last executing test programs: 54.034874675s ago: executing program 3 (id=9): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000009000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) 53.769323494s ago: executing program 3 (id=11): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) 53.57210876s ago: executing program 3 (id=12): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @broadcast}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, &(0x7f0000000140)=0x100) 53.031712339s ago: executing program 3 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000b80)={'ip6tnl0\x00', 0x400}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 51.475303159s ago: executing program 0 (id=27): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 51.092966108s ago: executing program 0 (id=31): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="02"], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f00000002c0)=0x84) 50.607056178s ago: executing program 0 (id=33): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) close(r3) socket$inet6_udplite(0xa, 0x2, 0x88) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x4, r3}, 0x10) 49.25427013s ago: executing program 0 (id=39): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x15, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x2000000, {0x0, 0x0, 0x0, r2, {0xa}}}, 0x24}}, 0x0) 31.898817913s ago: executing program 3 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000b80)={'ip6tnl0\x00', 0x400}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 31.194093007s ago: executing program 0 (id=39): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x15, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x2000000, {0x0, 0x0, 0x0, r2, {0xa}}}, 0x24}}, 0x0) 16.884522839s ago: executing program 3 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000b80)={'ip6tnl0\x00', 0x400}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 12.774838232s ago: executing program 0 (id=39): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x15, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x2000000, {0x0, 0x0, 0x0, r2, {0xa}}}, 0x24}}, 0x0) 9.019202417s ago: executing program 2 (id=304): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x2}, 0x2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x4, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x4}, {0x8, 0xb}, {0x8, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000048}, 0x8040) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) 8.71546986s ago: executing program 2 (id=308): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf256c00000008000300", @ANYRES32=r1, @ANYBLOB='\b\x00&\x00l\t'], 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x448d0) 8.356016065s ago: executing program 2 (id=311): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8) 8.218841998s ago: executing program 2 (id=312): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r2, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) 8.124242932s ago: executing program 2 (id=313): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000d00)="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", 0x427}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680), 0x4) 7.758376442s ago: executing program 2 (id=314): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) sendmsg$inet(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c80)="5ba57073", 0x4}], 0x1}, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 2.236009325s ago: executing program 1 (id=334): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r3, @ANYBLOB="05990000000000001800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$packet(r0, &(0x7f0000000280)='1', 0x1, 0x8040, &(0x7f0000000200)={0x11, 0x18, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x14) 2.024339609s ago: executing program 1 (id=336): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000680)={@val={0x0, 0x8914}, @void, @eth={@link_local, @random="1f00", @val, {@ipv6={0x86dd, @tcp={0x5, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x3fffffb3, 0x8, 0x0, 0x0, 0x28}}}}}}}}, 0x52) 1.565980636s ago: executing program 1 (id=339): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) 940.864778ms ago: executing program 4 (id=345): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0xffffff23, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xfff2}, {0x3, 0xfff2}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x2, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x4c, 0x2, [@TCA_FLOW_EMATCHES={0x48, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x45}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xfffd, 0x9, 0x40}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x7c}}, 0x801) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 793.977743ms ago: executing program 4 (id=346): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 625.976887ms ago: executing program 1 (id=347): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0xe, 0xffff}, {0xe, 0x10}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x9a}]}}]}, 0x38}}, 0x44050) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 582.499789ms ago: executing program 4 (id=348): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x4, 0x2}, 0x6) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) 432.249323ms ago: executing program 4 (id=349): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4a}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2a003300d0000000f20211000001080211000000a514a0ed377ef00f040400004000760604051900030000000600cd"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 256.501617ms ago: executing program 1 (id=350): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_extract_tcp_res(0x0, 0x2, 0xc000000) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x59, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x4b, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}, {"c3077e06d7920928db3b28cabcde4ee5db0571fd13e23744b0398f34ef631e5a92cd80"}}}}}}, 0x0) 211.338827ms ago: executing program 4 (id=351): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "f9b00bc2216fa675", "1370de897002ac86cc1376bac1f300d214e7c5e00986c8178ad953ddbdc8a9b4", "222d4a10", "38fba50e3d7e9ad1"}, 0x38) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) close(0x3) 72.163959ms ago: executing program 1 (id=352): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20008804) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 0s ago: executing program 4 (id=353): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.206' (ED25519) to the list of known hosts. [ 70.839542][ T5821] cgroup: Unknown subsys name 'net' [ 70.971835][ T5821] cgroup: Unknown subsys name 'cpuset' [ 70.980152][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.692661][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.701560][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.600225][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.967438][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.975601][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.008732][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.016539][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.025532][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.038456][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.058305][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.059249][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.066279][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.089323][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.098731][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.102891][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.113735][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.121755][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.122959][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.132419][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.138718][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.144668][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.151862][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.159101][ T5852] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.165040][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.171240][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.178836][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.185896][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.194976][ T5143] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.206216][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.215450][ T5845] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.223505][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.227348][ T5143] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.238175][ T5143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.602980][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 75.702091][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 75.830369][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.839441][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.846808][ T5844] bridge_slave_0: entered allmulticast mode [ 75.854947][ T5844] bridge_slave_0: entered promiscuous mode [ 75.866684][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.874421][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.881985][ T5844] bridge_slave_1: entered allmulticast mode [ 75.888978][ T5844] bridge_slave_1: entered promiscuous mode [ 75.899218][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 75.909006][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 75.999138][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.011094][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.045036][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.052748][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.061078][ T5831] bridge_slave_0: entered allmulticast mode [ 76.068743][ T5831] bridge_slave_0: entered promiscuous mode [ 76.076988][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.084605][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.092409][ T5831] bridge_slave_1: entered allmulticast mode [ 76.100059][ T5831] bridge_slave_1: entered promiscuous mode [ 76.214961][ T5844] team0: Port device team_slave_0 added [ 76.232866][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.240390][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.250891][ T5836] bridge_slave_0: entered allmulticast mode [ 76.258242][ T5836] bridge_slave_0: entered promiscuous mode [ 76.266196][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 76.292312][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.304527][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.315426][ T5844] team0: Port device team_slave_1 added [ 76.322087][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.330309][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.337709][ T5836] bridge_slave_1: entered allmulticast mode [ 76.344484][ T5836] bridge_slave_1: entered promiscuous mode [ 76.404161][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.411710][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.419570][ T5840] bridge_slave_0: entered allmulticast mode [ 76.426277][ T5840] bridge_slave_0: entered promiscuous mode [ 76.445210][ T5831] team0: Port device team_slave_0 added [ 76.474174][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.485606][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.495367][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.502675][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.510270][ T5840] bridge_slave_1: entered allmulticast mode [ 76.516990][ T5840] bridge_slave_1: entered promiscuous mode [ 76.524209][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.531505][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.557679][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.576807][ T5831] team0: Port device team_slave_1 added [ 76.611404][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.619187][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.645190][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.701449][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.717294][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.743665][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.750757][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.776992][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.789652][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.796633][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.822631][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.855207][ T5836] team0: Port device team_slave_0 added [ 76.863526][ T5836] team0: Port device team_slave_1 added [ 76.899917][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.907164][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.915024][ T5842] bridge_slave_0: entered allmulticast mode [ 76.922031][ T5842] bridge_slave_0: entered promiscuous mode [ 76.930173][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.937349][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.949088][ T5842] bridge_slave_1: entered allmulticast mode [ 76.955851][ T5842] bridge_slave_1: entered promiscuous mode [ 76.986183][ T5844] hsr_slave_0: entered promiscuous mode [ 76.994630][ T5844] hsr_slave_1: entered promiscuous mode [ 77.014130][ T5831] hsr_slave_0: entered promiscuous mode [ 77.022428][ T5831] hsr_slave_1: entered promiscuous mode [ 77.031329][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.039839][ T5831] Cannot create hsr debugfs directory [ 77.064722][ T5840] team0: Port device team_slave_0 added [ 77.084959][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.092379][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.118605][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.132664][ T5840] team0: Port device team_slave_1 added [ 77.186792][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.199165][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.209539][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.216592][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.243620][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.288646][ T5143] Bluetooth: hci2: command tx timeout [ 77.294488][ T5143] Bluetooth: hci3: command tx timeout [ 77.300158][ T5839] Bluetooth: hci4: command tx timeout [ 77.300193][ T5835] Bluetooth: hci1: command tx timeout [ 77.305924][ T5839] Bluetooth: hci0: command tx timeout [ 77.323238][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.331621][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.358167][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.393230][ T5842] team0: Port device team_slave_0 added [ 77.403496][ T5842] team0: Port device team_slave_1 added [ 77.412652][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.420469][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.447004][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.521920][ T5840] hsr_slave_0: entered promiscuous mode [ 77.528940][ T5840] hsr_slave_1: entered promiscuous mode [ 77.535095][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.542988][ T5840] Cannot create hsr debugfs directory [ 77.591060][ T5836] hsr_slave_0: entered promiscuous mode [ 77.597778][ T5836] hsr_slave_1: entered promiscuous mode [ 77.604132][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.613339][ T5836] Cannot create hsr debugfs directory [ 77.639695][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.646681][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.676380][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.689075][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.696145][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.723660][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.862081][ T5842] hsr_slave_0: entered promiscuous mode [ 77.868958][ T5842] hsr_slave_1: entered promiscuous mode [ 77.875279][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.883578][ T5842] Cannot create hsr debugfs directory [ 77.985240][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.012205][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.044647][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.090927][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.172711][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.194495][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.214934][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.235161][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.276853][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.286739][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.297040][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.326286][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.376829][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.421954][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.459335][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.472655][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.510801][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.521859][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.553344][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.564943][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.606201][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.682473][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.714948][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.722301][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.738665][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.757259][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.764473][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.796391][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.816538][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.855012][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.881807][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.889011][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.902618][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.909995][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.942884][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.959528][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.966657][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.977079][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.984256][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.029281][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.072759][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.119430][ T1903] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.126636][ T1903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.142433][ T1903] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.149651][ T1903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.200828][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.257279][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.362320][ T1903] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.369534][ T1903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.370168][ T5839] Bluetooth: hci0: command tx timeout [ 79.383112][ T5143] Bluetooth: hci3: command tx timeout [ 79.388779][ T5143] Bluetooth: hci1: command tx timeout [ 79.391547][ T5835] Bluetooth: hci4: command tx timeout [ 79.394204][ T5143] Bluetooth: hci2: command tx timeout [ 79.430250][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.437386][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.594345][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.650692][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.704178][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.806305][ T5831] veth0_vlan: entered promiscuous mode [ 79.834928][ T5831] veth1_vlan: entered promiscuous mode [ 79.932532][ T5844] veth0_vlan: entered promiscuous mode [ 79.974489][ T5831] veth0_macvtap: entered promiscuous mode [ 79.983544][ T5844] veth1_vlan: entered promiscuous mode [ 79.997376][ T5831] veth1_macvtap: entered promiscuous mode [ 80.036639][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.079948][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.095504][ T5844] veth0_macvtap: entered promiscuous mode [ 80.121166][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.133474][ T5844] veth1_macvtap: entered promiscuous mode [ 