last executing test programs: 1m31.441309285s ago: executing program 3 (id=3825): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) sendmmsg$alg(r1, &(0x7f0000000b40), 0x0, 0x0) 1m29.151538163s ago: executing program 2 (id=2639): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r2, 0x0, 0x6a) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x800, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) close(r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc}]}}}]}, 0x40}}, 0x0) 1m13.157822394s ago: executing program 3 (id=3825): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) sendmmsg$alg(r1, &(0x7f0000000b40), 0x0, 0x0) 1m11.936664624s ago: executing program 2 (id=2639): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r2, 0x0, 0x6a) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x800, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) close(r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc}]}}}]}, 0x40}}, 0x0) 58.285301172s ago: executing program 3 (id=3825): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) sendmmsg$alg(r1, &(0x7f0000000b40), 0x0, 0x0) 57.644720039s ago: executing program 2 (id=2639): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r2, 0x0, 0x6a) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x800, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) close(r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc}]}}}]}, 0x40}}, 0x0) 46.935566072s ago: executing program 3 (id=3825): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) sendmmsg$alg(r1, &(0x7f0000000b40), 0x0, 0x0) 44.171992439s ago: executing program 2 (id=2639): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r2, 0x0, 0x6a) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x800, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) close(r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc}]}}}]}, 0x40}}, 0x0) 27.041107562s ago: executing program 3 (id=3825): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) sendmmsg$alg(r1, &(0x7f0000000b40), 0x0, 0x0) 21.607005615s ago: executing program 2 (id=2639): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r2, 0x0, 0x6a) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x800, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) close(r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc}]}}}]}, 0x40}}, 0x0) 2.201625283s ago: executing program 4 (id=5822): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYRES8, @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x69) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000002500)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)='\x00', 0xfdef}], 0x1}], 0x1, 0x0) 2.143385111s ago: executing program 1 (id=5823): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, 0x0, 0x4000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) connect$netrom(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8}, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000524150df6cfc899f5cdb7364b90", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="2800128008000100736974001c00028008000100", @ANYBLOB="05"], 0x50}, 0x1, 0x4c00000000000000}, 0x0) 1.910269135s ago: executing program 4 (id=5825): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0xf0, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0xb0, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x30, 0x6, [@m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xf0}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, 0x0, 0x2, 0x0, 0x0, 0x0, {}, [@CTA_EXPECT_TIMEOUT={0x8}]}, 0x1c}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 1.870639712s ago: executing program 0 (id=5826): r0 = socket$inet6(0xa, 0x4, 0x101) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000300)=0x2, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40c8094, &(0x7f0000000280)={0xa, 0x4e21, 0x4, @mcast2}, 0x1c) 1.830470613s ago: executing program 4 (id=5827): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a3000000000280004802400"], 0xd8}}, 0x0) 1.801466747s ago: executing program 1 (id=5828): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.729206145s ago: executing program 0 (id=5829): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0100001000010000000000000000002001000000000000000000000000000200000000000000000000ffff7f1f000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000006c000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000002000100000000000000000008001f0000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005a"], 0x14c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x4c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9203effbb1bc"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x4c}}, 0x0) 1.728619733s ago: executing program 4 (id=5830): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@deltaction={0x2d8, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2e73}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x261}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x2d8}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0xc}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x1bc}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.706070822s ago: executing program 1 (id=5831): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) 1.653102778s ago: executing program 4 (id=5832): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 1.607130526s ago: executing program 0 (id=5833): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000000010000000000000000000000000000180001801400018008000100ac1414bb08000200ac0314bb240002801400018008b2a6eb93c60a14bd000100ac1414aa080002"], 0x50}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 1.584306044s ago: executing program 1 (id=5834): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5450, &(0x7f00000000c0)={'caif0\x00'}) 1.579973081s ago: executing program 0 (id=5835): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYRES8, @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x69) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000002500)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)='\x00', 0xfdef}], 0x1}], 0x1, 0x0) 1.523598827s ago: executing program 1 (id=5836): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x3, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1d}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r4, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000100001040000eb040100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x305, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000130400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468315f746f5f626f6e64000f0008000a00", @ANYRES32=r9], 0x3c}}, 0x0) r10 = accept4(r1, 0x0, 0x0, 0x0) r11 = accept4(r10, 0x0, 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xe, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6000000}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0) sendmmsg$inet6(r11, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 1.521773769s ago: executing program 4 (id=5837): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0xf0, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0xb0, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x30, 0x6, [@m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xf0}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, 0x0, 0x2, 0x0, 0x0, 0x0, {}, [@CTA_EXPECT_TIMEOUT={0x8}]}, 0x1c}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 1.471882292s ago: executing program 3 (id=3825): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) sendmmsg$alg(r1, &(0x7f0000000b40), 0x0, 0x0) 1.431103366s ago: executing program 0 (id=5838): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x2, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0xfffc, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9"}, 0x3c) 9.543822ms ago: executing program 0 (id=5839): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0xe8, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0xa8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_ACT={0x30, 0x6, [@m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe8}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x20, 0x0, 0x2, 0x0, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x7b}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 363.61µs ago: executing program 1 (id=5840): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a3000000000280004802400"], 0xd8}}, 0x0) 0s ago: executing program 2 (id=2639): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r2, 0x0, 0x6a) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x800, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) close(r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc}]}}}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): ve_0) entered disabled state [ 418.079271][T17958] bridge_slave_0: entered allmulticast mode [ 418.088786][T17958] bridge_slave_0: entered promiscuous mode [ 418.121903][T17958] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.130071][T17958] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.140626][T17958] bridge_slave_1: entered allmulticast mode [ 418.148630][T17958] bridge_slave_1: entered promiscuous mode [ 418.211854][T17958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.228519][ T1110] bridge_slave_1: left allmulticast mode [ 418.234323][ T1110] bridge_slave_1: left promiscuous mode [ 418.239998][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.253196][ T1110] bridge_slave_0: left allmulticast mode [ 418.258876][ T1110] bridge_slave_0: left promiscuous mode [ 418.270954][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.592786][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.606405][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.617365][ T1110] bond0 (unregistering): Released all slaves [ 418.637560][T17958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.734898][T17958] team0: Port device team_slave_0 added [ 418.751100][T17958] team0: Port device team_slave_1 added [ 418.901705][T17958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.908787][T17958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.935225][T17958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.949197][T17958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.957551][T17958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.010792][T17958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.163873][T17958] hsr_slave_0: entered promiscuous mode [ 419.189752][T17958] hsr_slave_1: entered promiscuous mode [ 419.217200][T17958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.231486][T17958] Cannot create hsr debugfs directory [ 419.371850][ T5106] Bluetooth: hci3: command tx timeout [ 419.377993][T17932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.611665][ T5106] Bluetooth: hci1: command tx timeout [ 419.617244][T18084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5179'. [ 419.656775][T17932] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.696159][ T1110] hsr_slave_0: left promiscuous mode [ 419.703301][ T1110] hsr_slave_1: left promiscuous mode [ 419.711604][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.720132][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.729128][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.736906][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.785078][ T1110] veth1_macvtap: left promiscuous mode [ 419.791486][ T1110] veth0_macvtap: left promiscuous mode [ 419.796982][T18093] validate_nla: 15 callbacks suppressed [ 419.797002][T18093] netlink: 'syz.4.5185': attribute type 1 has an invalid length. [ 419.797020][T18093] netlink: 9352 bytes leftover after parsing attributes in process `syz.4.5185'. [ 419.803654][ T1110] veth1_vlan: left promiscuous mode [ 419.819176][T18093] netlink: 'syz.4.5185': attribute type 1 has an invalid length. [ 419.820583][ T1110] veth0_vlan: left promiscuous mode [ 419.827151][T18093] netlink: 'syz.4.5185': attribute type 2 has an invalid length. [ 419.874463][T18093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5185'. [ 420.532287][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 420.584899][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 421.092193][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.099381][ T5126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.121912][T18113] pim6reg1: entered promiscuous mode [ 421.127276][T18113] pim6reg1: entered allmulticast mode [ 421.185846][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.193054][ T5126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.257717][T18124] netlink: 9352 bytes leftover after parsing attributes in process `syz.0.5197'. [ 421.452556][ T5106] Bluetooth: hci3: command tx timeout [ 421.691537][ T5106] Bluetooth: hci1: command tx timeout [ 421.773650][T17932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.858215][T17932] veth0_vlan: entered promiscuous mode [ 421.889041][T17932] veth1_vlan: entered promiscuous mode [ 421.955567][T17932] veth0_macvtap: entered promiscuous mode [ 421.980759][T17932] veth1_macvtap: entered promiscuous mode [ 422.037151][T18154] netlink: 9352 bytes leftover after parsing attributes in process `syz.1.5209'. [ 422.085931][T18156] pim6reg1: entered promiscuous mode [ 422.097825][T18156] pim6reg1: entered allmulticast mode [ 422.129018][T17958] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 422.183682][T17958] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 