650936][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.678739][T10622] veth0_vlan: entered promiscuous mode [ 239.729159][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.750434][T10622] veth1_vlan: entered promiscuous mode [ 239.817060][T10622] veth0_macvtap: entered promiscuous mode [ 239.839573][T10622] veth1_macvtap: entered promiscuous mode [ 239.874097][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.885293][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.895631][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.913813][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.924825][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.935543][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.945415][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.956701][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.968122][T10622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.991192][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.014725][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.026641][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.037553][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.048141][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.058076][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.076936][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.086906][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.098949][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.110447][T10622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.131748][T10622] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.140499][T10622] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.149567][T10622] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.159353][T10622] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.302972][ T51] bridge_slave_1: left allmulticast mode [ 240.308682][ T51] bridge_slave_1: left promiscuous mode [ 240.318335][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.328978][ T51] bridge_slave_0: left allmulticast mode [ 240.334902][ T51] bridge_slave_0: left promiscuous mode [ 240.341693][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.612440][T10823] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2183'. [ 240.621863][ C1] syz_tun: tun_net_xmit 42 [ 240.879308][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.899202][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.919049][ T51] bond0 (unregistering): Released all slaves [ 240.930179][ T4489] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.943323][ T4489] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.954064][T10621] veth0_vlan: entered promiscuous mode [ 240.964119][ T4489] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.977056][ T4489] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.006679][ T4489] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 241.017386][ T4489] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 241.093817][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.109509][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.139419][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.147328][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.153660][T10835] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.2189'. [ 241.200507][T10621] veth1_vlan: entered promiscuous mode [ 241.356677][T10830] lo speed is unknown, defaulting to 1000 [ 241.439533][T10621] veth0_macvtap: entered promiscuous mode [ 241.469865][ T51] hsr_slave_0: left promiscuous mode [ 241.485834][ T51] hsr_slave_1: left promiscuous mode [ 241.513116][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.531340][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.546654][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.559712][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.575001][T10853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2194'. [ 241.619907][ T51] veth1_macvtap: left promiscuous mode [ 241.644747][ T51] veth0_macvtap: left promiscuous mode [ 241.650453][ T51] veth1_vlan: left promiscuous mode [ 241.660666][ C1] syz_tun: tun_net_xmit 42 [ 241.672113][ T51] veth0_vlan: left promiscuous mode [ 241.728803][T10861] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2198'. [ 241.997578][T10872] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.2203'. [ 242.338623][ T51] team0 (unregistering): Port device team_slave_1 removed [ 242.381110][ T51] team0 (unregistering): Port device team_slave_0 removed [ 242.827657][T10877] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 242.877256][T10621] veth1_macvtap: entered promiscuous mode [ 242.993769][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.014827][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.036836][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.054786][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.064845][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.086167][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.100707][ T5096] Bluetooth: hci0: command tx timeout [ 