80.145923][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.161565][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.176806][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.186169][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.195566][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.231908][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.246027][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.260807][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.270854][ T5842] veth0_vlan: entered promiscuous mode [ 80.288204][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.299023][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.312855][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.350523][ T5842] veth1_vlan: entered promiscuous mode [ 80.364529][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.375769][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.386005][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.395256][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.486379][ T5840] veth0_vlan: entered promiscuous mode [ 80.506256][ T5836] veth0_vlan: entered promiscuous mode [ 80.521635][ T5836] veth1_vlan: entered promiscuous mode [ 80.569774][ T3549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.578402][ T3549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.602651][ T5840] veth1_vlan: entered promiscuous mode [ 80.627231][ T3549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.628683][ T5842] veth0_macvtap: entered promiscuous mode [ 80.635662][ T3549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.646964][ T5842] veth1_macvtap: entered promiscuous mode [ 80.712816][ T1903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.717436][ T5840] veth0_macvtap: entered promiscuous mode [ 80.736309][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.749026][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.749639][ T1903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.769534][ T5840] veth1_macvtap: entered promiscuous mode [ 80.788942][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.803098][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.815396][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.832617][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.845758][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.872369][ T5836] veth0_macvtap: entered promiscuous mode [ 80.900148][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.920604][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.935874][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.946318][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.956904][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.966886][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.978595][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.989724][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.000687][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.011322][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.021289][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.032224][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.043663][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.056048][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.065014][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.073922][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.082733][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.128792][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.139540][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.149489][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.159992][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.169932][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.180481][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.191512][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.243906][ T5836] veth1_macvtap: entered promiscuous mode [ 81.261069][ T5840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.270992][ T5840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.283088][ T5840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.293777][ T5840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.369699][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.391297][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.417560][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.434748][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.454496][ T5143] Bluetooth: hci4: command tx timeout [ 81.454516][ T5835] Bluetooth: hci0: command tx timeout [ 81.454555][ T5835] Bluetooth: hci1: command tx timeout [ 81.460221][ T5839] Bluetooth: hci3: command tx timeout [ 81.466270][ T5837] Bluetooth: hci2: command tx timeout [ 81.476247][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.496883][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.506976][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.517619][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.529922][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.552195][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.593475][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.617563][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.647685][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.676828][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.687924][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.703162][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.713773][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.725792][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.803660][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.820497][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.833109][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.859002][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.859176][ T5935] syz.3.9[5935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.868481][ T5935] syz.3.9[5935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.880239][ T5935] syz.3.9[5935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.893343][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.920349][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.069187][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.077121][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.129974][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.184459][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.373136][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.394950][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.436665][ T1903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.454963][ T1903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.520078][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.528133][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.930541][ T5957] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 83.081016][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.138157][ T5956] Zero length message leads to an empty skb [ 83.148628][ T5960] batman_adv: batadv0: Adding interface: dummy0 [ 83.157167][ T5960] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.235611][ T5960] batman_adv: batadv0: Interface activated: dummy0 [ 83.300502][ T5962] batadv0: mtu less than device minimum [ 83.316813][ T5962] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.329842][ T5962] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.342503][ T5962] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.355210][ T5962] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.367885][ T5962] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.380642][ T5962] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.393404][ T5962] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.406076][ T5962] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.419105][ T5962] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.528173][ T5835] Bluetooth: hci3: command tx timeout [ 83.534390][ T5837] Bluetooth: hci0: command tx timeout [ 83.540761][ T5845] Bluetooth: hci1: command tx timeout [ 83.541167][ T5143] Bluetooth: hci2: command tx timeout [ 83.569498][ T5970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21'. [ 83.708950][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.867720][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.899347][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.912604][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.928577][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.937622][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.963940][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.008368][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.174720][ T5982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.25'. [ 84.225000][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.703366][ T5973] chnl_net:caif_netlink_parms(): no params data found [ 85.353323][ T6013] netlink: 'syz.1.32': attribute type 4 has an invalid length. [ 85.408266][ T35] bridge_slave_1: left allmulticast mode [ 85.414319][ T35] bridge_slave_1: left promiscuous mode [ 85.448835][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.483809][ T6014] netlink: 'syz.1.32': attribute type 4 has an invalid length. [ 85.524734][ T35] bridge_slave_0: left allmulticast mode [ 85.561135][ T35] bridge_slave_0: left promiscuous mode [ 85.587382][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.026264][ T6020] netlink: 'syz.2.35': attribute type 4 has an invalid length. [ 86.090393][ T5837] Bluetooth: hci4: command tx timeout [ 86.101064][ T6023] netlink: 'syz.2.35': attribute type 4 has an invalid length. [ 86.305551][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.326574][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.339577][ T35] bond0 (unregistering): Released all slaves [ 86.379406][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.386810][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.394258][ T5973] bridge_slave_0: entered allmulticast mode [ 86.412990][ T5973] bridge_slave_0: entered promiscuous mode [ 86.774463][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.781808][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.789745][ T5973] bridge_slave_1: entered allmulticast mode [ 86.803815][ T5973] bridge_slave_1: entered promiscuous mode [ 86.909078][ T6029] syzkaller0: entered promiscuous mode [ 86.914634][ T6029] syzkaller0: entered allmulticast mode [ 87.034487][ T5973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.062745][ T47] cfg80211: failed to load regulatory.db [ 87.617857][ T5143] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.658127][ T5143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.666490][ T5143] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.676319][ T5143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.690197][ T5143] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.698127][ T5143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.179498][ T5143] Bluetooth: hci4: command tx timeout [ 89.221387][ T5973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.323828][ T35] hsr_slave_0: left promiscuous mode [ 89.333337][ T35] hsr_slave_1: left promiscuous mode [ 89.354208][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.373847][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.383467][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.393800][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.433314][ T35] veth1_macvtap: left promiscuous mode [ 89.443931][ T35] veth0_macvtap: left promiscuous mode [ 89.453644][ T35] veth1_vlan: left promiscuous mode [ 89.463003][ T35] veth0_vlan: left promiscuous mode [ 89.783234][ T5143] Bluetooth: hci3: command tx timeout [ 89.876296][ T35] team0 (unregistering): Port device team_slave_1 removed [ 89.912758][ T35] team0 (unregistering): Port device team_slave_0 removed [ 90.248071][ T5143] Bluetooth: hci4: command tx timeout [ 90.341603][ T5973] team0: Port device team_slave_0 added [ 90.420157][ T5973] team0: Port device team_slave_1 added [ 90.595514][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.614740][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.698078][ T5973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.736595][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.747769][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.785967][ T5973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.925636][ T6085] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 90.989316][ T5973] hsr_slave_0: entered promiscuous mode [ 90.996973][ T6085] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 91.024856][ T5973] hsr_slave_1: entered promiscuous mode [ 91.062070][ T6095] netlink: 24 bytes leftover after parsing attributes in process `syz.2.54'. [ 91.815327][ T6128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.62'. [ 91.854302][ T5143] Bluetooth: hci3: command tx timeout [ 91.882049][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.913217][ T6131] net_ratelimit: 10 callbacks suppressed [ 91.913239][ T6131] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 91.938535][ T6054] chnl_net:caif_netlink_parms(): no params data found [ 91.989887][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.247343][ T6139] netlink: 24 bytes leftover after parsing attributes in process `syz.2.65'. [ 92.269846][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.334516][ T5143] Bluetooth: hci4: command tx timeout [ 92.819564][ T6164] Illegal XDP return value 2592252404 on prog (id 19) dev N/A, expect packet loss! [ 92.870492][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.120266][ T6054] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.144571][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.164031][ T6054] bridge_slave_0: entered allmulticast mode [ 93.197757][ T6054] bridge_slave_0: entered promiscuous mode [ 93.241389][ T6054] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.269080][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.287726][ T6054] bridge_slave_1: entered allmulticast mode [ 93.295943][ T6054] bridge_slave_1: entered promiscuous mode [ 93.617104][ T6054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.716449][ T6232] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.820284][ T6182] tipc: Started in network mode [ 93.842518][ T6182] tipc: Node identity fa849bb218e9, cluster identity 4711 [ 93.857812][ T6182] tipc: Enabled bearer , priority 7 [ 93.869264][ T6054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.912668][ T6185] ªªªªªª: renamed from syzkaller0 [ 93.921599][ T6185] tipc: Disabling bearer [ 93.928826][ T5143] Bluetooth: hci3: command tx timeout [ 94.097202][ T6054] team0: Port device team_slave_0 added [ 94.109971][ T6054] team0: Port device team_slave_1 added [ 94.236814][ T6054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.255409][ T6054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.283231][ T6054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.350313][ T6054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.361281][ T6054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.398627][ T6054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.446270][ T35] bridge_slave_1: left allmulticast mode [ 94.461941][ T35] bridge_slave_1: left promiscuous mode [ 94.468306][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.479307][ T35] bridge_slave_0: left allmulticast mode [ 94.485015][ T35] bridge_slave_0: left promiscuous mode [ 94.500044][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.917059][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.929002][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.940921][ T35] bond0 (unregistering): Released all slaves [ 95.080543][ T6054] hsr_slave_0: entered promiscuous mode [ 95.095153][ T6054] hsr_slave_1: entered promiscuous mode [ 95.107284][ T6054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.122073][ T6054] Cannot create hsr debugfs directory [ 95.134776][ T5885] IPVS: starting estimator thread 0... [ 95.228950][ T6260] IPVS: using max 20 ests per chain, 48000 per kthread [ 95.252337][ T6258] wg2: entered promiscuous mode [ 95.264735][ T6258] wg2: entered allmulticast mode [ 95.468632][ T5973] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.500795][ T5973] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.520809][ T5973] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.672224][ T5973] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.011146][ T5143] Bluetooth: hci3: command tx timeout [ 96.070468][ T35] hsr_slave_0: left promiscuous mode [ 96.121255][ T35] hsr_slave_1: left promiscuous mode [ 96.141960][ T6292] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.154740][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.183032][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.218846][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.236561][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.327979][ T35] veth1_macvtap: left promiscuous mode [ 96.333600][ T35] veth0_macvtap: left promiscuous mode [ 96.352920][ T35] veth1_vlan: left promiscuous mode [ 96.365612][ T35] veth0_vlan: left promiscuous mode [ 97.621978][ T35] team0 (unregistering): Port device team_slave_1 removed [ 97.663971][ T35] team0 (unregistering): Port device team_slave_0 removed [ 98.822253][ T6366] syz.2.109 uses obsolete (PF_INET,SOCK_PACKET) [ 98.840379][ T5973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.165830][ T5973] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.246322][ T6217] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.253552][ T6217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.309254][ T6217] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.316440][ T6217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.404022][ T6386] netlink: 'syz.1.117': attribute type 1 has an invalid length. [ 99.494988][ T6054] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.612471][ T6386] bond1: (slave gretap1): making interface the new active one [ 99.629730][ T6386] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 99.663411][ T6054] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.712989][ T6054] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.758024][ T6054] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.224707][ T6054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.684671][ T6054] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.736488][ T5973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.795047][ T3587] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.802302][ T3587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.884914][ T3587] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.892201][ T3587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.104239][ T6054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.194061][ T5973] veth0_vlan: entered promiscuous mode [ 101.261626][ T5973] veth1_vlan: entered promiscuous mode [ 101.378903][ T6447] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 101.393944][ T5973] veth0_macvtap: entered promiscuous mode [ 101.435653][ T5973] veth1_macvtap: entered promiscuous mode [ 101.466356][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.131'. [ 101.501008][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.547568][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.577693][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.606654][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.621423][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.632285][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.644482][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.663370][ T6451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.839121][ T6453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.846327][ T6453] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 101.867764][ T6453] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 101.947727][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.971256][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.989292][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.021948][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.047548][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.081708][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.108694][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.201727][ T5973] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.235770][ T5973] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.267659][ T5973] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.276473][ T5973] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.322435][ T6054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.371415][ T6473] bridge_slave_0: left allmulticast mode [ 102.377325][ T6473] bridge_slave_0: left promiscuous mode [ 102.384210][ T6473] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.431100][ T6473] bridge_slave_1: left allmulticast mode [ 102.436943][ T6473] bridge_slave_1: left promiscuous mode [ 102.445499][ T6473] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.469588][ T6473] bond0: (slave bond_slave_0): Releasing backup interface [ 102.500286][ T6473] bond0: (slave bond_slave_1): Releasing backup interface [ 102.593526][ T6473] team0: Port device team_slave_0 removed [ 102.642989][ T6473] team0: Port device team_slave_1 removed [ 102.659342][ T6473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.672144][ T6473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.682348][ T6473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.690390][ T6473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.732376][ T6476] team0: Mode changed to "random" [ 102.779573][ T6054] veth0_vlan: entered promiscuous mode [ 102.928473][ T6054] veth1_vlan: entered promiscuous mode [ 103.017543][ T6054] veth0_macvtap: entered promiscuous mode [ 103.026709][ T6054] veth1_macvtap: entered promiscuous mode [ 103.062381][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.081056][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.118904][ T6054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.132100][ T6054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.192289][ T6054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.218414][ T6054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.228584][ T6054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.241839][ T6054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.285994][ T6054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.334361][ T6208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.343932][ T6054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.358079][ T6208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.367050][ T6054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.380446][ T6054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.391816][ T6054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.402472][ T6054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.414612][ T6054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.445085][ T6054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.503066][ T6054] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.520155][ T6054] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.555151][ T6054] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.574429][ T6054] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.866956][ T6217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.879067][ T6217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.894791][ T6208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.902800][ T6208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.001538][ T6208] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.366093][ T6523] trusted_key: syz.2.154 sent an empty control message without MSG_MORE. [ 104.405691][ T6208] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.466080][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.483025][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.501016][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.528142][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.536262][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 104.630148][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.639399][ T6531] netlink: 'syz.1.157': attribute type 1 has an invalid length. [ 104.764746][ T6208] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.919280][ T6208] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.989047][ T6540] netlink: 'syz.1.159': attribute type 1 has an invalid length. [ 105.043442][ T6540] 8021q: adding VLAN 0 to HW filter on device bond3 [ 105.098605][ T6542] bond3: (slave gretap2): making interface the new active one [ 105.151379][ T6542] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 105.254210][ T6542] syz.1.159 (6542) used greatest stack depth: 18272 bytes left [ 105.295234][ T5143] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 105.306880][ T5143] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 105.335927][ T5143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 105.385397][ T5143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 105.398505][ T5143] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 105.405856][ T5143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 105.682389][ T6208] bridge_slave_1: left allmulticast mode [ 105.695134][ T6208] bridge_slave_1: left promiscuous mode [ 105.715195][ T6208] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.740476][ T6558] netlink: 24 bytes leftover after parsing attributes in process `syz.4.165'. [ 105.760548][ T6208] bridge_slave_0: left allmulticast mode [ 105.766268][ T6208] bridge_slave_0: left promiscuous mode [ 105.776036][ T6208] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.081266][ T6572] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 106.165464][ T6575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'. [ 106.508910][ T6208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.524036][ T6208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.534713][ T6208] bond0 (unregistering): Released all slaves [ 106.564082][ T6558] netlink: 'syz.4.165': attribute type 1 has an invalid length. [ 106.572890][ T6558] netlink: 'syz.4.165': attribute type 2 has an invalid length. [ 106.581057][ T6558] netlink: 24 bytes leftover after parsing attributes in process `syz.4.165'. [ 106.731250][ T5143] Bluetooth: hci3: command tx timeout [ 106.842347][ T6525] chnl_net:caif_netlink_parms(): no params data found [ 107.248819][ T6208] hsr_slave_0: left promiscuous mode [ 107.277755][ T6208] hsr_slave_1: left promiscuous mode [ 107.307314][ T6208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.324431][ T6208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.358473][ T6208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.380394][ T6208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.432734][ T6208] veth1_macvtap: left promiscuous mode [ 107.444726][ T6208] veth0_macvtap: left promiscuous mode [ 107.455534][ T6208] veth1_vlan: left promiscuous mode [ 107.477771][ T6208] veth0_vlan: left promiscuous mode [ 107.529694][ T5143] Bluetooth: hci4: command tx timeout [ 107.910399][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 108.246239][ T6208] team0 (unregistering): Port device team_slave_1 removed [ 108.289744][ T6208] team0 (unregistering): Port device team_slave_0 removed [ 108.678767][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.686019][ T6525] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.693836][ T6525] bridge_slave_0: entered allmulticast mode [ 108.704318][ T6525] bridge_slave_0: entered promiscuous mode [ 108.714947][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.723487][ T6525] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.738289][ T6525] bridge_slave_1: entered allmulticast mode [ 108.746684][ T6525] bridge_slave_1: entered promiscuous mode [ 108.809548][ T5143] Bluetooth: hci3: command tx timeout [ 108.947367][ T6525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.960878][ T6525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.084790][ T6637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.184'. [ 109.171710][ T5832] block nbd64: NBD_DISCONNECT [ 109.172333][ T6641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.184'. [ 109.242112][ T6641] nbd: device at index 64 is going down [ 109.264722][ T6525] team0: Port device team_slave_0 added [ 109.299530][ T6525] team0: Port device team_slave_1 added [ 109.483479][ T6545] chnl_net:caif_netlink_parms(): no params data found [ 109.515287][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.534057][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.561073][ T6525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.581709][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.588780][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.607751][ T5143] Bluetooth: hci4: command tx timeout [ 109.616840][ T6525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.760800][ T6525] hsr_slave_0: entered promiscuous mode [ 109.782136][ T6525] hsr_slave_1: entered promiscuous mode [ 110.114199][ T6545] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.147677][ T6545] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.154993][ T6545] bridge_slave_0: entered allmulticast mode [ 110.170108][ T6545] bridge_slave_0: entered promiscuous mode [ 110.178938][ T6545] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.186132][ T6545] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.194726][ T6545] bridge_slave_1: entered allmulticast mode [ 110.201896][ T6545] bridge_slave_1: entered promiscuous mode [ 110.311945][ T6545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.481081][ T6208] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.531985][ T6545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.742130][ T6697] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20004 [ 110.815225][ T6208] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.874045][ T6545] team0: Port device team_slave_0 added [ 110.883071][ T6545] team0: Port device team_slave_1 added [ 110.887639][ T5143] Bluetooth: hci3: command tx timeout [ 110.917361][ T6697] tipc: Started in network mode [ 110.922492][ T6697] tipc: Node identity ac1414aa, cluster identity 4711 [ 110.933189][ T6697] tipc: Enabled bearer , priority 10 [ 111.005456][ T6208] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.047099][ T6545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.058641][ T6545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.102822][ T6545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.119821][ T6545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.126978][ T6545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.163783][ T6704] syz.2.201[6704] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.163892][ T6704] syz.2.201[6704] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.176389][ T6545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.206145][ T6704] syz.2.201[6704] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.249957][ T6704] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 111.309552][ T6208] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.544195][ T6545] hsr_slave_0: entered promiscuous mode [ 111.595030][ T6545] hsr_slave_1: entered promiscuous mode [ 111.632466][ T6545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.661951][ T6545] Cannot create hsr debugfs directory [ 111.688097][ T5143] Bluetooth: hci4: command tx timeout [ 112.051065][ T8] tipc: Node number set to 2886997162 [ 112.218421][ T6208] bridge_slave_1: left allmulticast mode [ 112.224195][ T6208] bridge_slave_1: left promiscuous mode [ 112.249097][ T6208] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.282453][ T6208] bridge_slave_0: left allmulticast mode [ 112.298252][ T6208] bridge_slave_0: left promiscuous mode [ 112.317694][ T6208] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.574907][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.213'. [ 112.972570][ T5143] Bluetooth: hci3: command tx timeout [ 112.987972][ T6208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.998558][ T6767] netlink: 'syz.2.219': attribute type 1 has an invalid length. [ 113.010802][ T6208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.025867][ T6208] bond0 (unregistering): Released all slaves [ 113.146173][ T6767] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.222700][ T6768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.230502][ T6768] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 113.242151][ T6768] bond1: (slave vcan1): Error -95 calling set_mac_address [ 113.491296][ T6525] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 113.546187][ T6208] hsr_slave_0: left promiscuous mode [ 113.555569][ T6208] hsr_slave_1: left promiscuous mode [ 113.562930][ T6778] netlink: 104 bytes leftover after parsing attributes in process `syz.2.221'. [ 113.581025][ T6208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.589709][ T6208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.608338][ T6208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.617717][ T6208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.685960][ T6208] veth1_macvtap: left promiscuous mode [ 113.696030][ T6208] veth0_macvtap: left promiscuous mode [ 113.707259][ T6208] veth1_vlan: left promiscuous mode [ 113.712926][ T6208] veth0_vlan: left promiscuous mode [ 113.768209][ T5143] Bluetooth: hci4: command tx timeout [ 114.388374][ T6208] team0 (unregistering): Port device team_slave_1 removed [ 114.429919][ T6208] team0 (unregistering): Port device team_slave_0 removed [ 114.829118][ T6525] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 114.904956][ T6791] gretap0: entered promiscuous mode [ 114.912730][ T6791] vlan2: entered promiscuous mode [ 114.975600][ T6525] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 115.002821][ T6525] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 115.211313][ T6805] pim6reg: entered allmulticast mode [ 115.268263][ T6525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.285112][ T6525] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.305223][ T6217] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.312539][ T6217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.414141][ T6217] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.421361][ T6217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.531193][ T6525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.700844][ T6817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.234'. [ 115.757747][ T6545] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.814286][ T6822] netlink: 'syz.4.236': attribute type 1 has an invalid length. [ 115.834250][ T6545] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.862492][ T6545] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.948706][ T6822] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.044973][ T6827] bond2: (slave ip6gretap1): making interface the new active one [ 116.055238][ T6827] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 116.069702][ T6833] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 116.082277][ T6827] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 116.103844][ T6827] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 116.168126][ T6545] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.444259][ T6525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.574265][ T6545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.659234][ T6545] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.678004][ T6525] veth0_vlan: entered promiscuous mode [ 116.709132][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.716308][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.769822][ T6525] veth1_vlan: entered promiscuous mode [ 116.872214][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.879458][ T3549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.919062][ T6858] warning: `syz.2.244' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.056719][ T6525] veth0_macvtap: entered promiscuous mode [ 117.110114][ T6215] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 117.181200][ T6525] veth1_macvtap: entered promiscuous mode [ 117.215788][ T6877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.248'. [ 117.265410][ T6525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.284925][ T6525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.295989][ T6525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.308835][ T6525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.335249][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.469649][ T6525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.505401][ T6525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.524127][ T6525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.535300][ T6525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.547002][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.623137][ T6525] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.657833][ T6525] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.685607][ T6525] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.705853][ T6525] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.911504][ T6217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.939940][ T6217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.064824][ T6217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.097224][ T6217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.107237][ T6545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.156109][ T6909] netlink: 'syz.1.256': attribute type 1 has an invalid length. [ 118.183984][ T6909] netlink: 56 bytes leftover after parsing attributes in process `syz.1.256'. [ 118.274525][ T6545] veth0_vlan: entered promiscuous mode [ 118.290001][ T6215] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 118.494994][ T6545] veth1_vlan: entered promiscuous mode [ 118.630183][ T6545] veth0_macvtap: entered promiscuous mode [ 118.663435][ T6545] veth1_macvtap: entered promiscuous mode [ 118.743881][ T6545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.780979][ T6545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.821545][ T6545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.851937][ T6545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.874917][ T6545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.894414][ T6545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.906636][ T6545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.103120][ T6545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.134248][ T6545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.163498][ T6545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.191315][ T6545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.255072][ T6545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.277674][ T6545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.301031][ T6545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.437666][ T6208] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 119.553326][ T1903] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.698549][ T6545] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.707851][ T6545] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.716597][ T6545] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.745543][ T6545] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.831729][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.858726][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.868244][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 119.877153][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.888498][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 119.897119][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.577971][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 121.709322][ T3549] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 121.953642][ T1903] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.982617][ T6985] netlink: 'syz.4.273': attribute type 1 has an invalid length. [ 122.022622][ T5837] Bluetooth: hci3: command tx timeout [ 122.089972][ T1903] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.111146][ T6985] netlink: 'syz.4.273': attribute type 1 has an invalid length. [ 122.309238][ T1903] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.382494][ T6215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.410719][ T6215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.531747][ T3587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.541484][ T3587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.683245][ T6959] chnl_net:caif_netlink_parms(): no params data found [ 122.793628][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.279'. [ 122.842425][ T6217] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 123.269780][ T6959] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.293412][ T6959] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.325257][ T6959] bridge_slave_0: entered allmulticast mode [ 123.333078][ T6959] bridge_slave_0: entered promiscuous mode [ 123.422200][ T6959] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.466305][ T6959] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.498016][ T6959] bridge_slave_1: entered allmulticast mode [ 123.516239][ T6959] bridge_slave_1: entered promiscuous mode [ 123.550151][ T7020] netlink: 'syz.2.285': attribute type 15 has an invalid length. [ 123.601774][ T1903] bridge_slave_1: left allmulticast mode [ 123.609332][ T1903] bridge_slave_1: left promiscuous mode [ 123.616711][ T1903] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.656958][ T1903] bridge_slave_0: left allmulticast mode [ 123.673126][ T1903] bridge_slave_0: left promiscuous mode [ 123.718098][ T1903] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.752819][ T5143] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.776856][ T5143] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.786104][ T5143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 123.795255][ T5143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.804399][ T5143] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 123.812312][ T5143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.964379][ T3549] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 124.092360][ T5837] Bluetooth: hci3: command tx timeout [ 124.133888][ T1903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.146134][ T1903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.157583][ T1903] bond0 (unregistering): Released all slaves [ 124.185679][ T7022] tipc: Enabled bearer , priority 10 [ 124.231928][ T7023] syzkaller1: entered promiscuous mode [ 124.245229][ T7023] syzkaller1: entered allmulticast mode [ 124.260857][ T7033] veth0_vlan: left promiscuous mode [ 124.276732][ T7033] veth0_vlan: entered promiscuous mode [ 124.299983][ T6959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.451246][ T6959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.550343][ T6959] team0: Port device team_slave_0 added [ 124.697122][ T6959] team0: Port device team_slave_1 added [ 124.892548][ T1903] hsr_slave_0: left promiscuous mode [ 124.914049][ T1903] hsr_slave_1: left promiscuous mode [ 124.944440][ T1903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.981454][ T1903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.016490][ T1903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.058486][ T1903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.109325][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 125.119380][ T5899] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 125.135389][ T1903] veth1_macvtap: left promiscuous mode [ 125.141481][ T1903] veth0_macvtap: left promiscuous mode [ 125.155064][ T1903] veth1_vlan: left promiscuous mode [ 125.165330][ T1903] veth0_vlan: left promiscuous mode [ 125.178196][ T47] tipc: Node number set to 3798834098 [ 125.714230][ T1903] team0 (unregistering): Port device team_slave_1 removed [ 125.756620][ T1903] team0 (unregistering): Port device team_slave_0 removed [ 125.859257][ T5837] Bluetooth: hci4: command tx timeout [ 126.166114][ T6959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.174590][ T6959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.179739][ T5837] Bluetooth: hci3: command tx timeout [ 126.212433][ T6959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.248854][ T6215] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 126.367855][ T6959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.374973][ T6959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.425316][ T6959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.596828][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'. [ 126.688647][ T7085] netlink: 28 bytes leftover after parsing attributes in process `syz.2.302'. [ 126.725211][ T6959] hsr_slave_0: entered promiscuous mode [ 126.732733][ T6959] hsr_slave_1: entered promiscuous mode [ 127.130200][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.307'. [ 127.379419][ T6217] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 127.410654][ T7028] chnl_net:caif_netlink_parms(): no params data found [ 127.532017][ T3549] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.713266][ T7121] syzkaller0: entered promiscuous mode [ 127.727745][ T7121] syzkaller0: entered allmulticast mode [ 127.801096][ T3549] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.937744][ T5837] Bluetooth: hci4: command tx timeout [ 128.247812][ T5837] Bluetooth: hci3: command tx timeout [ 128.395832][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.315'. [ 128.532969][ T6217] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 128.653442][ T5143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 128.670754][ T5143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 128.686276][ T5143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 128.711885][ T5143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 128.732451][ T5143] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 128.740149][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.701820][ T6215] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 129.817847][ T3549] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.991116][ T3549] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.007710][ T5837] Bluetooth: hci4: command tx timeout [ 130.111413][ T7028] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.122811][ T7028] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.135018][ T7028] bridge_slave_0: entered allmulticast mode [ 130.146871][ T7028] bridge_slave_0: entered promiscuous mode [ 130.219686][ T7028] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.229874][ T7028] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.238357][ T7028] bridge_slave_1: entered allmulticast mode [ 130.246073][ T7028] bridge_slave_1: entered promiscuous mode [ 130.315559][ T7028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.390060][ T7028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.472606][ T7028] team0: Port device team_slave_0 added [ 130.487389][ T7028] team0: Port device team_slave_1 added [ 130.514879][ T3549] bridge_slave_1: left allmulticast mode [ 130.523985][ T3549] bridge_slave_1: left promiscuous mode [ 130.544241][ T3549] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.572730][ T3549] bridge_slave_0: left allmulticast mode [ 130.584466][ T3549] bridge_slave_0: left promiscuous mode [ 130.591467][ T3549] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.809345][ T5837] Bluetooth: hci1: command tx timeout [ 130.848920][ T3587] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 131.075713][ T3549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.092920][ T3549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.123866][ T3549] bond0 (unregistering): Released all slaves [ 131.143620][ T6959] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 131.158606][ T6959] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 131.279342][ T6959] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 131.296251][ T7028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.311511][ T7028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.338149][ T7028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.404038][ T6959] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 131.425217][ T7028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.457601][ T7028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.508205][ T7028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.863387][ T7028] hsr_slave_0: entered promiscuous mode [ 131.878288][ T7028] hsr_slave_1: entered promiscuous mode [ 131.884722][ T7028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.900891][ T7028] Cannot create hsr debugfs directory [ 131.949364][ T6217] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 132.085438][ T3549] hsr_slave_0: left promiscuous mode [ 132.091160][ T5837] Bluetooth: hci4: command tx timeout [ 132.108171][ T3549] hsr_slave_1: left promiscuous mode [ 132.116081][ T3549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.125207][ T3549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.133733][ T3549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.141885][ T3549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.165636][ T3549] veth1_macvtap: left promiscuous mode [ 132.171747][ T3549] veth0_macvtap: left promiscuous mode [ 132.178135][ T3549] veth1_vlan: left promiscuous mode [ 132.183545][ T3549] veth0_vlan: left promiscuous mode [ 132.865514][ T3549] team0 (unregistering): Port device team_slave_1 removed [ 132.888638][ T5837] Bluetooth: hci1: command tx timeout [ 132.916646][ T3549] team0 (unregistering): Port device team_slave_0 removed [ 133.089279][ T6208] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 133.132736][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.140081][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.366664][ T7132] chnl_net:caif_netlink_parms(): no params data found [ 133.668323][ T7190] gtp0: entered promiscuous mode [ 133.845730][ T7194] netlink: 76 bytes leftover after parsing attributes in process `syz.4.335'. [ 133.857104][ T7194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.335'. [ 133.865886][ T7132] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.865960][ T7132] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.866126][ T7132] bridge_slave_0: entered allmulticast mode [ 133.867294][ T7132] bridge_slave_0: entered promiscuous mode [ 133.897226][ T7132] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.906786][ T7132] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.922741][ T7132] bridge_slave_1: entered allmulticast mode [ 133.932000][ T7132] bridge_slave_1: entered promiscuous mode [ 134.062449][ T7132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.076493][ T7132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.158969][ T7132] team0: Port device team_slave_0 added [ 134.193261][ T6959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.212752][ T7132] team0: Port