422.211111][T17932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.224249][T17932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.239256][T17932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.252942][T17932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.263309][T17932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.274328][T17932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.295357][T17932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.304428][T17958] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 422.330234][T17958] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 422.353661][T17932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.368324][T17932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.380251][T17932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.392926][T17932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.405137][T17932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.419710][T17932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.430168][T17932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.442156][T17932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.454977][T17932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.469083][T18168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5215'. [ 422.497257][T17932] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.513212][T17932] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.533544][T17932] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.543752][T17932] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.692330][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.710528][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.777713][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.792648][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.872651][T17958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.962639][T17958] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.994468][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.001628][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.020637][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.027816][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.341718][T17958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.358558][T18194] pim6reg1: entered promiscuous mode [ 423.369983][T18194] pim6reg1: entered allmulticast mode [ 423.515703][T17958] veth0_vlan: entered promiscuous mode [ 423.532089][ T5106] Bluetooth: hci3: command tx timeout [ 423.540584][T17958] veth1_vlan: entered promiscuous mode [ 423.593988][T17958] veth0_macvtap: entered promiscuous mode [ 423.616658][T17958] veth1_macvtap: entered promiscuous mode [ 423.684387][T17958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.704912][T17958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.718284][T17958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.741552][T17958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.752793][T17958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.768823][T17958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.779048][T17958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.790141][T17958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.803447][T17958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.826258][T17958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.852708][T17958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.863028][T17958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.874022][T17958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.889605][T17958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.903179][T17958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.913390][T17958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.925055][T17958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.935760][T17958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.946365][T17958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.959146][T17958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.004457][T17958] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.030390][T17958] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.039345][T17958] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.055448][T17958] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.166118][ T2810] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.320902][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.330834][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.371630][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.379887][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.332534][T18236] pim6reg1: entered promiscuous mode [ 425.338270][T18236] pim6reg1: entered allmulticast mode [ 425.523792][ T2810] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.617350][ T5099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 425.627645][ T5099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 425.636280][ T5099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 425.653668][ T5099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 425.667219][ T5099] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 425.683399][ T5099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 425.733390][ T2810] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.834443][T18250] lo speed is unknown, defaulting to 1000 [ 425.901837][ T2810] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.073433][T18271] pim6reg1: entered promiscuous mode [ 426.078795][T18271] pim6reg1: entered allmulticast mode [ 426.273004][ T2810] bridge_slave_1: left allmulticast mode [ 426.278716][ T2810] bridge_slave_1: left promiscuous mode [ 426.294710][ T2810] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.316083][ T2810] bridge_slave_0: left allmulticast mode [ 426.333905][ T2810] bridge_slave_0: left promiscuous mode [ 426.346162][ T2810] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.837147][ T2810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.849338][ T2810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.860540][ T2810] bond0 (unregistering): Released all slaves [ 426.905016][T18289] lo speed is unknown, defaulting to 1000 [ 427.238825][T18250] chnl_net:caif_netlink_parms(): no params data found [ 427.379193][ T2810] hsr_slave_0: left promiscuous mode [ 427.386099][ T2810] hsr_slave_1: left promiscuous mode [ 427.392789][ T2810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.400255][ T2810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.409327][ T2810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.417011][ T2810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.439026][ T2810] veth1_macvtap: left promiscuous mode [ 427.446466][ T2810] veth0_macvtap: left promiscuous mode [ 427.452865][ T2810] veth1_vlan: left promiscuous mode [ 427.458151][ T2810] veth0_vlan: left promiscuous mode [ 427.771644][ T5106] Bluetooth: hci1: command tx timeout [ 427.948921][ T2810] team0 (unregistering): Port device team_slave_1 removed [ 427.996135][ T2810] team0 (unregistering): Port device team_slave_0 removed [ 428.386088][ T5099] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 428.398245][ T5099] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 428.408715][ T5099] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 428.421022][ T5099] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 428.433419][ T5099] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 428.441006][ T5099] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 428.705626][T18304] ip_vti0: entered promiscuous mode [ 428.721465][T18304] vlan2: entered promiscuous mode [ 428.742223][T18304] ip_vti0: left promiscuous mode [ 429.048816][T18250] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.057999][T18250] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.066285][T18250] bridge_slave_0: entered allmulticast mode [ 429.074308][T18250] bridge_slave_0: entered promiscuous mode [ 429.160219][T18315] syzkaller0: entered promiscuous mode [ 429.166721][T18315] syzkaller0: entered allmulticast mode [ 429.176824][T18250] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.184564][T18250] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.195255][T18250] bridge_slave_1: entered allmulticast mode [ 429.206185][T18250] bridge_slave_1: entered promiscuous mode [ 429.219931][T18305] lo speed is unknown, defaulting to 1000 [ 429.408755][T18250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.422074][T18322] pim6reg1: entered promiscuous mode [ 429.427500][T18322] pim6reg1: entered allmulticast mode [ 429.479564][T18250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.852229][ T5106] Bluetooth: hci1: command tx timeout [ 430.493293][ T5106] Bluetooth: hci3: command tx timeout [ 431.027271][T18250] team0: Port device team_slave_0 added [ 431.065094][T18250] team0: Port device team_slave_1 added [ 431.131649][T18250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.138646][T18250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.168336][T18250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.250118][ T2810] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.280322][T18250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.287597][T18250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.323390][T18250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.396795][ T2810] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.442089][T18333] lo speed is unknown, defaulting to 1000 [ 431.526986][ T2810] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.632979][ T2810] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.670207][T18250] hsr_slave_0: entered promiscuous mode [ 431.677675][T18250] hsr_slave_1: entered promiscuous mode [ 431.687223][T18250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.695230][T18250] Cannot create hsr debugfs directory [ 431.896723][T18351] pim6reg1: entered promiscuous mode [ 431.912757][T18351] pim6reg1: entered allmulticast mode [ 431.931546][ T5106] Bluetooth: hci1: command tx timeout [ 432.034491][T18305] chnl_net:caif_netlink_parms(): no params data found [ 432.035201][T18355] Cannot find set identified by id 65535 to match [ 432.143371][ T2810] bridge_slave_1: left allmulticast mode [ 432.149066][ T2810] bridge_slave_1: left promiscuous mode [ 432.181910][ T2810] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.197415][T18359] Cannot find add_set index 0 as target [ 432.221112][ T2810] bridge_slave_0: left allmulticast mode [ 432.227168][ T2810] bridge_slave_0: left promiscuous mode [ 432.241639][ T2810] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.571363][ T5106] Bluetooth: hci3: command tx timeout [ 432.730227][ T2810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.747491][ T2810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.760971][ T2810] bond0 (unregistering): Released all slaves [ 432.886133][T18381] pim6reg1: entered promiscuous mode [ 432.891667][T18381] pim6reg1: entered allmulticast mode [ 433.186835][T18305] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.194647][T18305] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.227041][T18305] bridge_slave_0: entered allmulticast mode [ 433.243572][T18305] bridge_slave_0: entered promiscuous mode [ 433.254277][T18305] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.267538][T18305] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.276913][T18305] bridge_slave_1: entered allmulticast mode [ 433.284690][T18305] bridge_slave_1: entered promiscuous mode [ 433.375666][T18400] pim6reg1: entered promiscuous mode [ 433.385253][T18400] pim6reg1: entered allmulticast mode [ 433.438488][T18305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.451043][T18305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.564650][T18407] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5306'. [ 433.600278][T18305] team0: Port device team_slave_0 added [ 433.710488][ T2810] hsr_slave_0: left promiscuous mode [ 433.758773][ T2810] hsr_slave_1: left promiscuous mode [ 433.765680][ T2810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.774739][ T2810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.789710][ T2810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.797463][ T2810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.819612][ T2810] veth1_macvtap: left promiscuous mode [ 433.825368][ T2810] veth0_macvtap: left promiscuous mode [ 433.830982][ T2810] veth1_vlan: left promiscuous mode [ 433.836635][ T2810] veth0_vlan: left promiscuous mode [ 434.011422][ T5106] Bluetooth: hci1: command tx timeout [ 434.371425][ T2810] team0 (unregistering): Port device team_slave_1 removed [ 434.423508][ T2810] team0 (unregistering): Port device team_slave_0 removed [ 434.659143][ T5106] Bluetooth: hci3: command tx timeout [ 434.862753][T18305] team0: Port device team_slave_1 added [ 435.016343][T18305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.034792][T18305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.069166][T18305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.154996][T18305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.186943][T18305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.223022][T18305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.264837][T18431] pim6reg1: entered promiscuous mode [ 435.271287][T18431] pim6reg1: entered allmulticast mode [ 435.396024][T18439] syz.1.5317[18439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 435.396177][T18439] syz.1.5317[18439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 435.446632][T18250] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 435.500347][T18250] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 