243.130810][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.165569][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.212672][T10621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.309991][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.360119][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.370465][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.383320][T10907] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2213'. [ 243.390594][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.419740][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.450165][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.464397][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.477057][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.489771][T10621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.519237][T10621] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.546212][T10621] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.558652][T10621] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.572197][T10621] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.617442][T10915] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2217'. [ 243.627607][T10915] 8021q: VLANs not supported on hsr0 [ 243.934138][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.949051][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.005299][T10830] chnl_net:caif_netlink_parms(): no params data found [ 244.122717][ T1057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.131827][ T1057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.213653][T10830] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.246447][T10830] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.263772][T10830] bridge_slave_0: entered allmulticast mode [ 244.276181][T10910] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa [ 244.281980][T10830] bridge_slave_0: entered promiscuous mode [ 244.352633][T10947] dccp_invalid_packet: P.Data Offset(4) too small [ 244.372126][ T29] audit: type=1800 audit(1719420412.247:23): pid=10947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2229" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 244.424059][ T29] audit: type=1800 audit(1719420412.287:24): pid=10947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2229" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 244.459716][T10830] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.482121][T10830] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.489407][T10830] bridge_slave_1: entered allmulticast mode [ 244.506870][T10830] bridge_slave_1: entered promiscuous mode [ 244.592223][T10830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.613778][T10830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.694563][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.775213][T10830] team0: Port device team_slave_0 added [ 244.801321][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.817842][T10830] team0: Port device team_slave_1 added [ 244.851384][T10830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.858383][T10830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.884485][T10830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.897890][T10830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.905582][T10830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.932889][T10830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.959905][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.032777][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.060481][T10830] hsr_slave_0: entered promiscuous mode [ 245.068644][T10830] hsr_slave_1: entered promiscuous mode [ 245.078219][T10830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.085931][T10830] Cannot create hsr debugfs directory [ 245.181380][ T5096] Bluetooth: hci0: command tx timeout [ 245.343567][ T51] bridge_slave_1: left allmulticast mode [ 245.349255][ T51] bridge_slave_1: left promiscuous mode [ 245.355164][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.366336][ T51] bridge_slave_0: left allmulticast mode [ 245.372619][ T51] bridge_slave_0: left promiscuous mode [ 245.378310][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.769220][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.850136][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.883699][ T51] bond0 (unregistering): Released all slaves [ 246.205522][ T4489] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 246.216256][ T4489] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 246.237313][ T4489] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 246.251406][ T4489] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 246.271997][ T4489] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 246.291866][ T4489] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 246.529548][ T51] hsr_slave_0: left promiscuous mode [ 246.548068][ T51] hsr_slave_1: left promiscuous mode [ 246.573424][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.590986][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.611963][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.632685][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.673715][ T51] veth1_macvtap: left promiscuous mode [ 246.679395][ T51] veth0_macvtap: left promiscuous mode [ 246.685517][ T51] veth1_vlan: left promiscuous mode [ 246.691015][ T51] veth0_vlan: left promiscuous mode [ 247.261133][ T4489] Bluetooth: hci0: command