device team_slave_1 added [ 134.230017][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 134.338054][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.345067][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.379392][ T7132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.408497][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.428513][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.456821][ T7132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.507187][ T6959] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.556276][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.564112][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.612427][ T7132] hsr_slave_0: entered promiscuous mode [ 134.626221][ T7132] hsr_slave_1: entered promiscuous mode [ 134.635892][ T7132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.646014][ T7132] Cannot create hsr debugfs directory [ 134.659971][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.667186][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.675875][ T7028] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 134.724995][ T7028] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 134.744952][ T7028] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 134.769268][ T7028] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 134.791540][ T7217] syz.4.344[7217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.791646][ T7217] syz.4.344[7217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.806228][ T7217] syz.4.344[7217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.961186][ T7132] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.972770][ T5837] Bluetooth: hci1: command tx timeout [ 135.151508][ T7132] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.206771][ T7028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.285525][ T7028] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.321752][ T7028] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.332247][ T7028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.385470][ T7132] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.399292][ T6217] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 135.423453][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.430656][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.441998][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.449217][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.494381][ T6959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.520637][ T1903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.548392][ T1903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.559676][ T7132] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.621828][ T6225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.651996][ T6225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.725623][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.752553][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.759925][ T6959] veth0_vlan: entered promiscuous mode [ 135.774763][ T6959] veth1_vlan: entered promiscuous mode [ 135.861714][ T6225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.903627][ T6225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.934132][ T6217] ------------[ cut here ]------------ [ 135.940376][ T6217] WARNING: CPU: 0 PID: 6217 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3d1/0x440 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 135.943521][ T7242] netlink: 24 bytes leftover after parsing attributes in process `syz.1.352'. [ 135.950666][ T6217] Modules linked in: [ 135.964012][ T6217] CPU: 0 UID: 0 PID: 6217 Comm: kworker/u8:12 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0 [ 135.975531][ T6217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 135.981747][ T7028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.986030][ T6217] Workqueue: cfg80211 cfg80211_event_work [ 135.998791][ T6217] RIP: 0010:__cfg80211_ibss_joined+0x3d1/0x440 [ 136.005663][ T6217] Code: 0f 85 81 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 6b a2 7b f6 90 0f 0b 90 eb ba e8 60 a2 7b f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb aa e8 50 a2 7b f6 90 0f 0b 90 e9 c2 fd [ 136.026028][ T6217] RSP: 0018:ffffc90003517a20 EFLAGS: 00010293 [ 136.029659][ T6959] veth0_macvtap: entered promiscuous mode [ 136.032730][ T6217] RAX: ffffffff8b23d190 RBX: 0000000000000006 RCX: ffff888026041e00 [ 136.046180][ T6217] RDX: 0000000000000000 RSI: ffffffff8c0a9760 RDI: ffffffff8c5faee0 [ 136.054304][ T6217] RBP: ffffc90003517b00 R08: ffffffff942a48f7 R09: 1ffffffff285491e [ 136.062418][ T6217] R10: dffffc0000000000 R11: fffffbfff285491f R12: ffff88805a113338 [ 136.070550][ T6217] R13: 1ffff920006a2f4c R14: dffffc0000000000 R15: ffff88802a19cd90 [ 136.078667][ T6217] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 136.084092][ T6959] veth1_macvtap: entered promiscuous mode [ 136.087816][ T6217] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.100135][ T6217] CR2: 0000001b3081fffc CR3: 00000000616c2000 CR4: 00000000003526f0 [ 136.108235][ T6217] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 136.116630][ T6217] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 136.125180][ T6217] Call Trace: [ 136.128569][ T6217] [ 136.131547][ T6217] ? __warn+0x165/0x4d0 [ 136.135760][ T6217] ? __cfg80211_ibss_joined+0x3d1/0x440 [ 136.141574][ T6217] ? report_bug+0x2b3/0x500 [ 136.146144][ T6217] ? __cfg80211_ibss_joined+0x3d1/0x440 [ 136.151881][ T6217] ? handle_bug+0x60/0x90 [ 136.156268][ T6217] ? exc_invalid_op+0x1a/0x50 [ 136.161085][ T6217] ? asm_exc_invalid_op+0x1a/0x20 [ 136.166184][ T6217] ? __cfg80211_ibss_joined+0x3d0/0x440 [ 136.172160][ T6217] ? __cfg80211_ibss_joined+0x3d1/0x440 [ 136.177886][ T6217] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 136.183844][ T6217] ? lockdep_hardirqs_on+0x99/0x150 [ 136.189140][ T6217] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 136.195173][ T6217] ? cfg80211_event_work+0x27/0x40 [ 136.200437][ T6217] ? __pfx___mutex_lock+0x10/0x10 [ 136.205538][ T6217] cfg80211_process_wdev_events+0x3af/0x510 [ 136.211835][ T6217] ? process_scheduled_works+0x976/0x1840 [ 136.217793][ T6217] cfg80211_process_rdev_events+0xac/0x110 [ 136.224031][ T6217] cfg80211_event_work+0x2f/0x40 [ 136.229415][ T6217] process_scheduled_works+0xa66/0x1840 [ 136.235029][ T6217] ? __pfx_process_scheduled_works+0x10/0x10 [ 136.241216][ T6217] ? assign_work+0x364/0x3d0 [ 136.245872][ T6217] worker_thread+0x870/0xd30 [ 136.250721][ T6217] ? __kthread_parkme+0x169/0x1d0 [ 136.255800][ T6217] ? __pfx_worker_thread+0x10/0x10 [ 136.261643][ T6217] kthread+0x2f0/0x390 [ 136.265783][ T6217] ? __pfx_worker_thread+0x10/0x10 [ 136.271119][ T6217] ? __pfx_kthread+0x10/0x10 [ 136.275766][ T6217] ret_from_fork+0x4b/0x80 [ 136.280292][ T6217] ? __pfx_kthread+0x10/0x10 [ 136.285363][ T6217] ret_from_fork_asm+0x1a/0x30 [ 136.290265][ T6217] [ 136.293333][ T6217] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 136.300652][ T6217] CPU: 0 UID: 0 PID: 6217 Comm: kworker/u8:12 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0 [ 136.312489][ T6217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 136.322588][ T6217] Workqueue: cfg80211 cfg80211_event_work [ 136.328369][ T6217] Call Trace: [ 136.331684][ T6217] [ 136.334646][ T6217] dump_stack_lvl+0x241/0x360 [ 136.339384][ T6217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.344634][ T6217] ? __pfx__printk+0x10/0x10 [ 136.349318][ T6217] ? _printk+0xd5/0x120 [ 136.353536][ T6217] ? __init_begin+0x41000/0x41000 [ 136.358620][ T6217] ? vscnprintf+0x5d/0x90 [ 136.362996][ T6217] panic+0x349/0x880 [ 136.366938][ T6217] ? __warn+0x174/0x4d0 [ 136.371137][ T6217] ? __pfx_panic+0x10/0x10 [ 136.375608][ T6217] ? ret_from_fork_asm+0x1a/0x30 [ 136.380601][ T6217] __warn+0x344/0x4d0 [ 136.384642][ T6217] ? __cfg80211_ibss_joined+0x3d1/0x440 [ 136.390259][ T6217] report_bug+0x2b3/0x500 [ 136.394634][ T6217] ? __cfg80211_ibss_joined+0x3d1/0x440 [ 136.400239][ T6217] handle_bug+0x60/0x90 [ 136.404428][ T6217] exc_invalid_op+0x1a/0x50 [ 136.408948][ T6217] asm_exc_invalid_op+0x1a/0x20 [ 136.413820][ T6217] RIP: 0010:__cfg80211_ibss_joined+0x3d1/0x440 [ 136.420003][ T6217] Code: 0f 85 81 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 6b a2 7b f6 90 0f 0b 90 eb ba e8 60 a2 7b f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb aa e8 50 a2 7b f6 90 0f 0b 90 e9 c2 fd [ 136.439655][ T6217] RSP: 0018:ffffc90003517a20 EFLAGS: 00010293 [ 136.445743][ T6217] RAX: ffffffff8b23d190 RBX: 0000000000000006 RCX: ffff888026041e00 [ 136.453731][ T6217] RDX: 0000000000000000 RSI: ffffffff8c0a9760 RDI: ffffffff8c5faee0 [ 136.461716][ T6217] RBP: ffffc90003517b00 R08: ffffffff942a48f7 R09: 1ffffffff285491e [ 136.469701][ T6217] R10: dffffc0000000000 R11: fffffbfff285491f R12: ffff88805a113338 [ 136.477688][ T6217] R13: 1ffff920006a2f4c R14: dffffc0000000000 R15: ffff88802a19cd90 [ 136.485682][ T6217] ? __cfg80211_ibss_joined+0x3d0/0x440 [ 136.491271][ T6217] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 136.497183][ T6217] ? lockdep_hardirqs_on+0x99/0x150 [ 136.502416][ T6217] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 136.508341][ T6217] ? cfg80211_event_work+0x27/0x40 [ 136.513471][ T6217] ? __pfx___mutex_lock+0x10/0x10 [ 136.518524][ T6217] cfg80211_process_wdev_events+0x3af/0x510 [ 136.524623][ T6217] ? process_scheduled_works+0x976/0x1840 [ 136.530369][ T6217] cfg80211_process_rdev_events+0xac/0x110 [ 136.536199][ T6217] cfg80211_event_work+0x2f/0x40 [ 136.541153][ T6217] process_scheduled_works+0xa66/0x1840 [ 136.546738][ T6217] ? __pfx_process_scheduled_works+0x10/0x10 [ 136.552743][ T6217] ? assign_work+0x364/0x3d0 [ 136.557359][ T6217] worker_thread+0x870/0xd30 [ 136.561990][ T6217] ? __kthread_parkme+0x169/0x1d0 [ 136.567034][ T6217] ? __pfx_worker_thread+0x10/0x10 [ 136.572165][ T6217] kthread+0x2f0/0x390 [ 136.576278][ T6217] ? __pfx_worker_thread+0x10/0x10 [ 136.581407][ T6217] ? __pfx_kthread+0x10/0x10 [ 136.586018][ T6217] ret_from_fork+0x4b/0x80 [ 136.590453][ T6217] ? __pfx_kthread+0x10/0x10 [ 136.595072][ T6217] ret_from_fork_asm+0x1a/0x30 [ 136.599879][ T6217] [ 136.603172][ T6217] Kernel Offset: disabled [ 136.607560][ T6217] Rebooting in 86400 seconds..