435.527864][T18250] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 435.561409][T18250] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 435.674839][T18305] hsr_slave_0: entered promiscuous mode [ 435.688569][T18305] hsr_slave_1: entered promiscuous mode [ 435.697091][T18305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.709180][T18305] Cannot create hsr debugfs directory [ 435.837880][T18452] syzkaller0: entered promiscuous mode [ 435.843942][T18452] syzkaller0: entered allmulticast mode [ 436.731558][ T5106] Bluetooth: hci3: command tx timeout [ 437.939748][T18480] syz.4.5334[18480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.939906][T18480] syz.4.5334[18480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 438.055179][T18250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.089792][T18475] pim6reg1: entered promiscuous mode [ 438.095869][T18475] pim6reg1: entered allmulticast mode [ 438.194313][T18250] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.211859][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.219025][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.303475][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.310688][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.639094][T18305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 438.664250][T18305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 438.700953][T18305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 438.759667][T18305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 438.786509][T18250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.862215][T18499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5340'. [ 439.023187][T18250] veth0_vlan: entered promiscuous mode [ 439.073124][T18250] veth1_vlan: entered promiscuous mode [ 439.133155][T18250] veth0_macvtap: entered promiscuous mode [ 439.159436][T18250] veth1_macvtap: entered promiscuous mode [ 439.244063][T18305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.306025][T18305] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.342624][T18250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.361037][T18250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.372601][T18250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.388392][T18250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.403636][T18250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.414688][T18250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.426792][T18250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.445888][ T5189] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.453089][ T5189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.479296][T18509] lo speed is unknown, defaulting to 1000 [ 439.482041][T18514] pim6reg1: entered promiscuous mode [ 439.491408][T18514] pim6reg1: entered allmulticast mode [ 439.502992][T18250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.529917][T18250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.547191][T18250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.559128][T18250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.578323][T18250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.589120][T18250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.608234][T18250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.631375][T18250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.643354][T18250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.652742][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.659959][ T5126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.724195][T18250] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.734200][T18250] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.743602][T18250] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.752485][T18250] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.039702][T18305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 440.052594][T18305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 440.253437][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.278304][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 440.287299][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.438047][T18534] syzkaller0: entered promiscuous mode [ 440.447932][T18534] syzkaller0: entered allmulticast mode [ 440.591967][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.620167][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.629877][T18543] pim6reg1: entered promiscuous mode [ 440.659451][T18543] pim6reg1: entered allmulticast mode [ 440.958354][T18305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.072503][T18305] veth0_vlan: entered promiscuous mode [ 441.095558][T18305] veth1_vlan: entered promiscuous mode [ 441.135336][T18305] veth0_macvtap: entered promiscuous mode [ 441.160889][T18305] veth1_macvtap: entered promiscuous mode [ 441.193598][T18568] lo speed is unknown, defaulting to 1000 [ 441.208115][T18570] tun0: tun_chr_ioctl cmd 1074025675 [ 441.222707][T18570] tun0: persist enabled [ 441.249741][T18305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.274760][T18305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.284852][T18305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.301371][T18305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.321228][T18305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.341280][T18305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.354715][T18305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.372612][T18305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.393050][T18305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.423321][T18305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.441581][T18305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.461981][T18305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.482341][T18305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.501282][T18305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.521292][T18305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.541228][T18305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.555899][T18305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.566476][T18305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.577426][T18305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.589510][T18305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.608238][T18305] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.619526][T18305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.629629][T18305] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.638668][T18305] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.669984][T18578] pim6reg1: entered promiscuous mode [ 441.675508][T18578] pim6reg1: entered allmulticast mode [ 441.832825][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.844646][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.009529][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.031435][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.111606][T18587] : renamed from ipvlan1 [ 442.735636][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.972945][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.038449][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.114250][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.251025][ T51] bridge_slave_1: left allmulticast mode [ 443.257507][ T51] bridge_slave_1: left promiscuous mode [ 443.265371][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.274473][ T51] bridge_slave_0: left allmulticast mode [ 443.280111][ T51] bridge_slave_0: left promiscuous mode [ 443.286364][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.743902][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.780706][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.803832][ T51] bond0 (unregistering): Released all slaves [ 443.832709][T18604] pim6reg1: entered promiscuous mode [ 443.838073][T18604] pim6reg1: entered allmulticast mode [ 443.914260][ T5099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 443.934088][ T5099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 443.943161][ T5099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 443.952892][ T5099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 443.960569][ T5099] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 443.970585][ T5099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 444.037068][T18607] lo speed is unknown, defaulting to 1000 [ 444.298025][ T51] hsr_slave_0: left promiscuous mode [ 444.309762][ T51] hsr_slave_1: left promiscuous mode [ 444.316537][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.324212][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.333463][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.340941][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.362095][ T51] veth1_macvtap: left promiscuous mode [ 444.367698][ T51] veth0_macvtap: left promiscuous mode [ 444.374897][ T51] veth1_vlan: left promiscuous mode [ 444.380290][ T51] veth0_vlan: left promiscuous mode [ 444.847129][ T51] team0 (unregistering): Port device team_slave_1 removed [ 444.889094][ T51] team0 (unregistering): Port device team_slave_0 removed [ 445.377309][ T5099] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 445.391545][ T5099] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 445.410942][ T5099] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 445.425938][ T5099] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 445.445732][ T5099] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 445.461889][ T5099] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 445.569092][T18614] lo speed is unknown, defaulting to 1000 [ 445.938280][T18607] chnl_net:caif_netlink_parms(): no params data found [ 446.018886][ T5099] Bluetooth: hci1: command tx timeout [ 446.288737][T18618] lo speed is unknown, defaulting to 1000 [ 446.409507][T18642] xt_CT: You must specify a L4 protocol and not use inversions on it [ 446.437616][T18607] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.471350][T18607] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.478645][T18607] bridge_slave_0: entered allmulticast mode [ 446.494332][T18607] bridge_slave_0: entered promiscuous mode [ 446.590573][T18607] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.606144][T18607] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.621756][T18607] bridge_slave_1: entered allmulticast mode [ 446.636520][T18607] bridge_slave_1: entered promiscuous mode [ 446.795185][T18607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.840953][T18607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.866614][T18652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5398'. [ 447.035076][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.122267][T18607] team0: Port device team_slave_0 added [ 447.174669][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.218215][T18607] team0: Port device team_slave_1 added [ 447.335696][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.434041][T18607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.459980][T18607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.499678][T18607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.531463][ T5099] Bluetooth: hci3: command tx timeout [ 447.608249][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.644807][T18607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.652980][T18607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.689132][T18607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.012585][T18607] hsr_slave_0: entered promiscuous mode [ 448.032152][T18607] hsr_slave_1: entered promiscuous mode [ 448.062664][T18607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.071014][T18607] Cannot create hsr debugfs directory [ 448.091702][ T5099] Bluetooth: hci1: command tx timeout [ 448.209310][T18671] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5401'. [ 448.503877][ T51] bridge_slave_1: left allmulticast mode [ 448.509672][ T51] bridge_slave_1: left promiscuous mode [ 448.541921][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.575441][ T51] bridge_slave_0: left allmulticast mode [ 448.594206][ T51] bridge_slave_0: left promiscuous mode [ 448.600632][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.116481][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.127967][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.139490][ T51] bond0 (unregistering): Released all slaves [ 449.190436][T18618] chnl_net:caif_netlink_parms(): no params data found [ 449.207271][T18681] lo speed is unknown, defaulting to 1000 [ 449.600496][T18618] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.612677][ T5099] Bluetooth: hci3: command tx timeout [ 449.620318][T18618] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.628820][T18618] bridge_slave_0: entered allmulticast mode [ 449.637111][T18618] bridge_slave_0: entered promiscuous mode [ 449.674083][T18618] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.689342][T18618] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.722746][T18618] bridge_slave_1: entered allmulticast mode [ 449.742270][T18618] bridge_slave_1: entered promiscuous mode [ 449.898721][T18618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.924592][ T51] hsr_slave_0: left promiscuous mode [ 449.945427][ T51] hsr_slave_1: left promiscuous mode [ 449.959736][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.967974][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.976845][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.984729][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.011442][ T51] veth1_macvtap: left promiscuous mode [ 450.017203][ T51] veth0_macvtap: left promiscuous mode [ 450.023543][ T51] veth1_vlan: left promiscuous mode [ 450.029036][ T51] veth0_vlan: left promiscuous mode [ 450.171518][ T5099] Bluetooth: hci1: command tx timeout [ 450.644295][ T51] team0 (unregistering): Port device team_slave_1 removed [ 450.699889][ T51] team0 (unregistering): Port device team_slave_0 removed [ 451.175542][T18618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.403023][T18618] team0: Port device team_slave_0 added [ 451.440090][T18618] team0: Port device team_slave_1 added [ 451.495668][T18618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.504959][T18618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.532017][T18618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.599619][T18618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.609553][T18618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.636116][T18618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.669197][T18607] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 451.691872][ T5099] Bluetooth: hci3: command tx timeout [ 451.714519][T18607] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 451.734050][T18618] hsr_slave_0: entered promiscuous mode [ 451.741398][T18618] hsr_slave_1: entered promiscuous mode [ 451.748673][T18618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 451.757473][T18618] Cannot create hsr debugfs directory [ 451.763412][T18607] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 451.818573][T18607] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 451.833663][T18721] bridge_slave_1: left allmulticast mode [ 451.839555][T18721] bridge_slave_1: left promiscuous mode [ 451.845602][T18721] bridge10: port 1(bridge_slave_1) entered disabled state [ 451.873640][T18721] veth1_to_bond: left allmulticast mode [ 451.879484][T18721] veth1_to_bond: left promiscuous mode [ 451.885607][T18721] bridge10: port 2(veth1_to_bond) entered disabled state [ 452.135313][T18607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.204437][T18607] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.220650][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.227977][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.251529][ T5099] Bluetooth: hci1: command tx timeout [ 452.316572][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.323854][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.530007][T18607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 452.632417][T18741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5428'. [ 452.660898][T18741] netlink: 'syz.0.5428': attribute type 6 has an invalid length. [ 452.684574][T18741] netlink: 'syz.0.5428': attribute type 5 has an invalid length. [ 452.807434][T18618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 452.849899][T18618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 452.886350][T18618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 452.926548][T18618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 452.998830][T18607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.147530][T18607] veth0_vlan: entered promiscuous mode [ 453.203240][T18607] veth1_vlan: entered promiscuous mode [ 453.279122][T18618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.340432][T18607] veth0_macvtap: entered promiscuous mode [ 453.382437][T18618] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.403842][T18607] veth1_macvtap: entered promiscuous mode [ 453.434213][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.441436][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.459562][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.466799][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.577733][T18607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.609894][T18607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.631311][T18607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.652026][T18607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.662227][T18607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.672805][T18607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.684707][T18607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.689832][T18763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5437'. [ 453.708308][T18763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5437'. [ 453.726720][T18607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.755689][T18607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.771582][ T5099] Bluetooth: hci3: command tx timeout [ 453.787262][T18607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.809168][T18607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.829051][T18607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.841643][T18607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.867561][T18607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.890345][T18607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.912960][T18607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.944401][T18607] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.961372][T18607] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.990490][T18607] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.008618][T18607] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.212119][ T2828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.220140][ T2828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.300932][ T528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.319423][ T528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.358718][T18618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.453029][T18618] veth0_vlan: entered promiscuous mode [ 454.475445][T18618] veth1_vlan: entered promiscuous mode [ 454.530410][T18618] veth0_macvtap: entered promiscuous mode [ 454.545006][T18618] veth1_macvtap: entered promiscuous mode [ 454.597701][T18618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.631539][T18618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.646048][T18618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.658444][T18618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.668956][T18618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.683199][T18618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.697979][T18618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.708535][T18618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.723438][T18618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.776700][T18788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5446'. [ 454.801704][T18618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.837085][T18618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.850883][T18618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.884839][T18618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.918005][T18618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.944578][T18618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.961943][T18618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.974372][T18618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.985052][T18618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.997030][T18618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.009335][T18618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.047591][T18798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5451'. [ 455.073161][T18618] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.075352][T18798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5451'. [ 455.099599][T18618] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.110597][T18618] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.126441][T18618] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.173789][T18805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5454'. [ 455.229752][T18805] bridge_slave_1: left allmulticast mode [ 455.236991][T18805] bridge_slave_1: left promiscuous mode [ 455.248961][T18805] bridge5: port 1(bridge_slave_1) entered disabled state [ 455.271055][T18805] bridge7: port 1(bridge_slave_1) entered blocking state [ 455.287900][T18805] bridge7: port 1(bridge_slave_1) entered disabled state [ 455.298798][T18805] bridge_slave_1: entered allmulticast mode [ 455.312756][T18805] bridge_slave_1: entered promiscuous mode [ 455.350325][T18810] bridge7: port 2(veth1_to_bond) entered blocking state [ 455.365938][T18810] bridge7: port 2(veth1_to_bond) entered disabled state [ 455.385786][T18810] veth1_to_bond: entered allmulticast mode [ 455.395408][T18810] veth1_to_bond: entered promiscuous mode [ 455.512947][ T528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.524181][ T528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.607366][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.631678][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.860685][T18832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5465'. [ 455.874848][T18832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5465'. [ 456.530838][T18861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5479'. [ 457.368666][ T1110] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.069337][ T5106] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 458.078583][ T5106] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 458.088840][ T5106] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 458.099547][ T5106] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 458.109811][ T5106] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 458.118390][ T5106] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 458.153387][T18888] lo speed is unknown, defaulting to 1000 [ 458.345777][T18888] chnl_net:caif_netlink_parms(): no params data found [ 458.423989][ T1110] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.455798][T18888] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.463151][T18888] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.470335][T18888] bridge_slave_0: entered allmulticast mode [ 458.477477][T18888] bridge_slave_0: entered promiscuous mode [ 458.500901][ T1110] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.517044][T18888] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.524425][T18888] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.531790][T18888] bridge_slave_1: entered allmulticast mode [ 458.539251][T18888] bridge_slave_1: entered promiscuous mode [ 458.568742][T18888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.596207][ T1110] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.611101][T18888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.653993][T18888] team0: Port device team_slave_0 added [ 458.665479][T18888] team0: Port device team_slave_1 added [ 458.703712][T18888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.710699][T18888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.739135][T18888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.751986][T18888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.758967][T18888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.785014][T18888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.856911][ T1110] bridge_slave_1: left allmulticast mode [ 458.862730][ T1110] bridge_slave_1: left promiscuous mode [ 458.868405][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.878781][ T1110] bridge_slave_0: left allmulticast mode [ 458.884961][ T1110] bridge_slave_0: left promiscuous mode [ 458.890647][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.258419][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.271910][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.285611][ T1110] bond0 (unregistering): Released all slaves [ 459.300328][T18888] hsr_slave_0: entered promiscuous mode [ 459.307510][T18888] hsr_slave_1: entered promiscuous mode [ 459.314065][T18888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.328826][T18888] Cannot create hsr debugfs directory [ 459.615375][T18900] __nla_validate_parse: 1 callbacks suppressed [ 459.615396][T18900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5490'. [ 459.672162][T18900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5490'. [ 460.057186][ T5099] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 460.079919][ T5099] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 460.094658][ T5099] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 460.105954][ T5099] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 460.116369][ T5099] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 460.130545][ T5099] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 460.150669][ T1110] hsr_slave_0: left promiscuous mode [ 460.158710][ T1110] hsr_slave_1: left promiscuous mode [ 460.172670][ T5106] Bluetooth: hci1: command tx timeout [ 460.211427][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.221507][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.229954][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.237549][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.278712][ T1110] veth1_macvtap: left promiscuous mode [ 460.285928][ T1110] veth0_macvtap: left promiscuous mode [ 460.298382][ T1110] veth1_vlan: left promiscuous mode [ 460.309590][ T1110] veth0_vlan: left promiscuous mode [ 460.441043][T18933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5506'. [ 460.459636][T18933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5506'. [ 460.965169][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 461.015663][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 461.574745][T18916] lo