last executing test programs: 1m24.772344259s ago: executing program 1 (id=353): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd0}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="200000001200010000000000000000000c00000000000000", @ANYRES32=0x0, @ANYBLOB="04"], 0x20}], 0x1}, 0x0) 1m23.423480599s ago: executing program 0 (id=269): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)={0x4, {{0x2, 0x3, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @multicast1}}]}, 0x110) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000480)='pids.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x40000000000004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="cc0000001b0001000000000000000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000002000036bfb9644316568060ef4e8ab67f62dcc0d579e23decc86780e5281260656a399e04b4a145870367ba6cd0301fc3b2aa", @ANYRES32=0x0, @ANYRES8=r2, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0010000200000000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0xd, 0x4) 1m9.313028506s ago: executing program 1 (id=353): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd0}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="200000001200010000000000000000000c00000000000000", @ANYRES32=0x0, @ANYBLOB="04"], 0x20}], 0x1}, 0x0) 1m6.810914597s ago: executing program 0 (id=269): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)={0x4, {{0x2, 0x3, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @multicast1}}]}, 0x110) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000480)='pids.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x40000000000004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="cc0000001b0001000000000000000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000002000036bfb9644316568060ef4e8ab67f62dcc0d579e23decc86780e5281260656a399e04b4a145870367ba6cd0301fc3b2aa", @ANYRES32=0x0, @ANYRES8=r2, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0010000200000000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0xd, 0x4) 54.268377529s ago: executing program 1 (id=353): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd0}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="200000001200010000000000000000000c00000000000000", @ANYRES32=0x0, @ANYBLOB="04"], 0x20}], 0x1}, 0x0) 52.293728846s ago: executing program 0 (id=269): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)={0x4, {{0x2, 0x3, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @multicast1}}]}, 0x110) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000480)='pids.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x40000000000004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="cc0000001b0001000000000000000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000002000036bfb9644316568060ef4e8ab67f62dcc0d579e23decc86780e5281260656a399e04b4a145870367ba6cd0301fc3b2aa", @ANYRES32=0x0, @ANYRES8=r2, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0010000200000000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0xd, 0x4) 38.011914451s ago: executing program 1 (id=353): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd0}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="200000001200010000000000000000000c00000000000000", @ANYRES32=0x0, @ANYBLOB="04"], 0x20}], 0x1}, 0x0) 37.089841645s ago: executing program 0 (id=269): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)={0x4, {{0x2, 0x3, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @multicast1}}]}, 0x110) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000480)='pids.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x40000000000004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="cc0000001b0001000000000000000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000002000036bfb9644316568060ef4e8ab67f62dcc0d579e23decc86780e5281260656a399e04b4a145870367ba6cd0301fc3b2aa", @ANYRES32=0x0, @ANYRES8=r2, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0010000200000000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0xd, 0x4) 20.140654457s ago: executing program 1 (id=353): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd0}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="200000001200010000000000000000000c00000000000000", @ANYRES32=0x0, @ANYBLOB="04"], 0x20}], 0x1}, 0x0) 17.620908134s ago: executing program 0 (id=269): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)={0x4, {{0x2, 0x3, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @multicast1}}]}, 0x110) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000480)='pids.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x40000000000004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="cc0000001b0001000000000000000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000002000036bfb9644316568060ef4e8ab67f62dcc0d579e23decc86780e5281260656a399e04b4a145870367ba6cd0301fc3b2aa", @ANYRES32=0x0, @ANYRES8=r2, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0010000200000000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0xd, 0x4) 7.829895581s ago: executing program 4 (id=891): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000180)={r7, 0x17ff}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000240)={r7, 0x400}, &(0x7f0000000280)=0x8) splice(r1, 0x0, r3, 0x0, 0x80, 0x0) write(r3, &(0x7f0000003300)="ac", 0x1) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000340)={r8, 0x7, 0x1, [0x9]}, &(0x7f0000000440)=0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2, 0x21000000}]}, @enum]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000000)={r9, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f00000000c0)=0x84) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000b000014000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090500000000019400000000070000b7020000000000006b9af0ff000000007609000000000000dbaaf0fff1000000bf86000000000000070800000d000000bfa400000000000007040000f0ffffff560000000800000018220000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000089000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 7.158837469s ago: executing program 3 (id=897): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x16, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.045752574s ago: executing program 3 (id=900): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) 6.798099449s ago: executing program 3 (id=902): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x1e8, 0x0, 0x0, 0x148, 0x120, 0x148, 0x1d8, 0x240, 0x240, 0x1d8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x4}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@ipv4_deladdr={0x48, 0x15, 0x10, 0x70bd2d, 0x25dfdbfc, {0x2, 0x80, 0xbe}, [@IFA_LABEL={0x14, 0x3, 'bond_slave_0\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0xffffffff}, @IFA_LABEL={0x14, 0x3, 'virt_wifi0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) 6.485893069s ago: executing program 3 (id=904): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x101}}], 0x18}}], 0x1, 0x4000000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="02"], 0x10) close(r2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r6, r5, 0x2, 0x6, 0x4000, @void, @value}, 0x10) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000006c0)=0x14) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x5, &(0x7f0000000040)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @generic={0x67, 0x2, 0x2, 0x6, 0xf}], &(0x7f0000000140)='syzkaller\x00', 0x3ff, 0xdd, &(0x7f00000005c0)=""/221, 0x41000, 0x54, '\x00', r7, 0x25, r2, 0x8, &(0x7f0000000700)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xa, 0xe, 0x3ff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000780)=[r8, r2], &(0x7f00000007c0)=[{0x3, 0x2, 0x3, 0x1}, {0x4, 0x5, 0x8, 0xb}, {0x1, 0x4, 0x2, 0x6}], 0x10, 0x1, @void, @value}, 0x94) 6.358200796s ago: executing program 3 (id=906): getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='erofs_lookup\x00', r1}, 0x18) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) 6.013905062s ago: executing program 3 (id=908): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xe6445995d9064ed7}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}]]}, 0x2c}}, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x6b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETGROUP(r5, 0x400454ce, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x0) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4004010}, 0x44880) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001700)=""/13, 0xd}, {&(0x7f0000000dc0)=""/19, 0x13}], 0x2}}], 0x1, 0x0, 0x0) 4.693914552s ago: executing program 4 (id=914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000180)=0xb) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x78, 0x80000000, 0x1c, @mcast1, @empty, 0x80, 0x20, 0x1000, 0xe}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x88}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x6, &(0x7f0000000000)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 4.493295862s ago: executing program 4 (id=916): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x150, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0x80000000}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8}]}}]}, 0x150}}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1}, 0x41) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) 3.888664809s ago: executing program 1 (id=353): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd0}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="200000001200010000000000000000000c00000000000000", @ANYRES32=0x0, @ANYBLOB="04"], 0x20}], 0x1}, 0x0) 3.264910212s ago: executing program 0 (id=269): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)={0x4, {{0x2, 0x3, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @multicast1}}]}, 0x110) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000480)='pids.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x40000000000004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="cc0000001b0001000000000000000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000002000036bfb9644316568060ef4e8ab67f62dcc0d579e23decc86780e5281260656a399e04b4a145870367ba6cd0301fc3b2aa", @ANYRES32=0x0, @ANYRES8=r2, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0010000200000000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0xd, 0x4) 2.440437336s ago: executing program 2 (id=920): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "58d5"}]}}}]}, 0x54}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r6 = accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f00000001c0)=0x1c, 0x800) sendto$inet6(r6, &(0x7f0000000340)="049ad92ca172b0c05dcdf54e388e3e5fbdf3c904845d2d1bfb4762356afb988099526f248e977a65df684ef98aded052c222c544b41c73d575b7bb2c688e63d4dd417636ad20918aadcb108e57fdb663ce703d5003a88ca59252dec9dc3845bd5428f857a7319ba50d41fc19d5b94886a25ecfe3688a39ad1851d5a103aa2064917c227292e6b85f8181946b08dc4aabaf89c401193153d8d34dc688b9b88d0b44b324b0c3e8cc3783d5e2588f09805212f6686ad303ed0ffd96c225a9", 0xbd, 0x800, &(0x7f0000000180)={0xa, 0x4e22, 0x7fffffff, @mcast2, 0x80000001}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 2.439957173s ago: executing program 4 (id=921): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) connect$inet(r3, 0x0, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000180)={r8, 0x1}, 0x8) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x32, {0x2, 0x4e20, @multicast1}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x0, @dev}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0), 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x10, 0x6, 0x598, 0x1f8, 0xd0, 0x0, 0xd0, 0x1f8, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}]}, @common=@unspec=@NFQUEUE3={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) 1.770624475s ago: executing program 2 (id=922): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}}, 0x20}}, 0x0) 1.700393075s ago: executing program 2 (id=923): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x2, 0x1, 0x0, 0xf, 0x2, [{0xf, 0x5}]}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000500)={0x0, 0x0, 0x1000, 0x0, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611081000000000063012c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.561752258s ago: executing program 2 (id=924): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r3, 0x400454cd, 0x6) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3300000010"], 0x20) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, r2}, [@IFA_TARGET_NETNSID={0x8}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5889}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8001}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8000103}]}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 1.539631177s ago: executing program 4 (id=925): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x4000006, 0x8000, 0x4000006}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x10000, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x1}}, 0x80000000, 0x1, 0x1, 0x5, 0xc0, 0x6, 0xf1}, &(0x7f0000000100)=0x9c) r2 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000100)=0xffff) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000005980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003e00)}, 0x8}], 0x1, 0x832b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000e9d5f36900"], 0x50) close(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40000000061115c000000000086000000000800009502740000000000845842a7ed84861f1e546889fda5f2cacaa7b956e61c67ab2293cbf48bc82f13dfdfa2192e95e79e490b72da99ba38dd0f9f5bd5203dd3a50a72af477ab33a4520d95e5df0a0a91fd6431e353e771436955f73b726082bac6d19c9af87e31f2ab7d9a8e2e1e26bf4d081a12174a3cc58f3fd25c268756f"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xff83) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r7], 0x20) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000c00000008000300", @ANYRES32=r6, @ANYBLOB="080037400200"], 0x30}}, 0x800) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061100c000000000095001b0000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_int(r3, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.330768325s ago: executing program 2 (id=926): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_AND={0x15, 0x1, {{{0x4, 0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "0ed515e899725d18"}, 0x1}}, @CGW_CS_CRC8={0x11e, 0x6, {0x5, 0x0, 0x62, 0x0, 0x0, "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", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}]}, 0x14c}}, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) read$alg(r1, &(0x7f0000000580)=""/164, 0xa4) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) 1.209899143s ago: executing program 4 (id=927): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x60, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6a}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x47}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x60}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x10, &(0x7f0000000240)=@ringbuf={{}, {}, {}, [@ldst={0x1, 0x0, 0x3}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r6, 0x100) listen(r4, 0x8) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0x1) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r8) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x2000141a) socket$netlink(0x10, 0x3, 0x0) 0s ago: executing program 2 (id=928): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x1c, 0x0, 0x10, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @info_reply={0x10, 0x0, 0x0, 0x7, 0x9}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0xd50, 0x6558, &(0x7f0000000000)="ff", 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x69) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="480000001400190d09004beafd0d8c562c84ed7a060f000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c700"/72, 0x48}], 0x1) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) openat$cgroup_int(r4, &(0x7f0000000180)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x4}, {r2, 0x2100}, {r3, 0xa040}, {r2, 0xc}, {r2, 0x4088}, {r0, 0x2000}], 0x6, &(0x7f00000000c0), &(0x7f0000000100)={[0xf]}, 0x8) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r5, 0x301, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8054}, 0x14) kernel console output (not intermixed with test programs): is strongly recommended to keep mac addresses unique to avoid problems! [ 109.568580][ T7270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.611074][ T7270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.633453][ T7270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.677797][ T7270] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.713776][ T7270] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.742031][ T7270] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.766969][ T7270] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.789530][ T7402] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.893795][ T7402] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 109.904540][ T7402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.949440][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.956641][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.983260][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.990419][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.129127][ T7688] tipc: Enabling of bearer rejected, failed to enable media [ 110.153730][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.180007][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.312446][ T185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.327810][ T7402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.349609][ T185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.451358][ T5848] Bluetooth: hci1: command 0x040f tx timeout [ 110.486864][ T7402] veth0_vlan: entered promiscuous mode [ 110.498366][ T7402] veth1_vlan: entered promiscuous mode [ 110.539239][ T7402] veth0_macvtap: entered promiscuous mode [ 110.624454][ T7402] veth1_macvtap: entered promiscuous mode [ 110.663845][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.680775][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.704512][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.718984][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.729179][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.740161][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.751736][ T7402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.762199][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.772883][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.783211][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.794341][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.804404][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.815009][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.826045][ T7402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.839794][ T7402] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.848718][ T7402] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.857753][ T7402] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.866776][ T7402] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.033916][ T7729] TCP: TCP_TX_DELAY enabled [ 111.179215][ T7729] netlink: 'syz.3.443': attribute type 8 has an invalid length. [ 111.198545][ T3541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.214957][ T3541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.424624][ T2920] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.529163][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.544341][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.673886][ T2920] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.685406][ T7749] __nla_validate_parse: 3 callbacks suppressed [ 111.685424][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.446'. [ 111.944574][ T2920] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.189000][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.211479][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.235631][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.251678][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.267634][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 112.275492][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.345893][ T2920] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.461107][ T7773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.448'. [ 112.468250][ T7768] lo speed is unknown, defaulting to 1000 [ 112.487753][ T7768] lo speed is unknown, defaulting to 1000 [ 112.537160][ T7773] netlink: 'syz.3.448': attribute type 1 has an invalid length. [ 112.550328][ T7773] netlink: 224 bytes leftover after parsing attributes in process `syz.3.448'. [ 112.987029][ T2920] bridge_slave_1: left allmulticast mode [ 112.993170][ T2920] bridge_slave_1: left promiscuous mode [ 112.998939][ T2920] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.019958][ T2920] bridge_slave_0: left allmulticast mode [ 113.047516][ T2920] bridge_slave_0: left promiscuous mode [ 113.076200][ T2920] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.302227][ T7821] netlink: 48 bytes leftover after parsing attributes in process `syz.2.455'. [ 113.596166][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.613044][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.624011][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.636708][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.644829][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 113.655692][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.851232][ T2920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.864476][ T2920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.874796][ T2920] bond0 (unregistering): Released all slaves [ 114.189769][ T7838] netlink: 144 bytes leftover after parsing attributes in process `syz.4.458'. [ 114.326489][ T7768] chnl_net:caif_netlink_parms(): no params data found [ 114.380807][ T5158] Bluetooth: hci0: command tx timeout [ 114.394680][ T7827] lo speed is unknown, defaulting to 1000 [ 114.445950][ T7842] netlink: 'syz.2.457': attribute type 1 has an invalid length. [ 114.686126][ T7827] lo speed is unknown, defaulting to 1000 [ 114.720322][ T7844] bond5 (unregistering): Released all slaves [ 114.821056][ T7865] tap0: tun_chr_ioctl cmd 1074025677 [ 114.843592][ T7865] tap0: linktype set to 776 [ 114.986073][ T2920] hsr_slave_0: left promiscuous mode [ 115.004194][ T2920] hsr_slave_1: left promiscuous mode [ 115.021002][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.029467][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.045946][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.058223][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.082688][ T2920] veth1_macvtap: left promiscuous mode [ 115.088235][ T2920] veth0_macvtap: left promiscuous mode [ 115.098139][ T2920] veth1_vlan: left promiscuous mode [ 115.103745][ T2920] veth0_vlan: left promiscuous mode [ 115.140937][ T7886] ipt_REJECT: TCP_RESET invalid for non-tcp [ 115.545350][ T2920] team0 (unregistering): Port device team_slave_1 removed [ 115.585614][ T2920] team0 (unregistering): Port device team_slave_0 removed [ 115.735561][ T5158] Bluetooth: hci1: command tx timeout [ 116.072433][ T7768] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.100498][ T7768] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.116391][ T7768] bridge_slave_0: entered allmulticast mode [ 116.139425][ T7768] bridge_slave_0: entered promiscuous mode [ 116.216105][ T7768] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.230905][ T7768] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.257418][ T7768] bridge_slave_1: entered allmulticast mode [ 116.281660][ T7768] bridge_slave_1: entered promiscuous mode [ 116.403826][ T7768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.426185][ T7768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.460725][ T5158] Bluetooth: hci0: command tx timeout [ 116.566161][ T7910] xt_l2tp: invalid flags combination: 4 [ 116.602442][ T7914] netlink: 20 bytes leftover after parsing attributes in process `syz.2.471'. [ 116.654305][ T7768] team0: Port device team_slave_0 added [ 116.714854][ T7768] team0: Port device team_slave_1 added [ 116.828996][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.472'. [ 116.858721][ T7768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.881717][ T7768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.912585][ T7933] Unknown options in mask 1f4 [ 116.969571][ T7768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.070188][ T7929] bond0: (slave bond_slave_0): Releasing backup interface [ 117.113134][ T7947] netlink: 560 bytes leftover after parsing attributes in process `syz.3.474'. [ 117.141498][ T7929] bond0: (slave bond_slave_1): Releasing backup interface [ 117.195562][ T7929] team0: Port device team_slave_0 removed [ 117.225535][ T7929] team0: Port device team_slave_1 removed [ 117.235042][ T7929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.251443][ T7929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.262008][ T7929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.269920][ T7929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.299825][ T7929] bond4: (slave batadv1): Releasing backup interface [ 117.347487][ T7933] team0: Mode changed to "loadbalance" [ 117.375981][ T7768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.391812][ T7768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.438852][ T7768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.462496][ T7924] syzkaller1: entered promiscuous mode [ 117.489773][ T7924] syzkaller1: entered allmulticast mode [ 117.589443][ T7827] chnl_net:caif_netlink_parms(): no params data found [ 117.702397][ T7954] lo speed is unknown, defaulting to 1000 [ 117.778414][ T7954] lo speed is unknown, defaulting to 1000 [ 117.811026][ T5158] Bluetooth: hci1: command tx timeout [ 117.943616][ T7973] netlink: 24 bytes leftover after parsing attributes in process `syz.4.479'. [ 117.994811][ T2920] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.075626][ T7768] hsr_slave_0: entered promiscuous mode [ 118.093775][ T7768] hsr_slave_1: entered promiscuous mode [ 118.125273][ T7768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.140349][ T7768] Cannot create hsr debugfs directory [ 118.236222][ T7979] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.245836][ T7979] IPv6: NLM_F_CREATE should be set when creating new route [ 118.265757][ T7980] sch_fq: defrate 511 ignored. [ 118.357725][ T2920] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.488525][ T8001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.484'. [ 118.491951][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.484'. [ 118.506404][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'. [ 118.523886][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'. [ 118.539803][ T5158] Bluetooth: hci0: command tx timeout [ 118.673015][ T2920] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.785233][ T7827] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.809485][ T7827] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.819506][ T7827] bridge_slave_0: entered allmulticast mode [ 118.838062][ T7827] bridge_slave_0: entered promiscuous mode [ 118.903544][ T2920] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.924028][ T8005] lo speed is unknown, defaulting to 1000 [ 118.930416][ T7827] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.971118][ T7827] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.985287][ T7827] bridge_slave_1: entered allmulticast mode [ 119.003094][ T7827] bridge_slave_1: entered promiscuous mode [ 119.093512][ T7827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.102696][ T8005] lo speed is unknown, defaulting to 1000 [ 119.137163][ T7827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.207188][ T8018] netlink: 'syz.2.486': attribute type 29 has an invalid length. [ 119.223460][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 119.344544][ T7827] team0: Port device team_slave_0 added [ 119.371477][ T7827] team0: Port device team_slave_1 added [ 119.468689][ T2920] bridge_slave_1: left allmulticast mode [ 119.481416][ T2920] bridge_slave_1: left promiscuous mode [ 119.502035][ T2920] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.522685][ T2920] bridge_slave_0: left allmulticast mode [ 119.538599][ T2920] bridge_slave_0: left promiscuous mode [ 119.547319][ T2920] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.892777][ T5158] Bluetooth: hci1: command tx timeout [ 119.946014][ T2920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.958562][ T2920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.973273][ T2920] bond0 (unregistering): Released all slaves [ 120.204929][ T7827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.215775][ T7827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.243154][ T7827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.257178][ T7827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.264226][ T7827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.296622][ T7827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.614323][ T5158] Bluetooth: hci0: command tx timeout [ 120.715973][ T7827] hsr_slave_0: entered promiscuous mode [ 120.734126][ T7827] hsr_slave_1: entered promiscuous mode [ 120.741514][ T7827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.749103][ T7827] Cannot create hsr debugfs directory [ 120.957025][ T2920] hsr_slave_0: left promiscuous mode [ 120.980595][ T2920] hsr_slave_1: left promiscuous mode [ 120.989823][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.011243][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.022183][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.029658][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.069715][ T2920] veth1_macvtap: left promiscuous mode [ 121.075810][ T2920] veth0_macvtap: left promiscuous mode [ 121.086384][ T2920] veth1_vlan: left promiscuous mode [ 121.092046][ T2920] veth0_vlan: left promiscuous mode [ 121.515514][ T2920] team0 (unregistering): Port device team_slave_1 removed [ 121.554690][ T2920] team0 (unregistering): Port device team_slave_0 removed [ 121.964070][ T8056] lo speed is unknown, defaulting to 1000 [ 121.971410][ T5158] Bluetooth: hci1: command tx timeout [ 122.015140][ T8056] lo speed is unknown, defaulting to 1000 [ 122.087200][ T8070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.497'. [ 122.345770][ T8077] netlink: 20 bytes leftover after parsing attributes in process `syz.4.498'. [ 122.356698][ T8075] netlink: 40 bytes leftover after parsing attributes in process `syz.4.498'. [ 122.404663][ T7768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 122.476243][ T7768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 122.583116][ T7768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 122.647759][ T7768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 122.672974][ T8088] tap0: tun_chr_ioctl cmd 1074025688 [ 122.678976][ T8094] netlink: 56 bytes leftover after parsing attributes in process `syz.2.501'. [ 123.037041][ T7768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.229604][ T8117] netlink: 24 bytes leftover after parsing attributes in process `syz.2.507'. [ 123.294227][ T7768] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.314921][ T8117] batadv_slave_1: entered promiscuous mode [ 123.341675][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'. [ 123.403327][ T7827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.429244][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.436489][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.475512][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.482719][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.510459][ T7827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.533813][ T7827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.554017][ T7827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.623352][ T8131] delete_channel: no stack [ 123.804648][ T8147] lo speed is unknown, defaulting to 1000 [ 123.913262][ T8157] netlink: 'syz.3.517': attribute type 1 has an invalid length. [ 123.930774][ T8147] lo speed is unknown, defaulting to 1000 [ 124.037858][ T8157] netlink: 'syz.3.517': attribute type 1 has an invalid length. [ 124.073973][ T8157] netlink: 'syz.3.517': attribute type 1 has an invalid length. [ 124.082797][ T8157] netlink: 'syz.3.517': attribute type 2 has an invalid length. [ 124.108219][ T8157] netlink: 76 bytes leftover after parsing attributes in process `syz.3.517'. [ 124.116329][ T7827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.324239][ T7827] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.363624][ T8166] ÿÿÿÿÿÿ: renamed from vlan1 [ 124.412317][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.419446][ T6047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.523325][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.530473][ T6047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.567771][ T7768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.755883][ T7768] veth0_vlan: entered promiscuous mode [ 124.797080][ T7768] veth1_vlan: entered promiscuous mode [ 124.943477][ T7768] veth0_macvtap: entered promiscuous mode [ 124.973153][ T7768] veth1_macvtap: entered promiscuous mode [ 125.028387][ T7768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.091045][ T7768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.111934][ T7768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.121866][ T7768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.132641][ T7768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.145179][ T7768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.184443][ T8203] netlink: 'syz.2.524': attribute type 10 has an invalid length. [ 125.185107][ T7827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.199027][ T8203] netlink: 40 bytes leftover after parsing attributes in process `syz.2.524'. [ 125.239372][ T7768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.277006][ T7768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.308577][ T7768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.326918][ T7768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.351074][ T8203] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 125.605111][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.526'. [ 125.621810][ T7827] veth0_vlan: entered promiscuous mode [ 125.677586][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.685506][ T7827] veth1_vlan: entered promiscuous mode [ 125.730496][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.810402][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.826130][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.898293][ T7827] veth0_macvtap: entered promiscuous mode [ 125.935337][ T7827] veth1_macvtap: entered promiscuous mode [ 126.005693][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.021266][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.025869][ T8239] xt_TPROXY: Can be used only with -p tcp or -p udp [ 126.040548][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.064088][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.087285][ T7827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.107097][ T8234] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 126.350054][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.371840][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.382976][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.396913][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.408911][ T7827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.480740][ T8239] lo speed is unknown, defaulting to 1000 [ 126.514695][ T7827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.541795][ T7827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.564204][ T7827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.601341][ T7827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.640081][ T8239] lo speed is unknown, defaulting to 1000 [ 126.806203][ T2920] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.019956][ T2920] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.108713][ T6047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.139791][ T6047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.363629][ T2920] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.460579][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 127.473494][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 127.484775][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 127.501550][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 127.513318][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 127.523401][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 127.583967][ T2920] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.638466][ T6040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.678926][ T8291] lo speed is unknown, defaulting to 1000 [ 127.681236][ T6040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.689562][ T8291] lo speed is unknown, defaulting to 1000 [ 127.927495][ T2920] bridge_slave_1: left allmulticast mode [ 127.955748][ T2920] bridge_slave_1: left promiscuous mode [ 127.997145][ T2920] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.020967][ T2920] bridge_slave_0: left allmulticast mode [ 128.026681][ T2920] bridge_slave_0: left promiscuous mode [ 128.042241][ T2920] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.888089][ T2920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.904665][ T2920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.918473][ T2920] bond0 (unregistering): Released all slaves [ 128.989013][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.538'. [ 129.125359][ T8336] netlink: 48 bytes leftover after parsing attributes in process `syz.3.543'. [ 129.161590][ T8336] netlink: 24 bytes leftover after parsing attributes in process `syz.3.543'. [ 129.227251][ T8291] chnl_net:caif_netlink_parms(): no params data found [ 129.573090][ T5848] Bluetooth: hci0: command tx timeout [ 129.586719][ T2920] hsr_slave_0: left promiscuous mode [ 129.599504][ T2920] hsr_slave_1: left promiscuous mode [ 129.608006][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.615975][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.631651][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.639136][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.671222][ T2920] veth1_macvtap: left promiscuous mode [ 129.676863][ T2920] veth0_macvtap: left promiscuous mode [ 129.691629][ T2920] veth1_vlan: left promiscuous mode [ 129.697020][ T2920] veth0_vlan: left promiscuous mode [ 130.166321][ T5158] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 130.184393][ T5158] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 130.210160][ T5158] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 130.221674][ T5158] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 130.238682][ T5158] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 130.248180][ T5158] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 130.503702][ T2920] team0 (unregistering): Port device team_slave_1 removed [ 130.549443][ T2920] team0 (unregistering): Port device team_slave_0 removed [ 131.042061][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.546'. [ 131.090978][ T8291] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.122080][ T8291] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.129352][ T8291] bridge_slave_0: entered allmulticast mode [ 131.187182][ T8291] bridge_slave_0: entered promiscuous mode [ 131.191342][ T8372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.548'. [ 131.197857][ T8291] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.209971][ T8291] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.217437][ T8291] bridge_slave_1: entered allmulticast mode [ 131.233511][ T8291] bridge_slave_1: entered promiscuous mode [ 131.271039][ T8372] netlink: 24 bytes leftover after parsing attributes in process `syz.2.548'. [ 131.398184][ T8291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.454524][ T8291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.464427][ T8367] lo speed is unknown, defaulting to 1000 [ 131.587637][ T8291] team0: Port device team_slave_0 added [ 131.633688][ T8291] team0: Port device team_slave_1 added [ 131.657170][ T5158] Bluetooth: hci0: command tx timeout [ 131.756458][ T8367] lo speed is unknown, defaulting to 1000 [ 131.806087][ T8291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.846153][ T8291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.919743][ T8291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.962091][ T8291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.969089][ T8291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.028669][ T8291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.120475][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 132.320896][ T5158] Bluetooth: hci1: command tx timeout [ 132.412113][ T8291] hsr_slave_0: entered promiscuous mode [ 132.450581][ T8291] hsr_slave_1: entered promiscuous mode [ 132.464134][ T8429] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 132.482493][ T8291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.501144][ T8291] Cannot create hsr debugfs directory [ 132.521472][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.564'. [ 132.536845][ T8428] xt_limit: Overflow, try lower: 262144/524288 [ 132.568400][ T2920] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.660474][ T8428] pim6reg1: entered allmulticast mode [ 132.720152][ T2920] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.813161][ T2920] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.865792][ T8367] chnl_net:caif_netlink_parms(): no params data found [ 133.018445][ T2920] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.407459][ T8367] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.417966][ T8472] netlink: 212412 bytes leftover after parsing attributes in process `syz.4.570'. [ 133.442418][ T8367] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.449728][ T8367] bridge_slave_0: entered allmulticast mode [ 133.466778][ T8367] bridge_slave_0: entered promiscuous mode [ 133.578787][ T8475] set match dimension is over the limit! [ 133.620365][ T8367] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.654085][ T8367] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.667921][ T8367] bridge_slave_1: entered allmulticast mode [ 133.691702][ T8367] bridge_slave_1: entered promiscuous mode [ 133.731740][ T5158] Bluetooth: hci0: command tx timeout [ 133.966617][ T8479] lo speed is unknown, defaulting to 1000 [ 134.148947][ T8367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.218656][ T8479] lo speed is unknown, defaulting to 1000 [ 134.221092][ T8367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.244256][ T2920] bridge_slave_1: left allmulticast mode [ 134.250446][ T2920] bridge_slave_1: left promiscuous mode [ 134.289216][ T2920] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.351784][ T2920] bridge_slave_0: left allmulticast mode [ 134.357670][ T2920] bridge_slave_0: left promiscuous mode [ 134.364983][ T2920] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.373275][ T5158] Bluetooth: hci1: command tx timeout [ 134.589222][ T8507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.580'. [ 134.886636][ T2920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.898330][ T2920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.909332][ T2920] bond0 (unregistering): Released all slaves [ 134.978521][ T8501] netlink: 60 bytes leftover after parsing attributes in process `syz.4.579'. [ 135.108747][ T8367] team0: Port device team_slave_0 added [ 135.124724][ T8367] team0: Port device team_slave_1 added [ 135.160331][ T8513] netlink: 'syz.4.581': attribute type 3 has an invalid length. [ 135.169017][ T8513] netlink: 666 bytes leftover after parsing attributes in process `syz.4.581'. [ 135.198633][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.582'. [ 135.212848][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.582'. [ 135.231476][ T8514] netlink: 1 bytes leftover after parsing attributes in process `syz.3.582'. [ 135.418727][ T8367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.435526][ T8367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.468906][ T8367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.520788][ T8367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.527823][ T8367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.554184][ T8367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.614359][ T2920] hsr_slave_0: left promiscuous mode [ 135.629569][ T2920] hsr_slave_1: left promiscuous mode [ 135.671053][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.701438][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.714203][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.732435][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.799071][ T2920] veth1_macvtap: left promiscuous mode [ 135.807086][ T2920] veth0_macvtap: left promiscuous mode [ 135.813034][ T5158] Bluetooth: hci0: command tx timeout [ 135.819453][ T2920] veth1_vlan: left promiscuous mode [ 135.825037][ T2920] veth0_vlan: left promiscuous mode [ 135.862320][ T8543] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 136.455135][ T5158] Bluetooth: hci1: command tx timeout [ 136.569917][ T2920] team0 (unregistering): Port device team_slave_1 removed [ 136.627524][ T2920] team0 (unregistering): Port device team_slave_0 removed [ 137.075663][ T8291] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 137.088753][ T8291] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 137.111501][ T8291] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 137.184541][ T8570] netlink: 72 bytes leftover after parsing attributes in process `syz.4.590'. [ 137.198151][ T8291] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 137.292648][ T8367] hsr_slave_0: entered promiscuous mode [ 137.344820][ T8367] hsr_slave_1: entered promiscuous mode [ 137.356152][ T8367] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.365491][ T8367] Cannot create hsr debugfs directory [ 137.641792][ T8582] netlink: 32 bytes leftover after parsing attributes in process `syz.4.594'. [ 137.896435][ T8291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.997297][ T8291] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.169906][ T185] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.177098][ T185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.296972][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.600'. [ 138.310210][ T185] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.317427][ T185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.530798][ T5158] Bluetooth: hci1: command tx timeout [ 138.575504][ T8630] netlink: 'syz.4.602': attribute type 7 has an invalid length. [ 138.758637][ T8291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.323570][ T8291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.333183][ T8367] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 139.501521][ T8367] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 139.601908][ T8367] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 139.649724][ T8367] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 139.788001][ T8291] veth0_vlan: entered promiscuous mode [ 139.881839][ T8367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.900474][ T8367] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.927625][ T2890] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.934908][ T2890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.982830][ T2890] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.990032][ T2890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.029563][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.613'. [ 140.106821][ T8367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 140.139911][ T8291] veth1_vlan: entered promiscuous mode [ 140.162465][ T8291] veth0_macvtap: entered promiscuous mode [ 140.173103][ T8291] veth1_macvtap: entered promiscuous mode [ 140.187570][ T8291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.198236][ T8291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.209281][ T8291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.219532][ T8291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.230237][ T8291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.241413][ T8291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.251366][ T8291] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.260115][ T8291] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.269111][ T8291] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.278582][ T8291] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.615906][ T185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.658021][ T185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.754337][ T2890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.799290][ T2890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.922137][ T8367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.064506][ T8729] lo speed is unknown, defaulting to 1000 [ 141.073772][ T8729] lo speed is unknown, defaulting to 1000 [ 141.088726][ T8367] veth0_vlan: entered promiscuous mode [ 141.195503][ T8367] veth1_vlan: entered promiscuous mode [ 141.273404][ T8739] veth1_to_hsr: entered promiscuous mode [ 141.297569][ T8739] veth1_to_hsr: entered allmulticast mode [ 141.311457][ T8746] xt_socket: unknown flags 0x8 [ 141.397926][ T8367] veth0_macvtap: entered promiscuous mode [ 141.463466][ T8367] veth1_macvtap: entered promiscuous mode [ 141.517186][ T8367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.565721][ T8367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.606581][ T8367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.630717][ T8367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.652734][ T8367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.737693][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.627'. [ 141.923449][ T8367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.950733][ T8367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.967729][ T8367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.978507][ T8367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.001824][ T8367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.112546][ T8367] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.124211][ T8367] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.133246][ T8367] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.142543][ T8367] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.262009][ T6047] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.281478][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.289369][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.342736][ T2890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.384965][ T2890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.444770][ T8773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.631'. [ 142.472253][ T6047] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.542651][ T8771] netlink: 'syz.4.631': attribute type 3 has an invalid length. [ 142.550359][ T8771] netlink: 32 bytes leftover after parsing attributes in process `syz.4.631'. [ 142.695822][ T6047] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.734730][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 142.745117][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 142.755622][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 142.772033][ T8783] netlink: 132 bytes leftover after parsing attributes in process `syz.3.633'. [ 142.798700][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 142.824206][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 142.833934][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 143.061063][ T6047] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.101637][ T8800] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 143.121921][ T8800] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 143.130468][ T8800] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 143.142275][ T8800] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 143.203794][ T8785] lo speed is unknown, defaulting to 1000 [ 143.237812][ T8785] lo speed is unknown, defaulting to 1000 [ 143.253213][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'. [ 143.293785][ T8809] ipvlan2: entered promiscuous mode [ 143.463687][ T6047] bridge_slave_1: left allmulticast mode [ 143.469393][ T6047] bridge_slave_1: left promiscuous mode [ 143.495414][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.516144][ T6047] bridge_slave_0: left allmulticast mode [ 143.529408][ T6047] bridge_slave_0: left promiscuous mode [ 143.551131][ T6047] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.235221][ T6047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.247405][ T6047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.257884][ T6047] bond0 (unregistering): Released all slaves [ 144.670360][ T8842] netlink: 14 bytes leftover after parsing attributes in process `syz.4.650'. [ 144.778006][ T5158] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.790388][ T5158] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.799098][ T5158] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.809508][ T5158] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.819456][ T5158] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 144.827092][ T5158] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 144.837620][ T8785] chnl_net:caif_netlink_parms(): no params data found [ 144.931617][ T5848] Bluetooth: hci0: command tx timeout [ 144.970210][ T8854] netlink: 24 bytes leftover after parsing attributes in process `syz.2.651'. [ 145.077637][ T8849] lo speed is unknown, defaulting to 1000 [ 145.190167][ T8866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.654'. [ 145.200750][ T8866] netlink: 24 bytes leftover after parsing attributes in process `syz.4.654'. [ 145.209640][ T8866] tc_dump_action: action bad kind [ 145.229337][ T8862] netlink: 'syz.2.653': attribute type 1 has an invalid length. [ 145.281396][ T8846] lo speed is unknown, defaulting to 1000 [ 145.282012][ T8785] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.311460][ T8785] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.326516][ T8867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.653'. [ 145.341524][ T8785] bridge_slave_0: entered allmulticast mode [ 145.348269][ T8785] bridge_slave_0: entered promiscuous mode [ 145.356191][ T8849] lo speed is unknown, defaulting to 1000 [ 145.357681][ T8785] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.377844][ T8871] netlink: 44 bytes leftover after parsing attributes in process `syz.2.653'. [ 145.378786][ T8785] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.406759][ T8785] bridge_slave_1: entered allmulticast mode [ 145.418894][ T8785] bridge_slave_1: entered promiscuous mode [ 145.540148][ T8846] lo speed is unknown, defaulting to 1000 [ 145.633086][ T8785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.656852][ T6047] hsr_slave_0: left promiscuous mode [ 145.704251][ T6047] hsr_slave_1: left promiscuous mode [ 145.721532][ T8850] xt_hashlimit: max too large, truncated to 1048576 [ 145.729465][ T6047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.746031][ T6047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.768697][ T6047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.779199][ T6047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.806340][ T6047] veth1_macvtap: left promiscuous mode [ 145.814497][ T6047] veth0_macvtap: left promiscuous mode [ 145.820143][ T6047] veth1_vlan: left promiscuous mode [ 145.827519][ T6047] veth0_vlan: left promiscuous mode [ 146.459492][ T6047] team0 (unregistering): Port device team_slave_1 removed [ 146.507362][ T6047] team0 (unregistering): Port device team_slave_0 removed [ 146.932923][ T5848] Bluetooth: hci1: command tx timeout [ 146.994719][ T8785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.011061][ T5848] Bluetooth: hci0: command tx timeout [ 147.123189][ T8785] team0: Port device team_slave_0 added [ 147.149639][ T8785] team0: Port device team_slave_1 added [ 147.169391][ T8908] geneve0: mtu less than device minimum [ 147.444752][ T8785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.470018][ T8785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.526945][ T8785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.569081][ T8785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.586458][ T8785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.641159][ T8785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.870135][ T8785] hsr_slave_0: entered promiscuous mode [ 147.885967][ T8785] hsr_slave_1: entered promiscuous mode [ 147.904802][ T8785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.913058][ T8785] Cannot create hsr debugfs directory [ 148.033102][ T8846] chnl_net:caif_netlink_parms(): no params data found [ 148.164159][ T6047] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.409765][ T6047] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.474166][ T8940] Â: renamed from pim6reg1 [ 148.672409][ T6047] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.882879][ T6047] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.973114][ T8846] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.981600][ T8846] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.988938][ T8846] bridge_slave_0: entered allmulticast mode [ 148.998017][ T8846] bridge_slave_0: entered promiscuous mode [ 149.005972][ T8976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.671'. [ 149.006365][ T8846] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.022513][ T5848] Bluetooth: hci1: command tx timeout [ 149.027966][ T8846] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.035419][ T8846] bridge_slave_1: entered allmulticast mode [ 149.043237][ T8846] bridge_slave_1: entered promiscuous mode [ 149.094746][ T5848] Bluetooth: hci0: command tx timeout [ 149.184037][ T8846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.196542][ T8846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.313345][ T8846] team0: Port device team_slave_0 added [ 149.351950][ T8846] team0: Port device team_slave_1 added [ 149.468493][ T8846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.476117][ T8846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.506363][ T8846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.595522][ T8846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.614662][ T8846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.656483][ T8846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.679025][ T8996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.678'. [ 149.710858][ T8998] Bluetooth: MGMT ver 1.23 [ 149.718493][ T6047] bridge_slave_1: left allmulticast mode [ 149.731036][ T6047] bridge_slave_1: left promiscuous mode [ 149.737416][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.799873][ T9002] netlink: 'syz.3.681': attribute type 4 has an invalid length. [ 149.852419][ T6047] bridge_slave_0: left allmulticast mode [ 149.858227][ T6047] bridge_slave_0: left promiscuous mode [ 149.864832][ T6047] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.902451][ T9008] netlink: 'syz.3.681': attribute type 4 has an invalid length. [ 150.640818][ T6047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.653862][ T6047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.664652][ T6047] bond0 (unregistering): Released all slaves [ 150.768015][ T5894] lo speed is unknown, defaulting to 1000 [ 150.889821][ T9019] netlink: 'syz.4.684': attribute type 21 has an invalid length. [ 150.910144][ T9019] netlink: 132 bytes leftover after parsing attributes in process `syz.4.684'. [ 151.047284][ T8846] hsr_slave_0: entered promiscuous mode [ 151.091015][ T5158] Bluetooth: hci1: command tx timeout [ 151.106959][ T8846] hsr_slave_1: entered promiscuous mode [ 151.122273][ T8846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.142991][ T8846] Cannot create hsr debugfs directory [ 151.178313][ T5158] Bluetooth: hci0: command tx timeout [ 151.210488][ T969] lo speed is unknown, defaulting to 1000 [ 151.671300][ T6047] hsr_slave_0: left promiscuous mode [ 151.694926][ T6047] hsr_slave_1: left promiscuous mode [ 151.728026][ T6047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.735874][ T5848] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 151.750979][ T6047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.763598][ T6047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.772097][ T6047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.809537][ T6047] veth1_macvtap: left promiscuous mode [ 151.838020][ T6047] veth0_macvtap: left promiscuous mode [ 151.846797][ T6047] veth1_vlan: left promiscuous mode [ 151.871503][ T6047] veth0_vlan: left promiscuous mode [ 151.926968][ T9071] netlink: 'syz.2.695': attribute type 1 has an invalid length. [ 152.527888][ T6047] team0 (unregistering): Port device team_slave_1 removed [ 152.575457][ T6047] team0 (unregistering): Port device team_slave_0 removed [ 153.074542][ T9071] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 153.159983][ T8785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 153.175622][ T5848] Bluetooth: hci1: command tx timeout [ 153.233381][ T9091] netlink: 28 bytes leftover after parsing attributes in process `syz.4.701'. [ 153.261083][ T5848] Bluetooth: hci0: command 0x0401 tx timeout [ 153.280409][ T8785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 153.350535][ T8785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 153.441145][ T8785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 153.746415][ T9110] dvmrp8: entered allmulticast mode [ 153.758411][ T9103] netlink: 'syz.4.706': attribute type 66 has an invalid length. [ 153.885173][ T9115] netlink: 'syz.3.708': attribute type 10 has an invalid length. [ 154.006278][ T9115] team0: Device veth0_macvtap is of different type [ 154.096888][ T8785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.117355][ T9119] lo speed is unknown, defaulting to 1000 [ 154.157039][ T8785] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.173866][ T9119] lo speed is unknown, defaulting to 1000 [ 154.219926][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.227185][ T6047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.248641][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.255893][ T6047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.379974][ T8785] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 154.396101][ T9128] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.710'. [ 154.418254][ T8785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.622773][ T8846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 154.695427][ T8846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 154.768071][ T8846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 154.841612][ T8846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 155.068640][ T8785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.415016][ T8846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.432893][ T8785] veth0_vlan: entered promiscuous mode [ 155.489122][ T8785] veth1_vlan: entered promiscuous mode [ 155.543498][ T8846] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.606750][ T9171] netlink: 80 bytes leftover after parsing attributes in process `syz.3.721'. [ 155.622398][ T9174] netlink: 'syz.4.722': attribute type 14 has an invalid length. [ 155.645260][ T9171] netlink: 'syz.3.721': attribute type 10 has an invalid length. [ 155.657879][ T2920] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.665108][ T2920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.702447][ T8785] veth0_macvtap: entered promiscuous mode [ 155.751942][ T2920] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.759143][ T2920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.773049][ T9171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.721'. [ 155.789831][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.724'. [ 155.811401][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.721'. [ 155.833382][ T8785] veth1_macvtap: entered promiscuous mode [ 155.897815][ T9182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.018511][ T9184] hsr0: entered promiscuous mode [ 156.025174][ T9184] macvlan2: entered allmulticast mode [ 156.039670][ T9184] hsr0: entered allmulticast mode [ 156.067271][ T9184] hsr_slave_0: entered allmulticast mode [ 156.081758][ T9184] hsr_slave_1: entered allmulticast mode [ 156.111860][ T9184] hsr0: left allmulticast mode [ 156.117216][ T9184] hsr_slave_0: left allmulticast mode [ 156.132477][ T9184] hsr_slave_1: left allmulticast mode [ 156.279187][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.318432][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.339958][ T8785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.385477][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.409307][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.432104][ T8785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.482458][ T8785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.519800][ T8785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.550293][ T8785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.576115][ T8785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.841440][ T9222] syzkaller0: entered promiscuous mode [ 156.857327][ T9222] syzkaller0: entered allmulticast mode [ 156.879633][ T2920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.907096][ T2920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.067230][ T8846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.116706][ T6043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.155685][ T6043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.196945][ T9237] netlink: 'syz.2.735': attribute type 1 has an invalid length. [ 157.225541][ T8846] veth0_vlan: entered promiscuous mode [ 157.278771][ T9237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.735'. [ 157.285522][ T8846] veth1_vlan: entered promiscuous mode [ 157.437654][ T8846] veth0_macvtap: entered promiscuous mode [ 157.446953][ T8846] veth1_macvtap: entered promiscuous mode [ 157.461908][ T8846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.472525][ T8846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.482880][ T8846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.493635][ T8846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.505164][ T8846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.518514][ T8846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.530311][ T8846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.540255][ T8846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.550741][ T8846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.561863][ T8846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.571934][ T8846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.581016][ T8846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.590098][ T8846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.599209][ T8846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.751745][ T6043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.799620][ T6043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.824971][ T185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.881509][ T185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.071048][ T9262] netlink: 16 bytes leftover after parsing attributes in process `syz.2.738'. [ 158.253422][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.494498][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.627608][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.722603][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.926110][ T12] bridge_slave_1: left allmulticast mode [ 158.942314][ T12] bridge_slave_1: left promiscuous mode [ 158.948113][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.004945][ T12] bridge_slave_0: left allmulticast mode [ 159.013142][ T12] bridge_slave_0: left promiscuous mode [ 159.019807][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.229308][ T5158] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.240570][ T5158] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.258577][ T5158] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.277424][ T5158] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.292472][ T5158] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 159.300556][ T5158] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 159.519331][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.535638][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.546104][ T12] bond0 (unregistering): Released all slaves [ 159.589050][ T9290] lo speed is unknown, defaulting to 1000 [ 159.632537][ T9290] lo speed is unknown, defaulting to 1000 [ 160.279149][ T9332] netlink: 'syz.3.751': attribute type 1 has an invalid length. [ 160.316798][ T12] hsr_slave_0: left promiscuous mode [ 160.333381][ T12] hsr_slave_1: left promiscuous mode [ 160.378005][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 160.388108][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.397452][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 160.408130][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 160.421447][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 160.429531][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.440157][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 160.448656][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 160.531696][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.560804][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.595973][ T12] veth1_macvtap: left promiscuous mode [ 160.612839][ T12] veth0_macvtap: left promiscuous mode [ 160.638611][ T12] veth1_vlan: left promiscuous mode [ 160.654413][ T12] veth0_vlan: left promiscuous mode [ 161.411946][ T5158] Bluetooth: hci0: command tx timeout [ 161.635402][ T12] team0 (unregistering): Port device team_slave_1 removed [ 161.693501][ T12] team0 (unregistering): Port device team_slave_0 removed [ 162.118812][ T9290] chnl_net:caif_netlink_parms(): no params data found [ 162.127665][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.753'. [ 162.217834][ T9335] lo speed is unknown, defaulting to 1000 [ 162.275680][ T9335] lo speed is unknown, defaulting to 1000 [ 162.323835][ T9392] FAULT_INJECTION: forcing a failure. [ 162.323835][ T9392] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 162.351178][ T9392] CPU: 1 UID: 0 PID: 9392 Comm: syz.2.759 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 162.361827][ T9392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 162.371945][ T9392] Call Trace: [ 162.375248][ T9392] [ 162.378198][ T9392] dump_stack_lvl+0x241/0x360 [ 162.382933][ T9392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.388188][ T9392] ? __pfx__printk+0x10/0x10 [ 162.392803][ T9392] ? __pfx_lock_release+0x10/0x10 [ 162.397873][ T9392] should_fail_ex+0x3b0/0x4e0 [ 162.402582][ T9392] _copy_from_user+0x2f/0xc0 [ 162.407200][ T9392] copy_msghdr_from_user+0xae/0x680 [ 162.412418][ T9392] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 162.418267][ T9392] __sys_sendmsg+0x22d/0x380 [ 162.423056][ T9392] ? __pfx___sys_sendmsg+0x10/0x10 [ 162.428225][ T9392] ? __pfx_vfs_write+0x10/0x10 [ 162.433050][ T9392] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 162.439400][ T9392] ? do_syscall_64+0x100/0x230 [ 162.444202][ T9392] ? do_syscall_64+0xb6/0x230 [ 162.448880][ T9392] do_syscall_64+0xf3/0x230 [ 162.453396][ T9392] ? clear_bhb_loop+0x35/0x90 [ 162.458097][ T9392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.464034][ T9392] RIP: 0033:0x7f567d37e719 [ 162.468481][ T9392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.488129][ T9392] RSP: 002b:00007f567e094038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.496603][ T9392] RAX: ffffffffffffffda RBX: 00007f567d535f80 RCX: 00007f567d37e719 [ 162.504608][ T9392] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000004 [ 162.512705][ T9392] RBP: 00007f567e094090 R08: 0000000000000000 R09: 0000000000000000 [ 162.520711][ T9392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.528712][ T9392] R13: 0000000000000000 R14: 00007f567d535f80 R15: 00007fffd66cf9f8 [ 162.536745][ T9392] [ 162.547057][ T5158] Bluetooth: hci1: command tx timeout [ 162.638348][ T9290] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.655912][ T9290] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.667956][ T9290] bridge_slave_0: entered allmulticast mode [ 162.677037][ T9401] sctp: [Deprecated]: syz.2.761 (pid 9401) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.677037][ T9401] Use struct sctp_sack_info instead [ 162.683288][ T9290] bridge_slave_0: entered promiscuous mode [ 162.741701][ T9290] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.779347][ T9290] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.799880][ T9290] bridge_slave_1: entered allmulticast mode [ 162.822986][ T9290] bridge_slave_1: entered promiscuous mode [ 162.980232][ T9290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.069995][ T9290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.283064][ T9290] team0: Port device team_slave_0 added [ 163.388734][ T9290] team0: Port device team_slave_1 added [ 163.467681][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.769'. [ 163.490766][ T5158] Bluetooth: hci0: command tx timeout [ 163.513863][ T9447] FAULT_INJECTION: forcing a failure. [ 163.513863][ T9447] name failslab, interval 1, probability 0, space 0, times 1 [ 163.558157][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.569009][ T9447] CPU: 0 UID: 0 PID: 9447 Comm: syz.4.771 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 163.579640][ T9447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 163.589764][ T9447] Call Trace: [ 163.593043][ T9447] [ 163.595973][ T9447] dump_stack_lvl+0x241/0x360 [ 163.600661][ T9447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.605872][ T9447] ? __pfx__printk+0x10/0x10 [ 163.610481][ T9447] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 163.616481][ T9447] ? __pfx___might_resched+0x10/0x10 [ 163.621788][ T9447] ? aa_label_sk_perm+0x4f3/0x6c0 [ 163.626931][ T9447] should_fail_ex+0x3b0/0x4e0 [ 163.631639][ T9447] should_failslab+0xac/0x100 [ 163.636326][ T9447] ? __alloc_skb+0x1c3/0x440 [ 163.640939][ T9447] kmem_cache_alloc_node_noprof+0x71/0x320 [ 163.646777][ T9447] __alloc_skb+0x1c3/0x440 [ 163.651198][ T9447] ? __pfx___alloc_skb+0x10/0x10 [ 163.656156][ T9447] netlink_sendmsg+0x638/0xcb0 [ 163.660952][ T9447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.666238][ T9447] ? aa_sock_msg_perm+0x91/0x160 [ 163.671218][ T9447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.676546][ T9447] __sock_sendmsg+0x221/0x270 [ 163.681256][ T9447] ____sys_sendmsg+0x52a/0x7e0 [ 163.686050][ T9447] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.691348][ T9447] __sys_sendmsg+0x292/0x380 [ 163.695959][ T9447] ? __pfx___sys_sendmsg+0x10/0x10 [ 163.701132][ T9447] ? __pfx_vfs_write+0x10/0x10 [ 163.705904][ T9447] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 163.712595][ T9447] ? do_syscall_64+0x100/0x230 [ 163.717367][ T9447] ? do_syscall_64+0xb6/0x230 [ 163.722066][ T9447] do_syscall_64+0xf3/0x230 [ 163.726607][ T9447] ? clear_bhb_loop+0x35/0x90 [ 163.731312][ T9447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.737211][ T9447] RIP: 0033:0x7f3ccd57e719 [ 163.741624][ T9447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.761316][ T9447] RSP: 002b:00007f3cce328038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.769736][ T9447] RAX: ffffffffffffffda RBX: 00007f3ccd735f80 RCX: 00007f3ccd57e719 [ 163.777713][ T9447] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000004 [ 163.785719][ T9447] RBP: 00007f3cce328090 R08: 0000000000000000 R09: 0000000000000000 [ 163.793735][ T9447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.801705][ T9447] R13: 0000000000000000 R14: 00007f3ccd735f80 R15: 00007ffe0caf67f8 [ 163.809731][ T9447] [ 163.882911][ T9290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.889919][ T9290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.928669][ T9290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.964971][ T9454] netlink: 16 bytes leftover after parsing attributes in process `syz.4.773'. [ 164.041933][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.059925][ T9290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.073208][ T9290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.124470][ T9290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.149542][ T9335] chnl_net:caif_netlink_parms(): no params data found [ 164.182283][ T9465] hsr0: entered promiscuous mode [ 164.190162][ T9465] bond0: (slave macsec1): Enslaving as an active interface with an up link [ 164.223034][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.472238][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.612446][ T5158] Bluetooth: hci1: command tx timeout [ 164.622907][ T9489] netlink: 'syz.2.779': attribute type 23 has an invalid length. [ 164.630895][ T9290] hsr_slave_0: entered promiscuous mode [ 164.637949][ T9290] hsr_slave_1: entered promiscuous mode [ 164.670735][ T9290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.673186][ T9489] netlink: 'syz.2.779': attribute type 11 has an invalid length. [ 164.678334][ T9290] Cannot create hsr debugfs directory [ 164.705467][ T9483] lo speed is unknown, defaulting to 1000 [ 164.747026][ T9487] netlink: 'syz.2.779': attribute type 7 has an invalid length. [ 164.766209][ T9489] netlink: 224 bytes leftover after parsing attributes in process `syz.2.779'. [ 164.908450][ T9483] lo speed is unknown, defaulting to 1000 [ 165.144742][ T12] bridge_slave_1: left allmulticast mode [ 165.154722][ T12] bridge_slave_1: left promiscuous mode [ 165.160663][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.233864][ T12] bridge_slave_0: left allmulticast mode [ 165.239607][ T12] bridge_slave_0: left promiscuous mode [ 165.245583][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.572623][ T5158] Bluetooth: hci0: command tx timeout [ 165.703415][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.782'. [ 165.761034][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.782'. [ 165.772746][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.784355][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.785022][ T9514] netlink: 32 bytes leftover after parsing attributes in process `syz.4.782'. [ 165.805961][ T12] bond0 (unregistering): Released all slaves [ 165.848328][ T5158] block nbd0: Receive control failed (result -107) [ 165.907005][ T9514] nbd0: detected capacity change from 0 to 256 [ 165.931608][ T9335] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.938826][ T9335] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.946688][ T9335] bridge_slave_0: entered allmulticast mode [ 165.954773][ T6924] block nbd0: Dead connection, failed to find a fallback [ 165.957543][ T9335] bridge_slave_0: entered promiscuous mode [ 165.970556][ T6924] block nbd0: shutting down sockets [ 165.989196][ T9335] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.000834][ T9335] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.026063][ T6924] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.038069][ T9335] bridge_slave_1: entered allmulticast mode [ 166.062919][ T9335] bridge_slave_1: entered promiscuous mode [ 166.077984][ T6924] Buffer I/O error on dev nbd0, logical block 0, async page read [ 166.111666][ T6924] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.128086][ T6924] Buffer I/O error on dev nbd0, logical block 0, async page read [ 166.139451][ T6924] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.149911][ T6924] Buffer I/O error on dev nbd0, logical block 0, async page read [ 166.157971][ T6924] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.167530][ T6924] Buffer I/O error on dev nbd0, logical block 0, async page read [ 166.176180][ T6924] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.186130][ T6924] Buffer I/O error on dev nbd0, logical block 0, async page read [ 166.194305][ T6924] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.203767][ T6924] Buffer I/O error on dev nbd0, logical block 0, async page read [ 166.211931][ T6924] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.221273][ T6924] Buffer I/O error on dev nbd0, logical block 0, async page read [ 166.240555][ T6924] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.250943][ T6924] Buffer I/O error on dev nbd0, logical block 0, async page read [ 166.259218][ T6924] ldm_validate_partition_table(): Disk read failed. [ 166.288707][ T6924] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.298791][ T6924] Buffer I/O error on dev nbd0, logical block 0, async page read [ 166.309503][ T6924] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.318972][ T6924] Buffer I/O error on dev nbd0, logical block 0, async page read [ 166.327389][ T6924] Dev nbd0: unable to read RDB block 0 [ 166.334346][ T6924] nbd0: unable to read partition table [ 166.345820][ T6924] ldm_validate_partition_table(): Disk read failed. [ 166.363628][ T6924] Dev nbd0: unable to read RDB block 0 [ 166.385681][ T9335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.417951][ T6924] nbd0: unable to read partition table [ 166.502657][ T9335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.692255][ T5158] Bluetooth: hci1: command tx timeout [ 166.731099][ T9528] netlink: 830 bytes leftover after parsing attributes in process `syz.2.787'. [ 166.788480][ T12] hsr_slave_0: left promiscuous mode [ 166.807679][ T12] hsr_slave_1: left promiscuous mode [ 166.820584][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.833388][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.846662][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.860214][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.915901][ T12] veth1_macvtap: left promiscuous mode [ 166.922043][ T12] veth0_macvtap: left promiscuous mode [ 166.928172][ T12] veth1_vlan: left promiscuous mode [ 166.951659][ T12] veth0_vlan: left promiscuous mode [ 167.186392][ T9557] Cannot find add_set index 0 as target [ 167.545791][ T12] team0 (unregistering): Port device team_slave_1 removed [ 167.596016][ T12] team0 (unregistering): Port device team_slave_0 removed [ 167.660983][ T5158] Bluetooth: hci0: command tx timeout [ 168.185866][ T9561] tipc: Enabled bearer , priority 0 [ 168.256529][ T9562] tipc: Resetting bearer [ 168.275501][ T9335] team0: Port device team_slave_0 added [ 168.313042][ T9335] team0: Port device team_slave_1 added [ 168.499125][ T9559] tipc: Resetting bearer [ 168.781612][ T5158] Bluetooth: hci1: command tx timeout [ 171.010334][ T9559] tipc: Disabling bearer [ 171.019966][ T9335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.037742][ T9335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.084318][ T9335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.098655][ T9335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.106656][ T9335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.147943][ T9588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'. [ 171.157074][ T9335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.299357][ T9588] bridge_slave_1: left promiscuous mode [ 171.308798][ T9588] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.352664][ T9588] bridge_slave_0: left promiscuous mode [ 171.358535][ T9588] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.434523][ T9597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.800'. [ 171.584096][ T9335] hsr_slave_0: entered promiscuous mode [ 171.632448][ T9335] hsr_slave_1: entered promiscuous mode [ 171.665969][ T9335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.679435][ T9335] Cannot create hsr debugfs directory [ 171.775642][ T9614] sit0: entered promiscuous mode [ 171.795557][ T9614] netlink: 