tx timeout [ 247.279709][ T51] team0 (unregistering): Port device team_slave_1 removed [ 247.324537][ T51] team0 (unregistering): Port device team_slave_0 removed [ 247.757067][T10830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 247.781246][T10830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 247.855158][T10830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 247.877660][T10830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 247.894385][T10981] lo speed is unknown, defaulting to 1000 [ 248.150410][T11028] sctp: [Deprecated]: syz.2.2263 (pid 11028) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.150410][T11028] Use struct sctp_sack_info instead [ 248.171760][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2267'. [ 248.323301][T10830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.384701][ T4489] Bluetooth: hci1: command tx timeout [ 248.407393][T10830] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.416221][T11041] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2271'. [ 248.439946][T11041] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2271'. [ 248.441006][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.456140][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.469654][T11041] netlink: 'syz.3.2271': attribute type 5 has an invalid length. [ 248.477902][T11041] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2271'. [ 248.521956][T10981] chnl_net:caif_netlink_parms(): no params data found [ 248.631244][T11050] netlink: 'syz.0.2274': attribute type 29 has an invalid length. [ 248.633663][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.639344][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2274'. [ 248.646308][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.687834][T11050] netlink: 'syz.0.2274': attribute type 29 has an invalid length. [ 248.696178][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2274'. [ 248.740511][T11055] netlink: 'syz.0.2274': attribute type 29 has an invalid length. [ 248.749506][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2274'. [ 248.848166][T10981] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.879491][T10981] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.900304][T10981] bridge_slave_0: entered allmulticast mode [ 248.909131][T10981] bridge_slave_0: entered promiscuous mode [ 248.924190][T10981] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.941068][T10981] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.957949][T10981] bridge_slave_1: entered allmulticast mode [ 248.975002][T10981] bridge_slave_1: entered promiscuous mode [ 249.122604][T10981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.164844][T10981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.181961][T11073] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2283'. [ 249.197517][T11073] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2283'. [ 249.251420][T11073] netlink: 'syz.2.2283': attribute type 5 has an invalid length. [ 249.259221][T11073] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2283'. [ 249.296098][T10981] team0: Port device team_slave_0 added [ 249.312043][T10981] team0: Port device team_slave_1 added [ 249.341791][ T4489] Bluetooth: hci0: command tx timeout [ 249.381818][T10981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.389003][T10981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.415929][T10981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.430212][T10981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.438328][T10981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.500791][T10981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.538102][T11089] netlink: 'syz.0.2289': attribute type 8 has an invalid length. [ 249.674865][T10981] hsr_slave_0: entered promiscuous mode [ 249.686341][T11099] syz.0.2294[11099] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.686501][T11099] syz.0.2294[11099] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.716371][T10981] hsr_slave_1: entered promiscuous mode [ 249.756572][T10981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.773426][T10981] Cannot create hsr debugfs directory [ 250.404273][T10830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.416101][T11115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2298'. [ 250.435868][T11115] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 250.444587][T11116] batman_adv: batadv1: Adding interface: netdevsim0 [ 250.461143][ T4489] Bluetooth: hci1: command tx timeout [ 250.469746][T11116] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.499637][T11116] batman_adv: batadv1: Interface activated: netdevsim0 [ 250.568474][T11121] mac80211_hwsim hwsim43 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 250.692212][T11130] netlink: 'syz.0.2304': attribute type 8 has an invalid length. [ 250.816867][T10830] veth0_vlan: entered promiscuous mode [ 250.867484][T10830] veth1_vlan: entered promiscuous mode [ 250.915040][ T29] audit: type=1800 audit(1719420418.787:25): pid=11137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2306" name="memory.events" dev="sda1" ino=1955 res=0 errno=0 [ 250.941064][ T29] audit: type=1804 