speed is unknown, defaulting to 1000 [ 461.751284][T18951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.808476][T18952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.862708][T18888] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 461.891908][T18951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5512'. [ 461.925181][T18888] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 462.010024][T18888] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 462.037290][T18888] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 462.110669][T18960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5518'. [ 462.134417][T18960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5518'. [ 462.173044][ T5106] Bluetooth: hci3: command tx timeout [ 462.247583][ T1110] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.257242][ T5106] Bluetooth: hci1: command tx timeout [ 462.338337][ T1110] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.418411][ T1110] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.475577][T18916] chnl_net:caif_netlink_parms(): no params data found [ 462.527752][ T1110] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.584267][T18888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.651288][T18916] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.666021][T18916] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.673633][T18916] bridge_slave_0: entered allmulticast mode [ 462.680526][T18916] bridge_slave_0: entered promiscuous mode [ 462.696576][T18916] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.705026][T18916] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.712571][T18916] bridge_slave_1: entered allmulticast mode [ 462.719441][T18916] bridge_slave_1: entered promiscuous mode [ 462.777528][T18888] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.787545][ T1110] bridge_slave_1: left allmulticast mode [ 462.796117][ T1110] bridge_slave_1: left promiscuous mode [ 462.802091][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.814354][ T1110] bridge_slave_0: left allmulticast mode [ 462.820027][ T1110] bridge_slave_0: left promiscuous mode [ 462.830808][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.328313][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.343770][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.354820][ T1110] bond0 (unregistering): Released all slaves [ 463.374554][T18916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.388880][T18916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.449886][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.457106][ T5126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.509755][T18916] team0: Port device team_slave_0 added [ 463.538277][T18916] team0: Port device team_slave_1 added [ 463.553993][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.561242][ T5126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.687084][T18916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.700441][T18916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.738302][T18916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.769973][T18916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.782937][T18916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.811055][T18916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.871869][T18994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5530'. [ 463.881011][T18994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5530'. [ 464.117424][T18916] hsr_slave_0: entered promiscuous mode [ 464.131851][T18999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.165020][T18916] hsr_slave_1: entered promiscuous mode [ 464.186190][T18999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5532'. [ 464.205313][T18916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.219908][T18916] Cannot create hsr debugfs directory [ 464.247910][ T1110] hsr_slave_0: left promiscuous mode [ 464.258267][ T1110] hsr_slave_1: left promiscuous mode [ 464.266119][ T5106] Bluetooth: hci3: command tx timeout [ 464.282028][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.300503][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.308823][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.318651][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.332207][ T5106] Bluetooth: hci1: command tx timeout [ 464.365235][ T1110] veth1_macvtap: left promiscuous mode [ 464.370915][ T1110] veth0_macvtap: left promiscuous mode [ 464.377038][ T1110] veth1_vlan: left promiscuous mode [ 464.383689][ T1110] veth0_vlan: left promiscuous mode [ 464.629835][T19020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5541'. [ 464.651481][T19020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5541'. [ 465.089184][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 465.130147][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 466.179557][T18888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.220332][T19057] pim6reg1: entered promiscuous mode [ 466.232508][T19057] pim6reg1: entered allmulticast mode [ 466.333331][ T5106] Bluetooth: hci3: command tx timeout [ 466.346321][T19062] Bluetooth: MGMT ver 1.22 [ 466.415657][ T5106] Bluetooth: hci1: command tx timeout [ 466.459191][T19062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5556'. [ 466.461428][T18888] veth0_vlan: entered promiscuous mode [ 466.509126][T18888] veth1_vlan: entered promiscuous mode [ 466.750578][T18916] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 466.798181][T18888] veth0_macvtap: entered promiscuous mode [ 466.828885][T18916] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 466.860806][T18916] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 466.903373][T18888] veth1_macvtap: entered promiscuous mode [ 466.913113][T18916] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 466.970883][T18888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.996194][T18888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.006704][T18888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.031558][T18888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.054232][T18888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.068196][T18888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.080033][T18888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.123734][T18888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.152212][T18888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.170704][T18888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.189175][T18888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.200024][T18888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.241434][T18888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.257096][T18888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.270138][T18888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.292357][T18888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.319967][T18888] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.346213][T18888] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.367811][T18888] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.378264][T18888] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.590110][T19111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5575'. [ 467.599735][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.622135][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.641810][T19111] netlink: 'syz.4.5575': attribute type 6 has an invalid length. [ 467.649595][T19111] netlink: 'syz.4.5575': attribute type 5 has an invalid length. [ 467.794867][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.814462][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.827258][T18916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.897202][T18916] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.949348][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.956601][ T5126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.031676][T19117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5578'. [ 468.122973][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.130145][ T5126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.160872][T19118] netlink: 'syz.0.5578': attribute type 15 has an invalid length. [ 468.411831][ T5106] Bluetooth: hci3: command tx timeout [ 468.495003][T19127] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5581'. [ 468.754547][ T2810] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.801264][T19127] bridge_slave_1: left allmulticast mode [ 468.831083][T19127] bridge_slave_1: left promiscuous mode [ 468.850125][T19127] bridge7: port 1(bridge_slave_1) entered disabled state [ 468.872278][T19127] bridge8: port 1(bridge_slave_1) entered blocking state [ 468.879488][T19127] bridge8: port 1(bridge_slave_1) entered disabled state [ 468.887422][T19127] bridge_slave_1: entered allmulticast mode [ 468.896261][T19127] bridge_slave_1: entered promiscuous mode [ 468.908334][T19132] veth1_to_bond: left allmulticast mode [ 468.915056][T19132] veth1_to_bond: left promiscuous mode [ 468.920835][T19132] bridge7: port 2(veth1_to_bond) entered disabled state [ 468.930346][T19132] bridge8: port 2(veth1_to_bond) entered blocking state [ 468.937600][T19132] bridge8: port 2(veth1_to_bond) entered disabled state [ 468.944877][T19132] veth1_to_bond: entered allmulticast mode [ 468.951876][T19132] veth1_to_bond: entered promiscuous mode [ 468.995048][T18916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.043738][T18916] veth0_vlan: entered promiscuous mode [ 469.057305][T18916] veth1_vlan: entered promiscuous mode [ 469.103864][ T2810] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.125724][T18916] veth0_macvtap: entered promiscuous mode [ 469.135451][T18916] veth1_macvtap: entered promiscuous mode [ 469.159865][T18916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.170972][T18916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.181655][T18916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.194110][T18916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.204362][T18916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.215326][T18916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.225353][T18916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.235863][T18916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.247601][T18916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.265499][T18916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.276216][T18916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.286389][T18916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.299886][T18916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.310209][T18916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.323050][T18916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.332967][T18916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.343594][T18916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.353459][T18916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.364063][T18916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.375751][T18916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.391005][T18916] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.399927][T18916] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.409351][T18916] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.418721][T18916] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.489670][ T2810] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.520383][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.534916][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.562902][ T2810] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.590139][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.599377][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.725753][ T2810] bridge_slave_1: left allmulticast mode [ 469.731675][ T2810] bridge_slave_1: left promiscuous mode [ 469.737351][ T2810] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.747234][ T2810] bridge_slave_0: left allmulticast mode [ 469.753475][ T2810] bridge_slave_0: left promiscuous mode [ 469.759139][ T2810] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.251801][ T2810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.289865][ T2810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.324361][ T2810] bond0 (unregistering): Released all slaves [ 470.366631][T19139] bridge_slave_1: left allmulticast mode [ 470.373422][T19139] bridge_slave_1: left promiscuous mode [ 470.389525][T19139] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.485692][ T5099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 470.499088][ T5099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 470.509365][ T5099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 470.520332][ T5099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 470.544480][ T5099] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 470.561673][ T5099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 470.839071][T19153] lo speed is unknown, defaulting to 1000 [ 471.021566][T19171] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5594'. [ 471.080022][T19171] bridge2: port 1(bridge_slave_1) entered blocking state [ 471.097463][T19171] bridge2: port 1(bridge_slave_1) entered disabled state [ 471.115210][T19171] bridge_slave_1: entered allmulticast mode [ 471.133733][T19171] bridge_slave_1: entered promiscuous mode [ 471.162861][T19171] bridge2: port 1(bridge_slave_1) entered blocking state [ 471.170119][T19171] bridge2: port 1(bridge_slave_1) entered forwarding state [ 471.221669][T19173] bridge2: port 2(veth1_to_bond) entered blocking state [ 471.228767][T19173] bridge2: port 2(veth1_to_bond) entered disabled state [ 471.324752][T19173] veth1_to_bond: entered allmulticast mode [ 471.346080][T19173] veth1_to_bond: entered promiscuous mode [ 471.357981][T19173] bridge2: port 2(veth1_to_bond) entered blocking state [ 471.365144][T19173] bridge2: port 2(veth1_to_bond) entered forwarding state [ 471.479057][ T2810] hsr_slave_0: left promiscuous mode [ 471.558808][ T2810] hsr_slave_1: left promiscuous mode [ 471.571473][ T2810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.583860][ T2810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.602501][ T2810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.610056][ T2810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.669367][ T2810] veth1_macvtap: left promiscuous mode [ 471.681488][ T2810] veth0_macvtap: left promiscuous mode [ 471.689930][ T2810] veth1_vlan: left promiscuous mode [ 471.700314][ T2810] veth0_vlan: left promiscuous mode [ 472.567421][ T2810] team0 (unregistering): Port device team_slave_1 removed [ 472.639891][ T2810] team0 (unregistering): Port device team_slave_0 removed [ 472.658785][ T5106] Bluetooth: hci1: command tx timeout [ 473.292255][ T5106] Bluetooth: hci0: command 0x0406 tx timeout [ 473.843306][T19153] chnl_net:caif_netlink_parms(): no params data found [ 473.995644][ T5106] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 474.006210][ T5106] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 474.023294][ T5106] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 474.032891][ T5106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 474.040643][ T5106] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 474.048175][ T5106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 474.194505][ T2810] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.321863][T19153] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.329073][T19153] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.342184][T19153] bridge_slave_0: entered allmulticast mode [ 474.349636][T19153] bridge_slave_0: entered promiscuous mode [ 474.456880][ T2810] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.503423][T19197] lo speed is unknown, defaulting to 1000 [ 474.505233][T19153] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.543538][T19153] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.550882][T19153] bridge_slave_1: entered allmulticast mode [ 474.591089][T19153] bridge_slave_1: entered promiscuous mode [ 474.731958][ T5106] Bluetooth: hci1: command tx timeout [ 474.797240][ T2810] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.877779][T19153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.914150][T19153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.987748][ T2810] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.158382][T19153] team0: Port device team_slave_0 added [ 475.185909][T19153] team0: Port device team_slave_1 added [ 475.262339][T19153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.269378][T19153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.308777][T19153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.356869][T19153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.371913][T19153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.399670][T19153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.552791][ T2810] bridge_slave_1: left allmulticast mode [ 475.559803][ T2810] bridge_slave_1: left promiscuous mode [ 475.569784][ T2810] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.586226][ T2810] bridge_slave_0: left allmulticast mode [ 475.592165][ T2810] bridge_slave_0: left promiscuous mode [ 475.598084][ T2810] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.096563][ T5106] Bluetooth: hci3: command tx timeout [ 476.309169][ T2810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.356537][ T2810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.379690][ T2810] bond0 (unregistering): Released all slaves [ 476.417316][T19153] hsr_slave_0: entered promiscuous mode [ 476.428076][T19153] hsr_slave_1: entered promiscuous mode [ 476.440166][T19153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.458792][T19153] Cannot create hsr debugfs directory [ 476.811545][ T5106] Bluetooth: hci1: command tx timeout [ 476.874732][T19257] bridge_slave_1: left allmulticast mode [ 476.880426][T19257] bridge_slave_1: left promiscuous mode [ 476.894753][T19257] bridge8: port 1(bridge_slave_1) entered disabled state [ 477.005308][T19261] veth1_to_bond: left allmulticast mode [ 477.010916][T19261] veth1_to_bond: left promiscuous mode [ 477.036316][T19261] bridge8: port 2(veth1_to_bond) entered disabled state [ 477.169661][T19197] chnl_net:caif_netlink_parms(): no params data found [ 477.423762][ T2810] hsr_slave_0: left promiscuous mode [ 477.429828][ T2810] hsr_slave_1: left promiscuous mode [ 477.444266][ T2810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.456838][ T2810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.471385][ T2810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.478969][ T2810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.524058][ T2810] veth1_macvtap: left promiscuous mode [ 477.529791][ T2810] veth0_macvtap: left promiscuous mode [ 477.537180][ T2810] veth1_vlan: left promiscuous mode [ 477.542811][ T2810] veth0_vlan: left promiscuous mode [ 478.171624][ T5106] Bluetooth: hci3: command tx timeout [ 478.243131][T19276] netlink: 'syz.1.5631': attribute type 11 has an invalid length. [ 478.332611][T19277] netlink: 'syz.1.5631': attribute type 11 has an invalid length. [ 478.423486][ T2810] team0 (unregistering): Port device team_slave_1 removed [ 478.525843][ T2810] team0 (unregistering): Port device team_slave_0 removed [ 478.898000][ T5106] Bluetooth: hci1: command tx timeout [ 479.817350][T19293] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5635'. [ 479.877440][T19296] netlink: 165 bytes leftover after parsing attributes in process `syz.1.5637'. [ 479.917467][T19197] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.942849][T19197] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.961603][T19197] bridge_slave_0: entered allmulticast mode [ 479.969016][T19197] bridge_slave_0: entered promiscuous mode [ 480.011519][T19197] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.019105][T19197] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.044084][T19197] bridge_slave_1: entered allmulticast mode [ 480.067463][T19197] bridge_slave_1: entered promiscuous mode [ 480.160061][T19197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.180475][T19197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.252514][ T5099] Bluetooth: hci3: command tx timeout [ 480.296636][T19197] team0: Port device team_slave_0 added [ 480.317509][T19197] team0: Port device team_slave_1 added [ 480.408146][T19197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.424511][T19197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.452117][T19197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.476170][T19197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.492497][T19197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.527076][T19197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.577694][T19153] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 480.593452][T19153] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 480.721225][T19153] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 480.740853][T19310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5641'. [ 480.762772][T19310] vlan3: entered promiscuous mode [ 480.813831][T19197] hsr_slave_0: entered promiscuous mode [ 480.838774][T19197] hsr_slave_1: entered promiscuous mode [ 480.861346][T19197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.879174][T19197] Cannot create hsr debugfs directory [ 480.892776][T19153] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 481.051476][ T5104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 481.061611][ T5104] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 481.070357][ T5104] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 481.093764][ T5104] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 481.118011][ T5104] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 481.125692][ T5104] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 481.227180][T19316] lo speed is unknown, defaulting to 1000 [ 481.607757][T19153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.784317][T19153] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.942812][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.950044][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.971166][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.978587][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.164570][T19197] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 482.192955][T19316] chnl_net:caif_netlink_parms(): no params data found [ 482.216684][T19197] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 482.331805][ T5104] Bluetooth: hci3: command 0x0419 tx timeout [ 482.373068][T19197] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 482.415999][T19197] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 482.610345][T19316] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.626897][T19316] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.637813][T19316] bridge_slave_0: entered allmulticast mode [ 482.656438][T19316] bridge_slave_0: entered promiscuous mode [ 482.713178][T19316] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.730622][T19316] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.741451][T19316] bridge_slave_1: entered allmulticast mode [ 482.749732][T19316] bridge_slave_1: entered promiscuous mode [ 482.843121][T19316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.870275][T19316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.960975][T19316] team0: Port device team_slave_0 added [ 482.986442][T19316] team0: Port device team_slave_1 added [ 483.060137][T19153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.069495][T19316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.077645][T19316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.105426][T19316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.118623][T19316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.126014][T19316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.155322][T19316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.211528][ T5106] Bluetooth: hci4: command tx timeout [ 483.321836][T19316] hsr_slave_0: entered promiscuous mode [ 483.328896][T19316] hsr_slave_1: entered promiscuous mode [ 483.336828][T19316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 483.370513][T19316] Cannot create hsr debugfs directory [ 483.536100][T19197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.653007][T19153] veth0_vlan: entered promiscuous mode [ 483.837153][T19197] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.909947][T19153] veth1_vlan: entered promiscuous mode [ 483.921950][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.929167][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.037697][T19316] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.050079][T19316] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.064037][T19316] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 484.075241][T19316] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 56968 - 0 [ 484.100692][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.107900][ T5126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.210418][T19316] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.221674][T19316] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.232677][T19316] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 484.244097][T19316] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 56968 - 0 [ 484.366826][T19316] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.378129][T19316] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.390314][T19316] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 484.402162][T19316] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 56968 - 0 [ 484.428570][T19153] veth0_macvtap: entered promiscuous mode [ 484.431197][ T5106] Bluetooth: hci3: command 0x0419 tx timeout [ 484.437586][T19380] netem: unknown loss type 0 [ 484.446353][T19380] netem: change failed [ 484.488336][T19153] veth1_macvtap: entered promiscuous mode [ 484.550361][T19316] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.570987][T19316] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.590872][T19316] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 484.641550][T19316] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 56968 - 0 [ 484.788081][T19153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.823312][T19153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.851586][T19153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.863431][T19153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.874476][T19153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.885578][T19153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.897714][T19153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.134732][T19153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.165635][T19153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.181497][T19153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.200064][T19153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.210283][T19153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.231549][T19153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.250153][T19153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.291471][ T5106] Bluetooth: hci4: command tx timeout [ 485.291980][T19153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.326824][T19153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.349998][T19153] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.361779][T19153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.370662][T19153] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.383584][T19153] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.479171][T19316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 485.575556][T19316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 485.590867][T19316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 485.706841][T19406] syzkaller0: entered promiscuous mode [ 485.712796][T19406] syzkaller0: entered allmulticast mode [ 485.719819][T19316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 485.755875][T19415] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 487.384043][ T5106] Bluetooth: hci4: command tx timeout [ 487.479899][T19197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.555643][T19419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5676'. [ 487.576509][ T528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.604631][ T528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.653508][T19419] netlink: 'syz.0.5676': attribute type 15 has an invalid length. [ 487.668711][ T2810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.684297][ T2810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.689598][T19197] veth0_vlan: entered promiscuous mode [ 487.783154][T19428] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.5678'. [ 487.784034][T19197] veth1_vlan: entered promiscuous mode [ 487.917022][T19316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.973878][T19316] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.033846][T19197] veth0_macvtap: entered promiscuous mode [ 488.044682][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.051893][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.066544][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.073779][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.133488][T19197] veth1_macvtap: entered promiscuous mode [ 488.181907][T19197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.203734][T19197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.218949][T19197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.230007][T19197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.240261][T19197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.251006][T19197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.264941][T19197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.275573][T19197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.287042][T19197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.305497][T19197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.317675][T19197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.328433][T19197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.342147][T19197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.353838][T19197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.364375][T19197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.376052][T19197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.387199][T19197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.397815][T19197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.408602][T19197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.432411][T19197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.543568][T19456] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5688'. [ 488.595475][T19451] syzkaller0: entered promiscuous mode [ 488.601077][T19451] syzkaller0: entered allmulticast mode [ 488.614484][T19197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.631606][T19197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.649493][T19197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.666911][T19197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.724129][ T2828] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.453079][ T5106] Bluetooth: hci4: command tx timeout [ 490.043252][T19459] netlink: 'syz.1.5689': attribute type 1 has an invalid length. [ 490.069197][T19459] netlink: 9388 bytes leftover after parsing attributes in process `syz.1.5689'. [ 490.235199][ T5104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 490.247297][ T5104] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 490.263300][ T5104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 490.284445][ T5104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 490.309016][ T5104] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 490.321847][ T5104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 490.531582][ T2828] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.687419][ T2828] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.717839][T19462] lo speed is unknown, defaulting to 1000 [ 490.837685][ T2828] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.001387][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.009254][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.126034][T19316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.162167][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.201567][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.239595][ T2828] bridge_slave_1: left allmulticast mode [ 491.248653][ T2828] bridge_slave_1: left promiscuous mode [ 491.256375][ T2828] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.258044][T19490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5698'. [ 491.275313][ T2828] bridge_slave_0: left allmulticast mode [ 491.283994][ T2828] bridge_slave_0: left promiscuous mode [ 491.289867][ T2828] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.740954][ T2828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.754453][ T2828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.765594][ T2828] bond0 (unregistering): Released all slaves [ 491.918868][T19496] syzkaller0: entered promiscuous mode [ 491.925191][T19496] syzkaller0: entered allmulticast mode [ 492.415742][ T5106] Bluetooth: hci1: command tx timeout [ 493.730390][T19506] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5701'. [ 494.179035][T19316] veth0_vlan: entered promiscuous mode [ 494.199117][T19316] veth1_vlan: entered promiscuous mode [ 494.280564][T19462] chnl_net:caif_netlink_parms(): no params data found [ 494.310022][ T2828] hsr_slave_0: left promiscuous mode [ 494.322642][ T2828] hsr_slave_1: left promiscuous mode [ 494.328799][ T2828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.337811][ T2828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.345939][ T2828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.356079][ T2828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.380450][ T2828] veth1_macvtap: left promiscuous mode [ 494.386059][ T2828] veth0_macvtap: left promiscuous mode [ 494.392264][ T2828] veth1_vlan: left promiscuous mode [ 494.398094][ T2828] veth0_vlan: left promiscuous mode [ 494.491667][ T5106] Bluetooth: hci1: command tx timeout [ 494.925554][ T2828] team0 (unregistering): Port device team_slave_1 removed [ 494.978318][ T2828] team0 (unregistering): Port device team_slave_0 removed [ 495.570025][T19462] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.578762][T19462] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.587881][T19462] bridge_slave_0: entered allmulticast mode [ 495.595864][T19462] bridge_slave_0: entered promiscuous mode [ 495.612448][T19462] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.619694][T19462] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.629946][T19462] bridge_slave_1: entered allmulticast mode [ 495.638150][T19462] bridge_slave_1: entered promiscuous mode [ 495.677245][T19316] veth0_macvtap: entered promiscuous mode [ 495.705296][T19462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.730811][T19462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.741817][T19316] veth1_macvtap: entered promiscuous mode [ 495.788131][T19462] team0: Port device team_slave_0 added [ 495.798212][T19462] team0: Port device team_slave_1 added [ 495.828188][T19462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.835841][T19462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.863870][T19462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.879175][T19316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.891261][T19316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.902387][T19316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.913060][T19316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.949085][T19316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.969197][T19316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.981967][T19316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.012223][T19316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.024921][T19316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.045305][T19316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.061611][T19316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.073271][T19316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.102191][T19316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.123320][T19316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.147977][T19316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.160838][T19316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.174289][T19531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5708'. [ 496.183488][T19316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.201195][T19316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.221505][T19316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.244466][T19316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.265552][ T5104] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 496.276000][T19462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.279423][ T5104] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 496.291355][T19462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.301432][ T5104] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 496.327371][ T5104] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 496.335494][ T5104] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 496.344137][ T5104] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 496.352936][T19462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.424619][T19532] lo speed is unknown, defaulting to 1000 [ 496.425563][T19316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.486373][T19316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.518510][T19316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.536247][T19316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.571609][ T5106] Bluetooth: hci1: command tx timeout [ 496.634628][ T1110] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.697088][T19542] syzkaller0: entered promiscuous mode [ 496.703087][T19542] syzkaller0: entered allmulticast mode [ 496.763413][ T1110] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.509221][T19549] Bluetooth: MGMT ver 1.22 [ 497.553489][T19549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5712'. [ 498.416940][ T5106] Bluetooth: hci2: command tx timeout [ 498.651534][ T5106] Bluetooth: hci1: command tx timeout [ 498.670104][T19462] hsr_slave_0: entered promiscuous mode [ 498.677100][T19462] hsr_slave_1: entered promiscuous mode [ 498.683872][T19462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.691958][T19462] Cannot create hsr debugfs directory [ 498.732604][ T1110] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.807798][ T1110] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.977300][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.002627][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.129202][T19563] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5718'. [ 499.184147][ T528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.208810][ T528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.234088][ T1110] bridge_slave_1: left allmulticast mode [ 499.239803][ T1110] bridge_slave_1: left promiscuous mode [ 499.246130][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.259540][ T1110] bridge_slave_0: left allmulticast mode [ 499.265502][ T1110] bridge_slave_0: left promiscuous mode [ 499.273201][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.659183][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.670729][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.685813][ T1110] bond0 (unregistering): Released all slaves [ 499.727632][T19567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5720'. [ 499.809419][T19570] bridge_slave_1: left allmulticast mode [ 499.815559][T19570] bridge_slave_1: left promiscuous mode [ 499.824812][T19570] bridge2: port 1(bridge_slave_1) entered disabled state [ 499.833844][T19570] bridge3: port 1(bridge_slave_1) entered blocking state [ 499.844065][T19570] bridge3: port 1(bridge_slave_1) entered disabled state [ 499.856925][T19570] bridge_slave_1: entered allmulticast mode [ 499.865392][T19570] bridge_slave_1: entered promiscuous mode [ 499.879883][T19570] bridge3: port 1(bridge_slave_1) entered blocking state [ 499.887152][T19570] bridge3: port 1(bridge_slave_1) entered forwarding state [ 499.897979][T19571] veth1_to_bond: left allmulticast mode [ 