'syz.2.805': attribute type 1 has an invalid length. [ 171.810072][ T9614] netlink: 1 bytes leftover after parsing attributes in process `syz.2.805'. [ 171.865795][ T9290] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 171.941141][ T9290] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 171.982111][ T9290] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 172.004025][ T9614] rdma_rxe: rxe_newlink: failed to add lo [ 172.018387][ T9290] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 172.261754][ T9631] FAULT_INJECTION: forcing a failure. [ 172.261754][ T9631] name failslab, interval 1, probability 0, space 0, times 0 [ 172.301087][ T9631] CPU: 0 UID: 0 PID: 9631 Comm: syz.2.810 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 172.311753][ T9631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 172.321841][ T9631] Call Trace: [ 172.325154][ T9631] [ 172.328126][ T9631] dump_stack_lvl+0x241/0x360 [ 172.332847][ T9631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.338081][ T9631] ? __pfx__printk+0x10/0x10 [ 172.342698][ T9631] ? __kmalloc_noprof+0xb0/0x400 [ 172.347675][ T9631] ? __pfx___might_resched+0x10/0x10 [ 172.353001][ T9631] should_fail_ex+0x3b0/0x4e0 [ 172.357718][ T9631] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 172.363996][ T9631] should_failslab+0xac/0x100 [ 172.368724][ T9631] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 172.375096][ T9631] __kmalloc_noprof+0xd8/0x400 [ 172.379918][ T9631] ? apparmor_capable+0x13b/0x1b0 [ 172.384991][ T9631] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 172.391109][ T9631] genl_rcv_msg+0x802/0xec0 [ 172.395750][ T9631] ? __pfx_genl_rcv_msg+0x10/0x10 [ 172.400844][ T9631] ? __pfx_lock_acquire+0x10/0x10 [ 172.405966][ T9631] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 172.412176][ T9631] ? __pfx___might_resched+0x10/0x10 [ 172.417518][ T9631] netlink_rcv_skb+0x1e3/0x430 [ 172.422331][ T9631] ? __pfx_genl_rcv_msg+0x10/0x10 [ 172.427399][ T9631] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 172.432755][ T9631] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 172.438257][ T9631] genl_rcv+0x28/0x40 [ 172.442268][ T9631] netlink_unicast+0x7f6/0x990 [ 172.447064][ T9631] ? __pfx_netlink_unicast+0x10/0x10 [ 172.452364][ T9631] ? __virt_addr_valid+0x183/0x530 [ 172.457481][ T9631] ? __check_object_size+0x48e/0x900 [ 172.462779][ T9631] netlink_sendmsg+0x8e4/0xcb0 [ 172.467589][ T9631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.472914][ T9631] ? aa_sock_msg_perm+0x91/0x160 [ 172.477869][ T9631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.483165][ T9631] __sock_sendmsg+0x221/0x270 [ 172.487857][ T9631] ____sys_sendmsg+0x52a/0x7e0 [ 172.492636][ T9631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.497938][ T9631] __sys_sendmsg+0x292/0x380 [ 172.502544][ T9631] ? __pfx___sys_sendmsg+0x10/0x10 [ 172.507676][ T9631] ? __pfx_vfs_write+0x10/0x10 [ 172.512479][ T9631] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 172.518818][ T9631] ? do_syscall_64+0x100/0x230 [ 172.523605][ T9631] ? do_syscall_64+0xb6/0x230 [ 172.528294][ T9631] do_syscall_64+0xf3/0x230 [ 172.532802][ T9631] ? clear_bhb_loop+0x35/0x90 [ 172.537490][ T9631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.543561][ T9631] RIP: 0033:0x7f567d37e719 [ 172.547984][ T9631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.567598][ T9631] RSP: 002b:00007f567e094038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.576105][ T9631] RAX: ffffffffffffffda RBX: 00007f567d535f80 RCX: 00007f567d37e719 [ 172.584079][ T9631] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000004 [ 172.592048][ T9631] RBP: 00007f567e094090 R08: 0000000000000000 R09: 0000000000000000 [ 172.600108][ T9631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.608082][ T9631] R13: 0000000000000000 R14: 00007f567d535f80 R15: 00007fffd66cf9f8 [ 172.616071][ T9631] [ 172.847692][ T9290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.857953][ T9651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.815'. [ 172.880533][ T9655] netlink: 20 bytes leftover after parsing attributes in process `syz.2.816'. [ 172.903550][ T9651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.985449][ T9290] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.033975][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.041197][ T6047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.060354][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.067626][ T6047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.417099][ T9686] netlink: 24 bytes leftover after parsing attributes in process `syz.4.822'. [ 173.575597][ T9335] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 173.645626][ T9335] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 173.714369][ T9335] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 173.751757][ T9335] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.801900][ T9290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.928318][ T9335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.965980][ T9335] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.995916][ T185] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.003277][ T185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.042476][ T9290] veth0_vlan: entered promiscuous mode [ 174.055564][ T9715] FAULT_INJECTION: forcing a failure. [ 174.055564][ T9715] name failslab, interval 1, probability 0, space 0, times 0 [ 174.069043][ T9290] veth1_vlan: entered promiscuous mode [ 174.069221][ T9715] CPU: 1 UID: 0 PID: 9715 Comm: syz.2.826 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 174.085175][ T9715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 174.095411][ T9715] Call Trace: [ 174.098701][ T9715] [ 174.101673][ T9715] dump_stack_lvl+0x241/0x360 [ 174.106373][ T9715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.111589][ T9715] ? __pfx__printk+0x10/0x10 [ 174.116200][ T9715] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 174.121675][ T9715] ? __pfx___might_resched+0x10/0x10 [ 174.126993][ T9715] should_fail_ex+0x3b0/0x4e0 [ 174.131686][ T9715] should_failslab+0xac/0x100 [ 174.136373][ T9715] ? l2tp_tunnel_create+0x92/0x400 [ 174.141494][ T9715] __kmalloc_cache_noprof+0x6c/0x2c0 [ 174.146795][ T9715] l2tp_tunnel_create+0x92/0x400 [ 174.151743][ T9715] l2tp_nl_cmd_tunnel_create+0x6b1/0xb60 [ 174.157386][ T9715] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 174.163542][ T9715] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 174.169793][ T9715] ? __nla_parse+0x40/0x60 [ 174.174224][ T9715] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 174.180568][ T9715] genl_rcv_msg+0xb14/0xec0 [ 174.185086][ T9715] ? __pfx_genl_rcv_msg+0x10/0x10 [ 174.190136][ T9715] ? __pfx_lock_acquire+0x10/0x10 [ 174.195192][ T9715] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 174.201377][ T9715] ? __pfx___might_resched+0x10/0x10 [ 174.206706][ T9715] netlink_rcv_skb+0x1e3/0x430 [ 174.211491][ T9715] ? __pfx_genl_rcv_msg+0x10/0x10 [ 174.216519][ T9715] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 174.221823][ T9715] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 174.227298][ T9715] genl_rcv+0x28/0x40 [ 174.231283][ T9715] netlink_unicast+0x7f6/0x990 [ 174.236059][ T9715] ? __pfx_netlink_unicast+0x10/0x10 [ 174.241347][ T9715] ? __virt_addr_valid+0x183/0x530 [ 174.246468][ T9715] ? __check_object_size+0x48e/0x900 [ 174.251764][ T9715] netlink_sendmsg+0x8e4/0xcb0 [ 174.256573][ T9715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.261881][ T9715] ? aa_sock_msg_perm+0x91/0x160 [ 174.266834][ T9715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.272130][ T9715] __sock_sendmsg+0x221/0x270 [ 174.276818][ T9715] ____sys_sendmsg+0x52a/0x7e0 [ 174.281596][ T9715] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.286898][ T9715] __sys_sendmsg+0x292/0x380 [ 174.291499][ T9715] ? __pfx___sys_sendmsg+0x10/0x10 [ 174.296627][ T9715] ? __pfx_vfs_write+0x10/0x10 [ 174.301414][ T9715] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 174.307760][ T9715] ? do_syscall_64+0x100/0x230 [ 174.312532][ T9715] ? do_syscall_64+0xb6/0x230 [ 174.317210][ T9715] do_syscall_64+0xf3/0x230 [ 174.321718][ T9715] ? clear_bhb_loop+0x35/0x90 [ 174.326400][ T9715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.332382][ T9715] RIP: 0033:0x7f567d37e719 [ 174.336799][ T9715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.356501][ T9715] RSP: 002b:00007f567e094038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.364932][ T9715] RAX: ffffffffffffffda RBX: 00007f567d535f80 RCX: 00007f567d37e719 [ 174.372912][ T9715] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000004 [ 174.380904][ T9715] RBP: 00007f567e094090 R08: 0000000000000000 R09: 0000000000000000 [ 174.388885][ T9715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.396954][ T9715] R13: 0000000000000000 R14: 00007f567d535f80 R15: 00007fffd66cf9f8 [ 174.404947][ T9715] [ 174.427952][ T6043] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.435198][ T6043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.504149][ T9290] veth0_macvtap: entered promiscuous mode [ 174.512553][ T9290] veth1_macvtap: entered promiscuous mode [ 174.525310][ T9290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.536038][ T9290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.547946][ T9290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.557809][ T9290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.568446][ T9290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.579470][ T9290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.589437][ T9290] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.598243][ T9290] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.607107][ T9290] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.616336][ T9290] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.978422][ T185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.000473][ T185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.060348][ T185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.082875][ T185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.370850][ T9752] netlink: 'syz.2.835': attribute type 3 has an invalid length. [ 175.373913][ T9335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.389430][ T9754] netlink: 'syz.3.836': attribute type 4 has an invalid length. [ 175.427103][ T5896] lo speed is unknown, defaulting to 1000 [ 175.436786][ T9754] netlink: 'syz.3.836': attribute type 4 has an invalid length. [ 175.483249][ T5941] lo speed is unknown, defaulting to 1000 [ 175.521075][ T9335] veth0_vlan: entered promiscuous mode [ 175.558314][ T9335] veth1_vlan: entered promiscuous mode [ 175.699885][ T9335] veth0_macvtap: entered promiscuous mode [ 175.726485][ T9335] veth1_macvtap: entered promiscuous mode [ 175.789692][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.827620][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.867271][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.889787][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.923723][ T9335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.027241][ T2890] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.068082][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.081888][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.101324][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.121002][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.142018][ T9335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.173009][ T9335] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.187402][ T9335] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.197352][ T9335] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.207222][ T9335] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.257732][ T2890] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.375889][ T2890] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.489478][ T2890] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.526396][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.551222][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.606173][ T6047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.634207][ T6047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.872279][ T2890] bridge_slave_1: left allmulticast mode [ 176.877995][ T2890] bridge_slave_1: left promiscuous mode [ 176.891566][ T9803] FAULT_INJECTION: forcing a failure. [ 176.891566][ T9803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.921026][ T2890] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.936989][ T9803] CPU: 0 UID: 0 PID: 9803 Comm: syz.3.841 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 176.947737][ T9803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 176.957831][ T9803] Call Trace: [ 176.961156][ T9803] [ 176.964131][ T9803] dump_stack_lvl+0x241/0x360 [ 176.968863][ T9803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.974111][ T9803] ? __pfx__printk+0x10/0x10 [ 176.978742][ T9803] ? __pfx_lock_release+0x10/0x10 [ 176.983815][ T9803] should_fail_ex+0x3b0/0x4e0 [ 176.988537][ T9803] _copy_from_user+0x2f/0xc0 [ 176.993177][ T9803] __se_sys_sendfile64+0xcd/0x1e0 [ 176.998424][ T9803] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 177.004141][ T9803] ? do_syscall_64+0x100/0x230 [ 177.008959][ T9803] ? do_syscall_64+0xb6/0x230 [ 177.013684][ T9803] do_syscall_64+0xf3/0x230 [ 177.018225][ T9803] ? clear_bhb_loop+0x35/0x90 [ 177.022946][ T9803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.028873][ T9803] RIP: 0033:0x7f32a977e719 [ 177.033318][ T9803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.052966][ T9803] RSP: 002b:00007f32aa598038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 177.061433][ T9803] RAX: ffffffffffffffda RBX: 00007f32a9935f80 RCX: 00007f32a977e719 [ 177.069445][ T9803] RDX: 00000000200002c0 RSI: 0000000000000005 RDI: 0000000000000005 [ 177.077454][ T9803] RBP: 00007f32aa598090 R08: 0000000000000000 R09: 0000000000000000 [ 177.085450][ T9803] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 177.093448][ T9803] R13: 0000000000000000 R14: 00007f32a9935f80 R15: 00007ffdb34bdc98 [ 177.101444][ T9803] [ 177.121379][ T2890] bridge_slave_0: left allmulticast mode [ 177.127114][ T2890] bridge_slave_0: left promiscuous mode [ 177.141040][ T2890] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.248978][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.262499][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.272687][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.282087][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.290077][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 177.297840][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.386273][ T9823] netlink: 20 bytes leftover after parsing attributes in process `syz.2.843'. [ 177.491543][ T54] Bluetooth: hci1: command 0x0405 tx timeout [ 178.054839][ T2890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.069658][ T2890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.080727][ T2890] bond0 (unregistering): Released all slaves [ 178.153478][ T9819] wg2: left promiscuous mode [ 178.281048][ T9813] lo speed is unknown, defaulting to 1000 [ 178.288380][ T9827] lo speed is unknown, defaulting to 1000 [ 178.289205][ T9813] lo speed is unknown, defaulting to 1000 [ 178.396149][ T9827] lo speed is unknown, defaulting to 1000 [ 178.743949][ T2890] hsr_slave_0: left promiscuous mode [ 178.760269][ T2890] hsr_slave_1: left promiscuous mode [ 178.767440][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.786483][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.799696][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.816459][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.864876][ T2890] veth1_macvtap: left promiscuous mode [ 178.870510][ T2890] veth0_macvtap: left promiscuous mode [ 178.883240][ T2890] veth1_vlan: left promiscuous mode [ 178.896242][ T2890] veth0_vlan: left promiscuous mode [ 179.307915][ T2890] team0 (unregistering): Port device team_slave_1 removed [ 179.333108][ T5158] Bluetooth: hci0: command tx timeout [ 179.480539][ T2890] team0 (unregistering): Port device team_slave_0 removed [ 179.617481][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 179.644814][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 179.668744][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 179.698005][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 179.706919][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 179.715002][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 180.299729][ T9869] lo speed is unknown, defaulting to 1000 [ 180.346658][ T9869] lo speed is unknown, defaulting to 1000 [ 180.501860][ T9813] chnl_net:caif_netlink_parms(): no params data found [ 181.062098][ T9903] FAULT_INJECTION: forcing a failure. [ 