audit(1719420418.797:26): pid=11137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2306" name="/root/syzkaller.VR5Ycg/686/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 250.968521][T10830] veth0_macvtap: entered promiscuous mode [ 250.997270][T10830] veth1_macvtap: entered promiscuous mode [ 251.016840][T10830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.029053][T10830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.044477][T10830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.056636][T10830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.066945][T10830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.077965][T10830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.087864][T10830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.098450][T10830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.110206][T10830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.135587][T10830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.148854][T10830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.159313][T10830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.170160][T10830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.183219][T10830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.193948][T10830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.204361][T10830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.214870][T10830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.226703][T10830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.243637][T10830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.252873][T10830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.262825][T10830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.271750][T10830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.398324][T10981] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 251.412315][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.414909][T10981] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 251.420154][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.447316][T10981] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 251.470975][T10981] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 251.480167][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.489728][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.628263][T10981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.649898][T10981] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.664640][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.671840][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.688826][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.696116][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.859545][T10981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.069551][T11151] netlink: 'syz.3.2309': attribute type 10 has an invalid length. [ 252.079448][T11151] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 252.092982][T11151] batman_adv: batadv1: Removing interface: netdevsim0 [ 252.115205][T11151] : (slave netdevsim0): Enslaving as an active interface with an up link [ 252.146038][T10981] veth0_vlan: entered promiscuous mode [ 252.162852][T11155] [ 252.165248][T11155] ====================================================== [ 252.172277][T11155] WARNING: possible circular locking dependency detected [ 252.179313][T11155] 6.10.0-rc4-syzkaller-00937-ga6a6a9809411 #0 Not tainted [ 252.186440][T11155] ------------------------------------------------------ [ 252.193471][T11155] syz.2.2310/11155 is trying to acquire lock: [ 252.199625][T11155] ffff888015158a50 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_switch_to_fallback+0x35/0xd00 [ 252.210338][T11155] [ 252.210338][T11155] but task is already holding lock: [ 252.217737][T11155] ffff888015158258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_sendmsg+0x55/0x530 [ 252.226533][T11155] [ 252.226533][T11155] which lock already depends on the new lock. [ 252.226533][T11155] [ 252.236922][T11155] [ 252.236922][T11155] the existing dependency chain (in reverse order) is: [ 252.245924][T11155] [ 252.245924][T11155] -> #2 (sk_lock-AF_INET){+.+.}-{0:0}: [ 252.253583][T11155] lock_acquire+0x1ed/0x550 [ 252.258609][T11155] lock_sock_nested+0x48/0x100 [ 252.263899][T11155] do_ip_setsockopt+0x1a2d/0x3cd0 [ 252.269434][T11155] ip_setsockopt+0x63/0x100 [ 252.274446][T11155] do_sock_setsockopt+0x3af/0x720 [ 252.279984][T11155] __sys_setsockopt+0x1ae/0x250 [ 252.285347][T11155] __x64_sys_setsockopt+0xb5/0xd0 [ 252.290891][T11155] do_syscall_64+0xf3/0x230 [ 252.295911][T11155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.302320][T11155] [ 252.302320][T11155] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 252.309529][T11155] lock_acquire+0x1ed/0x550 [ 252.314558][T11155] __mutex_lock+0x136/0xd70 [ 252.319577][T11155] do_ip_setsockopt+0x127d/0x3cd0 [ 252.325114][T11155] ip_setsockopt+0x63/0x100 [ 252.330129][T11155] smc_setsockopt+0x275/0xe50 [ 252.335315][T11155] do_sock_setsockopt+0x3af/0x720 [ 252.340854][T11155] __sys_setsockopt+0x1ae/0x250 [ 252.346229][T11155] __x64_sys_setsockopt+0xb5/0xd0 [ 252.351767][T11155] do_syscall_64+0xf3/0x230 [ 252.356786][T11155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.363197][T11155] [ 252.363197][T11155] -> #0 (&smc->clcsock_release_lock){+.+.}-{3:3}: [ 252.371787][T11155] validate_chain+0x18e0/0x5900 [ 252.377152][T11155] __lock_acquire+0x1346/0x1fd0 [ 252.382512][T11155] lock_acquire+0x1ed/0x550 [ 252.387526][T11155] __mutex_lock+0x136/0xd70 [ 252.392539][T11155] smc_switch_to_fallback+0x35/0xd00 [ 252.398344][T11155] smc_sendmsg+0x11f/0x530 [ 252.403274][T11155] __sock_sendmsg+0x221/0x270 [ 252.408459][T11155] __sys_sendto+0x3a4/0x4f0 [ 252.413480][T11155] __x64_sys_sendto+0xde/0x100 [ 252.418761][T11155] do_syscall_64+0xf3/0x230 [ 252.423777][T11155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.430184][T11155] [ 252.430184][T11155] other info that might help us debug this: [ 252.430184][T11155] [ 252.440403][T11155] Chain exists of: [ 252.440403][T11155] &smc->clcsock_release_lock --> rtnl_mutex --> sk_lock-AF_INET [ 252.440403][T11155] [ 252.453951][T11155] Possible unsafe locking scenario: [ 252.453951][T11155] [ 252.461388][T11155] CPU0 CPU1 [ 252.466735][T11155] ---- ---- [ 252.472090][T11155] lock(sk_lock-AF_INET); [ 252.476499][T11155] lock(rtnl_mutex); [ 252.482985][T11155] lock(sk_lock-AF_INET); [ 252.489925][T11155] lock(&smc->clcsock_release_lock); [ 252.495309][T11155] [ 252.495309][T11155] *** DEADLOCK *** [ 252.495309][T11155] [ 252.503443][T11155] 1 lock held by syz.2.2310/11155: [ 252.508537][T11155] #0: ffff888015158258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_sendmsg+0x55/0x530 [ 252.517772][T11155] [ 252.517772][T11155] stack backtrace: [ 252.523647][T11155] CPU: 1 PID: 11155 Comm: syz.2.2310 Not tainted 6.10.0-rc4-syzkaller-00937-ga6a6a9809411 #0 [ 252.533780][T11155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 252.543832][T11155] Call Trace: [ 252.547108][T11155] [ 252.550028][T11155] dump_stack_lvl+0x241/0x360 [ 252.554702][T11155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.559898][T11155] ? print_circular_bug+0x130/0x1a0 [ 252.565098][T11155] check_noncircular+0x36a/0x4a0 [ 252.570031][T11155] ? __pfx_check_noncircular+0x10/0x10 [ 252.575483][T11155] ? lockdep_lock+0x123/0x2b0 [ 252.580153][T11155] ? _find_first_zero_bit+0xd3/0x100 [ 252.585429][T11155] validate_chain+0x18e0/0x5900 [ 252.590274][T11155] ? mark_lock+0x9a/0x350 [ 252.594601][T11155] ? __pfx_validate_chain+0x10/0x10 [ 252.599790][T11155] ? validate_chain+0x11e/0x5900 [ 252.604766][T11155] ? validate_chain+0x11e/0x5900 [ 252.609719][T11155] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 252.616041][T11155] ? finish_task_switch+0x1e5/0x870 [ 252.621237][T11155] ? lockdep_hardirqs_on+0x99/0x150 [ 252.626429][T11155] ? __pfx_validate_chain+0x10/0x10 [ 252.631618][T11155] ? mark_lock+0x9a/0x350 [ 252.635941][T11155] ? __pfx_validate_chain+0x10/0x10 [ 252.641133][T11155] __lock_acquire+0x1346/0x1fd0 [ 252.645983][T11155] lock_acquire+0x1ed/0x550 [ 252.650475][T11155] ? smc_switch_to_fallback+0x35/0xd00 [ 252.655932][T11155] ? __pfx_lock_acquire+0x10/0x10 [ 252.660948][T11155] ? __pfx___might_resched+0x10/0x10 [ 252.666228][T11155] __mutex_lock+0x136/0xd70 [ 252.670728][T11155] ? smc_switch_to_fallback+0x35/0xd00 [ 252.676182][T11155] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 252.682150][T11155] ? smc_switch_to_fallback+0x35/0xd00 [ 252.687602][T11155] ? __pfx___mutex_lock+0x10/0x10 [ 252.692619][T11155] ? __local_bh_enable_ip+0x168/0x200 [ 252.697978][T11155] ? lockdep_hardirqs_on+0x99/0x150 [ 252.703170][T11155] ? __local_bh_enable_ip+0x168/0x200 [ 252.708528][T11155] smc_switch_to_fallback+0x35/0xd00 [ 252.713810][T11155] ? do_raw_spin_unlock+0x13c/0x8b0 [ 252.719009][T11155] smc_sendmsg+0x11f/0x530 [ 252.723424][T11155] ? __pfx_smc_sendmsg+0x10/0x10 [ 252.728357][T11155] __sock_sendmsg+0x221/0x270 [ 252.733030][T11155] __sys_sendto+0x3a4/0x4f0 [ 252.737528][T11155] ? __pfx___sys_sendto+0x10/0x10 [ 252.742545][T11155] ? do_futex+0x33b/0x560 [ 252.746874][T11155] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 252.752853][T11155] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 252.759173][T11155] __x64_sys_sendto+0xde/0x100 [ 252.763938][T11155] do_syscall_64+0xf3/0x230 [ 252.768437][T11155] ? clear_bhb_loop+0x35/0x90 [ 252.773105][T11155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.779007][T11155] RIP: 0033:0x7f99df975ae9 [ 252.783418][T11155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.803016][T11155] RSP: 002b:00007f99e07b5048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 252.811457][T11155] RAX: ffffffffffffffda RBX: 00007f99dfb03fa0 RCX: 00007f99df975ae9 [ 252.819419][T11155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 252.827383][T11155] RBP: 00007f99df9f6746 R08: 0000000020e68000 R09: 0000000000000010 [ 252.835348][T11155] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000000 [ 252.843309][T11155] R13: 000000000000000b R14: 00007f99dfb03fa0 R15: 00007ffca71746c8 [ 252.851302][T11155] [ 252.873218][ T4489] Bluetooth: hci1: command tx timeout [ 252.887641][T10981] veth1_vlan: entered promiscuous mode [ 252.917310][T10981] veth0_macvtap: entered promiscuous mode [ 252.928063][T10981] veth1_macvtap: entered promiscuous mode [ 