181.062098][ T9903] name failslab, interval 1, probability 0, space 0, times 0 [ 181.075162][ T9903] CPU: 1 UID: 0 PID: 9903 Comm: syz.2.857 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 181.085786][ T9903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 181.096486][ T9903] Call Trace: [ 181.099797][ T9903] [ 181.102750][ T9903] dump_stack_lvl+0x241/0x360 [ 181.107438][ T9903] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.112644][ T9903] ? __pfx__printk+0x10/0x10 [ 181.117236][ T9903] ? __kmalloc_noprof+0xb0/0x400 [ 181.122182][ T9903] ? __pfx___might_resched+0x10/0x10 [ 181.127476][ T9903] should_fail_ex+0x3b0/0x4e0 [ 181.132168][ T9903] ? alloc_pipe_info+0x1ff/0x4d0 [ 181.137119][ T9903] should_failslab+0xac/0x100 [ 181.141807][ T9903] ? alloc_pipe_info+0x1ff/0x4d0 [ 181.146768][ T9903] __kmalloc_noprof+0xd8/0x400 [ 181.151548][ T9903] alloc_pipe_info+0x1ff/0x4d0 [ 181.156315][ T9903] splice_direct_to_actor+0xa9e/0xc80 [ 181.161700][ T9903] ? aa_file_perm+0x3ef/0xf50 [ 181.166409][ T9903] ? __pfx_aa_file_perm+0x10/0x10 [ 181.171464][ T9903] ? __pfx_direct_splice_actor+0x10/0x10 [ 181.177118][ T9903] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 181.183022][ T9903] ? __fget_files+0x29/0x470 [ 181.187617][ T9903] ? __pfx_lock_release+0x10/0x10 [ 181.192688][ T9903] do_splice_direct+0x289/0x3e0 [ 181.197553][ T9903] ? __pfx_do_splice_direct+0x10/0x10 [ 181.202934][ T9903] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 181.208834][ T9903] ? rw_verify_area+0x1c3/0x6f0 [ 181.213693][ T9903] do_sendfile+0x561/0xe10 [ 181.218144][ T9903] ? __might_fault+0xaa/0x120 [ 181.222837][ T9903] ? __pfx_do_sendfile+0x10/0x10 [ 181.227792][ T9903] ? __might_fault+0xc6/0x120 [ 181.232484][ T9903] __se_sys_sendfile64+0x100/0x1e0 [ 181.237607][ T9903] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 181.243254][ T9903] ? do_syscall_64+0x100/0x230 [ 181.248029][ T9903] ? do_syscall_64+0xb6/0x230 [ 181.252717][ T9903] do_syscall_64+0xf3/0x230 [ 181.257234][ T9903] ? clear_bhb_loop+0x35/0x90 [ 181.261919][ T9903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.267819][ T9903] RIP: 0033:0x7f567d37e719 [ 181.272243][ T9903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.291945][ T9903] RSP: 002b:00007f567e094038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 181.300366][ T9903] RAX: ffffffffffffffda RBX: 00007f567d535f80 RCX: 00007f567d37e719 [ 181.308342][ T9903] RDX: 00000000200002c0 RSI: 0000000000000005 RDI: 0000000000000005 [ 181.316320][ T9903] RBP: 00007f567e094090 R08: 0000000000000000 R09: 0000000000000000 [ 181.324302][ T9903] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 181.332277][ T9903] R13: 0000000000000000 R14: 00007f567d535f80 R15: 00007fffd66cf9f8 [ 181.340269][ T9903] [ 181.387914][ T2890] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.451071][ T5158] Bluetooth: hci0: command tx timeout [ 181.467974][ T9813] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.489044][ T9813] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.522728][ T9813] bridge_slave_0: entered allmulticast mode [ 181.529794][ T9813] bridge_slave_0: entered promiscuous mode [ 181.579409][ T9813] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.609214][ T9813] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.630869][ T9813] bridge_slave_1: entered allmulticast mode [ 181.646934][ T9813] bridge_slave_1: entered promiscuous mode [ 181.667221][ T9869] chnl_net:caif_netlink_parms(): no params data found [ 181.731106][ T2890] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.767302][ T9911] netlink: 'syz.3.860': attribute type 10 has an invalid length. [ 181.782485][ T9911] netlink: 2 bytes leftover after parsing attributes in process `syz.3.860'. [ 181.811151][ T5158] Bluetooth: hci1: command tx timeout [ 181.865760][ T2890] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.936695][ T9911] team0: entered promiscuous mode [ 181.946090][ T9911] wg2: entered promiscuous mode [ 182.005168][ T9813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.085491][ T2890] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.142982][ T9813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.356153][ T9813] team0: Port device team_slave_0 added [ 182.392552][ T9869] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.401938][ T9869] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.409284][ T9869] bridge_slave_0: entered allmulticast mode [ 182.417037][ T9869] bridge_slave_0: entered promiscuous mode [ 182.463552][ T9813] team0: Port device team_slave_1 added [ 182.562264][ T9869] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.588526][ T9869] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.617433][ T9869] bridge_slave_1: entered allmulticast mode [ 182.649503][ T9869] bridge_slave_1: entered promiscuous mode [ 182.709048][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.720544][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.760556][ T9813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.854328][ T9869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.916211][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.932350][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.986546][ T9813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.046117][ T9869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.070260][ T2890] bridge_slave_1: left allmulticast mode [ 183.078197][ T2890] bridge_slave_1: left promiscuous mode [ 183.088747][ T2890] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.129746][ T2890] bridge_slave_0: left allmulticast mode [ 183.148838][ T2890] bridge_slave_0: left promiscuous mode [ 183.159109][ T2890] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.167996][ T9964] FAULT_INJECTION: forcing a failure. [ 183.167996][ T9964] name failslab, interval 1, probability 0, space 0, times 0 [ 183.190998][ T9964] CPU: 0 UID: 0 PID: 9964 Comm: syz.3.869 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 183.201653][ T9964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 183.211741][ T9964] Call Trace: [ 183.215040][ T9964] [ 183.217981][ T9964] dump_stack_lvl+0x241/0x360 [ 183.222686][ T9964] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.227894][ T9964] ? __pfx__printk+0x10/0x10 [ 183.232489][ T9964] ? __kmalloc_noprof+0xb0/0x400 [ 183.237432][ T9964] ? __pfx___might_resched+0x10/0x10 [ 183.242725][ T9964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.248806][ T9964] should_fail_ex+0x3b0/0x4e0 [ 183.253493][ T9964] ? copy_splice_read+0x18d/0xb60 [ 183.258533][ T9964] should_failslab+0xac/0x100 [ 183.263225][ T9964] ? copy_splice_read+0x18d/0xb60 [ 183.268255][ T9964] __kmalloc_noprof+0xd8/0x400 [ 183.273024][ T9964] ? __pfx_copy_splice_read+0x10/0x10 [ 183.278427][ T9964] copy_splice_read+0x18d/0xb60 [ 183.283310][ T9964] ? __asan_memset+0x23/0x50 [ 183.287924][ T9964] ? __pfx_copy_splice_read+0x10/0x10 [ 183.293322][ T9964] ? __raw_spin_lock_init+0x45/0x100 [ 183.298617][ T9964] ? alloc_pipe_info+0x370/0x4d0 [ 183.303572][ T9964] ? __pfx_copy_splice_read+0x10/0x10 [ 183.308952][ T9964] splice_direct_to_actor+0x4af/0xc80 [ 183.314342][ T9964] ? __pfx_direct_splice_actor+0x10/0x10 [ 183.319979][ T9964] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 183.325887][ T9964] do_splice_direct+0x289/0x3e0 [ 183.330751][ T9964] ? __pfx_do_splice_direct+0x10/0x10 [ 183.336127][ T9964] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 183.342028][ T9964] ? rw_verify_area+0x1c3/0x6f0 [ 183.346910][ T9964] do_sendfile+0x561/0xe10 [ 183.351335][ T9964] ? __might_fault+0xaa/0x120 [ 183.356024][ T9964] ? __pfx_do_sendfile+0x10/0x10 [ 183.360965][ T9964] ? __might_fault+0xc6/0x120 [ 183.365653][ T9964] __se_sys_sendfile64+0x100/0x1e0 [ 183.370771][ T9964] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 183.376410][ T9964] ? do_syscall_64+0x100/0x230 [ 183.381177][ T9964] ? do_syscall_64+0xb6/0x230 [ 183.385859][ T9964] do_syscall_64+0xf3/0x230 [ 183.390365][ T9964] ? clear_bhb_loop+0x35/0x90 [ 183.395050][ T9964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.400944][ T9964] RIP: 0033:0x7f32a977e719 [ 183.405363][ T9964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.424995][ T9964] RSP: 002b:00007f32aa598038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 183.433412][ T9964] RAX: ffffffffffffffda RBX: 00007f32a9935f80 RCX: 00007f32a977e719 [ 183.441385][ T9964] RDX: 00000000200002c0 RSI: 0000000000000005 RDI: 0000000000000005 [ 183.449356][ T9964] RBP: 00007f32aa598090 R08: 0000000000000000 R09: 0000000000000000 [ 183.457332][ T9964] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 183.465306][ T9964] R13: 0000000000000000 R14: 00007f32a9935f80 R15: 00007ffdb34bdc98 [ 183.473292][ T9964] [ 183.520130][ T5158] Bluetooth: hci0: command tx timeout [ 183.839353][ T9971] x_tables: duplicate underflow at hook 3 [ 183.890816][ T5158] Bluetooth: hci1: command tx timeout [ 184.278218][ T2890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.290035][ T2890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.313319][ T2890] bond0 (unregistering): Released all slaves [ 184.556213][ T9813] hsr_slave_0: entered promiscuous mode [ 184.583198][ T9813] hsr_slave_1: entered promiscuous mode [ 184.602115][ T9813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.609734][ T9813] Cannot create hsr debugfs directory [ 184.679118][ T9869] team0: Port device team_slave_0 added [ 184.697143][ T9869] team0: Port device team_slave_1 added [ 184.917392][ T9869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.930742][ T9869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.965592][ T9869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.026379][ T9869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.036048][ T9869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.094303][ T9869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.221684][ T9992] netlink: 'syz.3.876': attribute type 3 has an invalid length. [ 185.271272][ T2890] hsr_slave_0: left promiscuous mode [ 185.277454][ T2890] hsr_slave_1: left promiscuous mode [ 185.286005][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.304424][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.320144][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.336758][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.387275][ T2890] veth1_macvtap: left promiscuous mode [ 185.398013][ T2890] veth0_macvtap: left promiscuous mode [ 185.410106][ T2890] veth1_vlan: left promiscuous mode [ 185.419911][ T2890] veth0_vlan: left promiscuous mode [ 185.572082][ T5846] Bluetooth: hci0: command tx timeout [ 185.684710][T10003] xt_ipvs: protocol family 7 not supported [ 185.692845][T10003] netlink: 'syz.4.877': attribute type 1 has an invalid length. [ 185.743313][T10006] netlink: 48 bytes leftover after parsing attributes in process `syz.2.878'. [ 185.971112][ T5846] Bluetooth: hci1: command tx timeout [ 186.046540][T10012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.879'. [ 186.124664][T10015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.879'. [ 186.182708][ T2890] team0 (unregistering): Port device team_slave_1 removed [ 186.233563][ T2890] team0 (unregistering): Port device team_slave_0 removed [ 186.459656][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 186.462268][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 186.850097][ T9869] hsr_slave_0: entered promiscuous mode [ 186.912254][ T9869] hsr_slave_1: entered promiscuous mode [ 187.003456][ T9869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.011334][ T9869] Cannot create hsr debugfs directory [ 187.027428][T10025] netlink: 44 bytes leftover after parsing attributes in process `syz.2.883'. [ 187.054641][T10026] netlink: 32 bytes leftover after parsing attributes in process `syz.2.883'. [ 187.101450][T10025] netlink: 44 bytes leftover after parsing attributes in process `syz.2.883'. [ 187.148755][T10025] netlink: 44 bytes leftover after parsing attributes in process `syz.2.883'. [ 187.197938][T10025] netlink: 44 bytes leftover after parsing attributes in process `syz.2.883'. [ 187.319554][T10025] netlink: 44 bytes leftover after parsing attributes in process `syz.2.883'. [ 187.442485][T10038] netlink: 'syz.3.885': attribute type 1 has an invalid length. [ 187.458917][T10038] netlink: 224 bytes leftover after parsing attributes in process `syz.3.885'. [ 187.695865][T10044] ip6tnl1: entered allmulticast mode [ 187.945610][T10053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.050825][ T5158] Bluetooth: hci1: command tx timeout [ 188.153564][T10067] xt_l2tp: unknown flags: 10 [ 188.623974][ T9813] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 188.660332][ T9813] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 188.716817][ T9813] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 188.755388][ T9813] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 188.803802][ T9869] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 188.841444][ T9869] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 188.883677][ T9869] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 188.922069][ T9869] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 189.085008][ T9813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.136034][ T9813] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.156129][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.163341][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.239413][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.246633][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.315488][ T9869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.422402][ T9869] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.435601][ T2890] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.442799][ T2890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.495036][ T2890] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.502234][ T2890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.885921][ T9813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.984033][ T9813] veth0_vlan: entered promiscuous mode [ 190.051468][ T9813] veth1_vlan: entered promiscuous mode [ 190.111406][ T9869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.158572][ T9813] veth0_macvtap: entered promiscuous mode [ 190.215750][ T9813] veth1_macvtap: entered promiscuous mode [ 190.277688][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.291741][T10161] IPVS: set_ctl: invalid protocol: 193 224.0.0.1:20004 [ 190.311076][T10161] IPVS: set_ctl: invalid protocol: 193 224.0.0.1:20004 [ 190.318993][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.347649][ T9813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.368670][ T9869] veth0_vlan: entered promiscuous mode [ 190.419164][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.448316][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.470011][ T9813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.535834][ T9813] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.565341][ T9813] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.600883][ T9813] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.619927][ T9813] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.644574][ T9869] veth1_vlan: entered promiscuous mode [ 190.787942][ T9869] veth0_macvtap: entered promiscuous mode [ 190.830175][ T9869] veth1_macvtap: entered promiscuous mode [ 190.843321][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 190.857086][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 190.866419][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 190.884546][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 190.892720][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 190.902919][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 190.955087][ T9869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.969928][ T9869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.001262][ T9869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.016561][ T9869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.027860][ T9869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.053431][ T6040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.110227][ T6040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.143983][ T9869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.169669][ T9869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.211109][ T9869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.230789][ T9869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.261972][ T9869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.313031][T10183] lo speed is unknown, defaulting to 1000 [ 191.329283][ T9869] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.331681][ T6040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.358542][ T9869] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.365681][ T6040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.388934][ T9869] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.402330][T10207] __nla_validate_parse: 37 callbacks suppressed [ 191.402350][T10207] netlink: 52 bytes leftover after parsing attributes in process `syz.2.915'. [ 191.417853][ T9869] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.439327][T10183] lo speed is unknown, defaulting to 1000 [ 191.728683][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.917'. [ 191.790775][ T6043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.810006][ T6043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.936413][ T2890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.960932][ T2890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.286813][ T3541] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.402325][T10183] chnl_net:caif_netlink_parms(): no params data found [ 192.602166][ T3541] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.793446][ T3541] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.835306][T10183] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.842842][T10183] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.850114][T10183] bridge_slave_0: entered allmulticast mode [ 192.875991][T10183] bridge_slave_0: entered promiscuous mode [ 192.895465][T10183] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.914266][T10183] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.930184][T10183] bridge_slave_1: entered allmulticast mode [ 192.948142][T10183] bridge_slave_1: entered promiscuous mode [ 193.003663][ T3541] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.021497][ T5158] Bluetooth: hci4: command tx timeout [ 193.107024][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 193.118822][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 193.128010][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 193.141850][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 193.152613][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 193.160512][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 193.201300][T10183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.235097][T10183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.293703][T10263] lo speed is unknown, defaulting to 1000 [ 193.298844][T10183] team0: Port device team_slave_0 added [ 193.313925][T10183] team0: Port device team_slave_1 added [ 193.348576][T10263] lo speed is unknown, defaulting to 1000 [ 193.372740][T10183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.379703][T10183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.406153][T10183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.430453][T10183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.440170][T10183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.467050][T10183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.496979][ T3541] bridge_slave_1: left allmulticast mode [ 193.502906][ T3541] bridge_slave_1: left promiscuous mode [ 193.508606][ T3541] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.518045][ T3541] bridge_slave_0: left allmulticast mode [ 193.525116][ T3541] bridge_slave_0: left promiscuous mode [ 193.540666][ T3541] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.776443][ T5158] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 193.806650][ T5158] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 193.816717][ T5158] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 193.834239][ T5158] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 193.852172][ T5158] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 193.865446][ T5158] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.110416][ T3541] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.122621][ T3541] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.137596][ T3541] bond0 (unregistering): Released all slaves [ 194.296414][T10183] hsr_slave_0: entered promiscuous mode [ 194.309964][T10183] hsr_slave_1: entered promiscuous mode [ 194.323389][T10183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.340030][T10183] Cannot create hsr debugfs directory [ 194.494795][T10277] lo speed is unknown, defaulting to 1000 [ 194.507201][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 194.565953][T10277] lo speed is unknown, defaulting to 1000 [ 194.607366][T10289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.925'. [ 194.693260][ T3541] hsr_slave_0: left promiscuous mode [ 194.699564][ T3541] hsr_slave_1: left promiscuous mode [ 194.706381][ T3541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.714363][ T3541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.725453][ T3541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.733743][ T3541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.785205][ T3541] veth1_macvtap: left promiscuous mode [ 194.799693][ T3541] veth0_macvtap: left promiscuous mode [ 194.808290][ T3541] veth1_vlan: left promiscuous mode [ 194.818897][ T3541] veth0_vlan: left promiscuous mode [ 195.101365][ T54] Bluetooth: hci4: command tx timeout [ 195.261299][ T54] Bluetooth: hci0: command tx timeout [ 195.367383][ T3541] team0 (unregistering): Port device team_slave_1 removed [ 195.416220][ T3541] team0 (unregistering): Port device team_slave_0 removed [ 195.890949][ T54] Bluetooth: hci1: command tx timeout [ 196.009772][T10303] ------------[ cut here ]------------ [ 196.015804][T10303] WARNING: CPU: 1 PID: 10303 at net/core/skbuff.c:1219 sk_skb_reason_drop+0x87/0x380 [ 196.025488][T10303] Modules linked in: [ 196.029416][T10303] CPU: 1 UID: 0 PID: 10303 Comm: syz.2.928 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 196.040187][T10303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 196.050343][T10303] RIP: 0010:sk_skb_reason_drop+0x87/0x380 [ 196.056212][T10303] Code: 00 00 00 fc ff df 41 8d 9e 00 00 fc ff bf 01 00 fc ff 89 de e8 8a b1 08 f8 81 fb 00 00 fc ff 77 3a 4c 89 e5 e8 3a ad 08 f8 90 <0f> 0b 90 eb 5e bf 01 00 00 00 89 ee e8 68 b1 08 f8 85 ed 0f 8e 49 [ 196.075927][T10303] RSP: 0018:ffffc900034bf078 EFLAGS: 00010287 [ 196.082108][T10303] RAX: ffffffff898c2d26 RBX: 00000000fffbffea RCX: 0000000000040000 [ 196.090105][T10303] RDX: ffffc9000b4e6000 RSI: 0000000000000ab0 RDI: 0000000000000ab1 [ 196.098174][T10303] RBP: dffffc0000000000 R08: ffffffff898c2d16 R09: 1ffff11005ec715c [ 196.106277][T10303] R10: dffffc0000000000 R11: ffffed1005ec715d R12: dffffc0000000000 [ 196.114363][T10303] R13: ffff88802f638a00 R14: 00000000ffffffea R15: 0000000000000000 [ 196.122419][T10303] FS: 00007f567e0946c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 196.131453][T10303] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.138064][T10303] CR2: 000000110c27bf57 CR3: 0000000031ee6000 CR4: 00000000003526f0 [ 196.146150][T10303] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 196.154190][T10303] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 196.162250][T10303] Call Trace: [ 196.165566][T10303] [ 196.168532][T10303] ? __warn+0x168/0x4e0 [ 196.172800][T10303] ? sk_skb_reason_drop+0x87/0x380 [ 196.177954][T10303] ? report_bug+0x2b3/0x500 [ 196.182544][T10303] ? sk_skb_reason_drop+0x87/0x380 [ 196.187712][T10303] ? handle_bug+0x60/0x90 [ 196.192138][T10303] ? exc_invalid_op+0x1a/0x50 [ 196.196840][T10303] ? asm_exc_invalid_op+0x1a/0x20 [ 196.201947][T10303] ? sk_skb_reason_drop+0x76/0x380 [ 196.207101][T10303] ? sk_skb_reason_drop+0x86/0x380 [ 196.212327][T10303] ? sk_skb_reason_drop+0x87/0x380 [ 196.217488][T10303] ? sk_skb_reason_drop+0x86/0x380 [ 196.222681][T10303] ? ip_rcv_finish_core+0x129f/0x1b50 [ 196.228101][T10303] ip_rcv_finish_core+0xfde/0x1b50 [ 196.233309][T10303] ip_sublist_rcv+0x3b1/0xab0 [ 196.238019][T10303] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 196.243310][T10303] ? skb_orphan+0xae/0xd0 [ 196.247668][T10303] ? __pfx_ip_rcv_finish+0x10/0x10 [ 196.252842][T10303] ip_list_rcv+0x42b/0x480 [ 196.257262][T10303] ? __pfx_ip_list_rcv+0x10/0x10 [ 196.262287][T10303] ? __pfx_ip_list_rcv+0x10/0x10 [ 196.267262][T10303] __netif_receive_skb_list_core+0x94e/0x980 [ 196.273359][T10303] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 196.279995][T10303] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 196.286628][T10303] ? read_tsc+0x9/0x20 [ 196.290772][T10303] ? timekeeping_get_ns+0x2c0/0x420 [ 196.296019][T10303] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 196.302457][T10303] netif_receive_skb_list_internal+0xa51/0xe30 [ 196.308672][T10303] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 196.315102][T10303] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 196.321870][T10303] ? __pfx_eth_type_trans+0x10/0x10 [ 196.327205][T10303] ? __phys_addr+0xba/0x170 [ 196.331810][T10303] ? build_skb_around+0x111/0x260 [ 196.336895][T10303] ? __xdp_build_skb_from_frame+0x313/0x650 [ 196.342865][T10303] netif_receive_skb_list+0x55/0x4b0 [ 196.348190][T10303] bpf_test_run_xdp_live+0x1b5e/0x21b0 [ 196.353750][T10303] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 196.359684][T10303] ? bpf_test_run_xdp_live+0x5d6/0x21b0 [ 196.365317][T10303] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 196.371222][T10303] ? synchronize_rcu+0x11b/0x360 [ 196.376194][T10303] ? __pfx_synchronize_rcu+0x10/0x10 [ 196.381574][T10303] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 196.387879][T10303] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 196.393883][T10303] ? _copy_from_user+0x99/0xc0 [ 196.398714][T10303] ? bpf_test_init+0x15a/0x180 [ 196.403563][T10303] ? xdp_convert_md_to_buff+0x5b/0x330 [ 196.409052][T10303] bpf_prog_test_run_xdp+0x805/0x11e0 [ 196.414509][T10303] ? __pfx_lock_release+0x10/0x10 [ 196.419585][T10303] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 196.425475][T10303] ? __fget_files+0x29/0x470 [ 196.430113][T10303] ? fput+0x1a8/0x230 [ 196.434162][T10303] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 196.440028][T10303] bpf_prog_test_run+0x2e4/0x360 [ 196.445055][T10303] __sys_bpf+0x48d/0x810 [ 196.449329][T10303] ? __pfx___sys_bpf+0x10/0x10 [ 196.454173][T10303] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 196.460230][T10303] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 196.466913][T10303] ? do_syscall_64+0x100/0x230 [ 196.471769][T10303] __x64_sys_bpf+0x7c/0x90 [ 196.476230][T10303] do_syscall_64+0xf3/0x230 [ 196.480799][T10303] ? clear_bhb_loop+0x35/0x90 [ 196.485527][T10303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.491523][T10303] RIP: 0033:0x7f567d37e719 [ 196.495994][T10303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.515697][T10303] RSP: 002b:00007f567e094038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 196.524206][T10303] RAX: ffffffffffffffda RBX: 00007f567d535f80 RCX: 00007f567d37e719 [ 196.532255][T10303] RDX: 0000000000000069 RSI: 0000000020000600 RDI: 000000000000000a [ 196.540252][T10303] RBP: 00007f567d3f175e R08: 0000000000000000 R09: 0000000000000000 [ 196.548315][T10303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.556368][T10303] R13: 0000000000000000 R14: 00007f567d535f80 R15: 00007fffd66cf9f8 [ 196.564463][T10303] [ 196.567558][T10303] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 196.574870][T10303] CPU: 1 UID: 0 PID: 10303 Comm: syz.2.928 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 196.585562][T10303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 196.595634][T10303] Call Trace: [ 196.598944][T10303] [ 196.601898][T10303] dump_stack_lvl+0x241/0x360 [ 196.606600][T10303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.611819][T10303] ? __pfx__printk+0x10/0x10 [ 196.616440][T10303] ? _printk+0xd5/0x120 [ 196.620637][T10303] ? __init_begin+0x41000/0x41000 [ 196.625704][T10303] ? vscnprintf+0x5d/0x90 [ 196.630073][T10303] panic+0x349/0x880 [ 196.634006][T10303] ? __warn+0x177/0x4e0 [ 196.638198][T10303] ? __pfx_panic+0x10/0x10 [ 196.642645][T10303] ? show_trace_log_lvl+0x3b2/0x410 [ 196.647891][T10303] __warn+0x34b/0x4e0 [ 196.651908][T10303] ? sk_skb_reason_drop+0x87/0x380 [ 196.657053][T10303] report_bug+0x2b3/0x500 [ 196.661416][T10303] ? sk_skb_reason_drop+0x87/0x380 [ 196.666734][T10303] handle_bug+0x60/0x90 [ 196.670906][T10303] exc_invalid_op+0x1a/0x50 [ 196.675458][T10303] asm_exc_invalid_op+0x1a/0x20 [ 196.680337][T10303] RIP: 0010:sk_skb_reason_drop+0x87/0x380 [ 196.686070][T10303] Code: 00 00 00 fc ff df 41 8d 9e 00 00 fc ff bf 01 00 fc ff 89 de e8 8a b1 08 f8 81 fb 00 00 fc ff 77 3a 4c 89 e5 e8 3a ad 08 f8 90 <0f> 0b 90 eb 5e bf 01 00 00 00 89 ee e8 68 b1 08 f8 85 ed 0f 8e 49 [ 196.705733][T10303] RSP: 0018:ffffc900034bf078 EFLAGS: 00010287 [ 196.711828][T10303] RAX: ffffffff898c2d26 RBX: 00000000fffbffea RCX: 0000000000040000 [ 196.719812][T10303] RDX: ffffc9000b4e6000 RSI: 0000000000000ab0 RDI: 0000000000000ab1 [ 196.727797][T10303] RBP: dffffc0000000000 R08: ffffffff898c2d16 R09: 1ffff11005ec715c [ 196.735780][T10303] R10: dffffc0000000000 R11: ffffed1005ec715d R12: dffffc0000000000 [ 196.743772][T10303] R13: ffff88802f638a00 R14: 00000000ffffffea R15: 0000000000000000 [ 196.751761][T10303] ? sk_skb_reason_drop+0x76/0x380 [ 196.756890][T10303] ? sk_skb_reason_drop+0x86/0x380 [ 196.762024][T10303] ? sk_skb_reason_drop+0x86/0x380 [ 196.767321][T10303] ? ip_rcv_finish_core+0x129f/0x1b50 [ 196.772705][T10303] ip_rcv_finish_core+0xfde/0x1b50 [ 196.777843][T10303] ip_sublist_rcv+0x3b1/0xab0 [ 196.782537][T10303] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 196.787747][T10303] ? skb_orphan+0xae/0xd0 [ 196.792088][T10303] ? __pfx_ip_rcv_finish+0x10/0x10 [ 196.797310][T10303] ip_list_rcv+0x42b/0x480 [ 196.801744][T10303] ? __pfx_ip_list_rcv+0x10/0x10 [ 196.806699][T10303] ? __pfx_ip_list_rcv+0x10/0x10 [ 196.811647][T10303] __netif_receive_skb_list_core+0x94e/0x980 [ 196.817645][T10303] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 196.824354][T10303] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 196.830866][T10303] ? read_tsc+0x9/0x20 [ 196.834944][T10303] ? timekeeping_get_ns+0x2c0/0x420 [ 196.840161][T10303] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 196.846512][T10303] netif_receive_skb_list_internal+0xa51/0xe30 [ 196.852704][T10303] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 196.859051][T10303] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 196.865742][T10303] ? __pfx_eth_type_trans+0x10/0x10 [ 196.870956][T10303] ? __phys_addr+0xba/0x170 [ 196.875475][T10303] ? build_skb_around+0x111/0x260 [ 196.880517][T10303] ? __xdp_build_skb_from_frame+0x313/0x650 [ 196.886425][T10303] netif_receive_skb_list+0x55/0x4b0 [ 196.891722][T10303] bpf_test_run_xdp_live+0x1b5e/0x21b0 [ 196.897197][T10303] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 196.903128][T10303] ? bpf_test_run_xdp_live+0x5d6/0x21b0 [ 196.908701][T10303] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 196.914527][T10303] ? synchronize_rcu+0x11b/0x360 [ 196.919488][T10303] ? __pfx_synchronize_rcu+0x10/0x10 [ 196.924800][T10303] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 196.931077][T10303] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 196.937004][T10303] ? _copy_from_user+0x99/0xc0 [ 196.941783][T10303] ? bpf_test_init+0x15a/0x180 [ 196.946558][T10303] ? xdp_convert_md_to_buff+0x5b/0x330 [ 196.952032][T10303] bpf_prog_test_run_xdp+0x805/0x11e0 [ 196.957419][T10303] ? __pfx_lock_release+0x10/0x10 [ 196.962464][T10303] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 196.968286][T10303] ? __fget_files+0x29/0x470 [ 196.972898][T10303] ? fput+0x1a8/0x230 [ 196.976912][T10303] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 196.982748][T10303] bpf_prog_test_run+0x2e4/0x360 [ 196.987702][T10303] __sys_bpf+0x48d/0x810 [ 196.991959][T10303] ? __pfx___sys_bpf+0x10/0x10 [ 196.996766][T10303] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 197.002786][T10303] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 197.009133][T10303] ? do_syscall_64+0x100/0x230 [ 197.013912][T10303] __x64_sys_bpf+0x7c/0x90 [ 197.018337][T10303] do_syscall_64+0xf3/0x230 [ 197.022851][T10303] ? clear_bhb_loop+0x35/0x90 [ 197.027543][T10303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.033446][T10303] RIP: 0033:0x7f567d37e719 [ 197.037864][T10303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.057588][T10303] RSP: 002b:00007f567e094038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 197.066032][T10303] RAX: ffffffffffffffda RBX: 00007f567d535f80 RCX: 00007f567d37e719 [ 197.074017][T10303] RDX: 0000000000000069 RSI: 0000000020000600 RDI: 000000000000000a [ 197.081998][T10303] RBP: 00007f567d3f175e R08: 0000000000000000 R09: 0000000000000000 [ 197.089973][T10303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.097968][T10303] R13: 0000000000000000 R14: 00007f567d535f80 R15: 00007fffd66cf9f8 [ 197.105989][T10303] [ 197.109340][T10303] Kernel Offset: disabled [ 197.113662][T10303] Rebooting in 86400 seconds..