252.947357][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.958593][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.968578][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.981283][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.991184][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.001739][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.011714][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.023991][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.033881][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.044526][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.055728][T10981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.086752][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.097985][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.108159][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.118896][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.129346][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.139894][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.149792][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.160227][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.170208][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.181231][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.193446][T10981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.205197][T10981] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.214207][T10981] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.223168][T10981] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.232970][T10981] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.269963][T10981] ieee80211 phy59: Selected rate control algorithm 'minstrel_ht' [ 253.296593][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.298084][T10981] ieee80211 phy60: Selected rate control algorithm 'minstrel_ht' [ 253.305342][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.333326][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.341426][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.351012][ T35] wlan0: Trigger new scan to find an IBSS to join [ 253.538561][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.627789][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.703441][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.759864][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.852887][ T62] bridge_slave_1: left allmulticast mode [ 254.858574][ T62] bridge_slave_1: left promiscuous mode [ 254.867873][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.879129][ T62] bridge_slave_0: left allmulticast mode [ 254.885048][ T62] bridge_slave_0: left promiscuous mode [ 254.891334][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.071423][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.084531][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.094830][ T62] bond0 (unregistering): Released all slaves [ 255.363896][ T62] hsr_slave_0: left promiscuous mode [ 255.369819][ T62] hsr_slave_1: left promiscuous mode [ 255.375866][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.387425][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.396320][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.409487][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.420434][ T62] veth1_macvtap: left promiscuous mode [ 255.428784][ T62] veth0_macvtap: left promiscuous mode [ 255.434549][ T62] veth1_vlan: left promiscuous mode [ 255.439845][ T62] veth0_vlan: left promiscuous mode [ 255.700324][ T62] team0 (unregistering): Port device team_slave_1 removed [ 255.737695][ T62] team0 (unregistering): Port device team_slave_0 removed [ 256.144211][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.303774][ T35] wlan0: Trigger new scan to find an IBSS to join [ 256.325773][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.996062][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.058251][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.117035][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.206127][ T62] bridge_slave_1: left allmulticast mode [ 258.213613][ T62] bridge_slave_1: left promiscuous mode [ 258.219365][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.231155][ T62] bridge_slave_0: left allmulticast mode [ 258.236831][ T62] bridge_slave_0: left promiscuous mode [ 258.247810][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.410367][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.423101][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.434163][ T62] bond0 (unregistering): Released all slaves [ 258.662413][ T62] hsr_slave_0: left promiscuous mode [ 258.668352][ T62] hsr_slave_1: left promiscuous mode [ 258.681242][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.688669][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.697707][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.707030][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.717248][ T62] veth1_macvtap: left promiscuous mode [ 258.722865][ T62] veth0_macvtap: left promiscuous mode [ 258.728463][ T62] veth1_vlan: left promiscuous mode [ 258.733990][ T62] veth0_vlan: left promiscuous mode [ 258.972446][ T62] team0 (unregistering): Port device team_slave_1 removed [ 259.006283][ T62] team0 (unregistering): Port device team_slave_0 removed [ 259.260980][ T35] wlan0: Trigger new scan to find an IBSS to join [ 260.160880][ T1057] wlan0: Creating new IBSS network, BSSID 42:45:b2:fa:45:88