499.905365][T19571] veth1_to_bond: left promiscuous mode [ 499.913450][T19571] bridge2: port 2(veth1_to_bond) entered disabled state [ 499.925555][T19571] bridge3: port 2(veth1_to_bond) entered blocking state [ 499.933022][T19571] bridge3: port 2(veth1_to_bond) entered disabled state [ 499.940357][T19571] veth1_to_bond: entered allmulticast mode [ 499.948067][T19571] veth1_to_bond: entered promiscuous mode [ 499.955554][T19571] bridge3: port 2(veth1_to_bond) entered blocking state [ 499.962717][T19571] bridge3: port 2(veth1_to_bond) entered forwarding state [ 499.987709][T19574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5642'. [ 500.228784][T19578] syzkaller0: entered promiscuous mode [ 500.232911][T19585] sctp: [Deprecated]: syz.4.5724 (pid 19585) Use of int in max_burst socket option. [ 500.232911][T19585] Use struct sctp_assoc_value instead [ 500.235416][T19578] syzkaller0: entered allmulticast mode [ 500.492882][ T5106] Bluetooth: hci2: command tx timeout [ 502.238216][T19532] chnl_net:caif_netlink_parms(): no params data found [ 502.340546][T19599] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5729'. [ 502.367858][T19597] netlink: 'syz.0.5727': attribute type 29 has an invalid length. [ 502.504717][T19597] netlink: 'syz.0.5727': attribute type 29 has an invalid length. [ 502.542977][T19603] netlink: 'syz.0.5727': attribute type 29 has an invalid length. [ 502.573883][T19611] bridge_slave_1: left allmulticast mode [ 502.579650][ T5106] Bluetooth: hci2: command tx timeout [ 502.581340][T19611] bridge_slave_1: left promiscuous mode [ 502.598717][T19611] bridge3: port 1(bridge_slave_1) entered disabled state [ 502.647605][ T1110] hsr_slave_0: left promiscuous mode [ 502.654154][ T1110] hsr_slave_1: left promiscuous mode [ 502.660274][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.670545][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.681989][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.689548][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.715248][ T1110] veth1_macvtap: left promiscuous mode [ 502.720954][ T1110] veth0_macvtap: left promiscuous mode [ 502.727826][ T1110] veth1_vlan: left promiscuous mode [ 502.733891][ T1110] veth0_vlan: left promiscuous mode [ 503.269603][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 503.316819][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 503.819709][T19608] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5732'. [ 503.838396][T19606] netlink: 'syz.0.5727': attribute type 29 has an invalid length. [ 503.850496][T19611] veth1_to_bond: left allmulticast mode [ 503.876302][T19611] veth1_to_bond: left promiscuous mode [ 503.892641][T19611] bridge3: port 2(veth1_to_bond) entered disabled state [ 503.903748][T19611] bridge4: port 1(veth1_to_bond) entered blocking state [ 503.910933][T19611] bridge4: port 1(veth1_to_bond) entered disabled state [ 503.918860][T19611] veth1_to_bond: entered allmulticast mode [ 503.926722][T19611] veth1_to_bond: entered promiscuous mode [ 503.934058][T19611] bridge4: port 1(veth1_to_bond) entered blocking state [ 503.941164][T19611] bridge4: port 1(veth1_to_bond) entered forwarding state [ 504.147879][T19532] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.182399][T19532] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.190779][T19532] bridge_slave_0: entered allmulticast mode [ 504.220675][T19532] bridge_slave_0: entered promiscuous mode [ 504.322750][T19639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5741'. [ 504.367526][T19636] syzkaller0: entered promiscuous mode [ 504.378188][T19636] syzkaller0: entered allmulticast mode [ 504.661616][ T5106] Bluetooth: hci2: command tx timeout [ 506.208657][T19532] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.216876][T19532] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.224889][T19532] bridge_slave_1: entered allmulticast mode [ 506.233541][T19532] bridge_slave_1: entered promiscuous mode [ 506.325596][T19532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.365749][T19656] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5747'. [ 506.412922][T19532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.426573][T19656] bridge9: port 1(bridge_slave_1) entered blocking state [ 506.441518][T19656] bridge9: port 1(bridge_slave_1) entered disabled state [ 506.448998][T19656] bridge_slave_1: entered allmulticast mode [ 506.456715][T19656] bridge_slave_1: entered promiscuous mode [ 506.470242][T19656] bridge9: port 2(veth1_to_bond) entered blocking state [ 506.477585][T19656] bridge9: port 2(veth1_to_bond) entered disabled state [ 506.485042][T19656] veth1_to_bond: entered allmulticast mode [ 506.494023][T19656] veth1_to_bond: entered promiscuous mode [ 506.623668][T19532] team0: Port device team_slave_0 added [ 506.651609][T19462] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 506.680259][T19670] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5753'. [ 506.682609][T19462] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 506.765954][T19532] team0: Port device team_slave_1 added [ 506.811238][T19462] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 506.837217][T19462] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 506.879474][T19532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.891592][T19532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.918244][T19532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.955577][T19532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.969308][T19532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.004878][T19532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.008215][T19681] x_tables: duplicate underflow at hook 2 [ 507.092162][T19682] syzkaller0: entered promiscuous mode [ 507.097700][T19682] syzkaller0: entered allmulticast mode [ 509.327990][T19532] hsr_slave_0: entered promiscuous mode [ 509.372417][T19532] hsr_slave_1: entered promiscuous mode [ 509.381274][T19532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 509.388880][T19532] Cannot create hsr debugfs directory [ 509.637351][T19710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5769'. [ 509.650124][T19710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5769'. [ 509.795588][T19462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.805568][T19718] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5773'. [ 509.866312][T19462] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.879509][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.886859][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.903644][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.911315][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.170305][T19462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.302354][T19532] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 510.323337][T19532] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 510.372434][T19532] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 510.407340][T19532] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 510.444199][T19462] veth0_vlan: entered promiscuous mode [ 510.525198][T19462] veth1_vlan: entered promiscuous mode [ 510.627184][T19462] veth0_macvtap: entered promiscuous mode [ 510.695110][T19462] veth1_macvtap: entered promiscuous mode [ 510.769903][T19532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.796219][T19462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.808579][T19462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.820459][T19462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.831519][T19462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.842773][T19462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.853832][T19462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.869346][T19462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.890116][T19462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.916304][T19462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.980906][T19462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.005641][T19462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.021259][T19462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.041166][T19462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.061162][T19462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.079333][T19462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.090904][T19462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.102034][T19462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.111916][T19462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.122499][T19462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.135152][T19462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.149777][T19532] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.191044][T19462] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.205407][T19462] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.215094][T19462] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.224062][T19462] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.244106][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.251336][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.273992][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.281299][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.297097][T19758] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 511.545835][T19770] netlink: 'syz.1.5794': attribute type 10 has an invalid length. [ 511.565625][T19770] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5794'. [ 511.610504][T19777] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5796'. [ 511.710457][ T2828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.731222][ T2828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.816333][ T2828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.849874][ T2828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.929539][T19532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.187299][T19532] veth0_vlan: entered promiscuous mode [ 512.226973][T19532] veth1_vlan: entered promiscuous mode [ 512.296813][T19802] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 512.347335][T19532] veth0_macvtap: entered promiscuous mode [ 512.365831][T19532] veth1_macvtap: entered promiscuous mode [ 512.413208][T19532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.430083][T19532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.444757][T19532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.459447][T19532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.472177][T19532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.483645][T19532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.495421][T19532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.505989][T19532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.516580][T19532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.528335][T19532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.554096][T19532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.671266][T19532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.694264][T19532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.714742][T19532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.736026][T19532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.752982][T19532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.767084][T19532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.778812][T19532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.790064][T19532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.817484][T19532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.833638][T19532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.844081][T19532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.854680][T19532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.866480][T19532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.886164][T19532] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.897493][T19532] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.921469][T19532] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.930709][T19532] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.110377][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.137957][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.196295][ T528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.220748][ T528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.284355][T19834] netlink: 'syz.0.5820': attribute type 3 has an invalid length. [ 513.472813][T19841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5823'. [ 513.727610][T19852] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5827'. [ 514.023823][T19872] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5836'. [ 514.061572][T19872] bridge5: port 1(bridge_slave_1) entered blocking state [ 514.068763][T19872] bridge5: port 1(bridge_slave_1) entered disabled state [ 514.089703][T19872] bridge_slave_1: entered allmulticast mode [ 514.118455][T19872] bridge_slave_1: entered promiscuous mode [ 514.131980][T19872] bridge5: port 1(bridge_slave_1) entered blocking state [ 514.139218][T19872] bridge5: port 1(bridge_slave_1) entered forwarding state [ 514.250310][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.287991][T19877] veth1_to_bond: left allmulticast mode [ 514.295080][T19877] veth1_to_bond: left promiscuous mode [ 514.302390][T19877] bridge4: port 1(veth1_to_bond) entered disabled state [ 514.324020][T19877] bridge5: port 2(veth1_to_bond) entered blocking state [ 514.333563][T19877] bridge5: port 2(veth1_to_bond) entered disabled state [ 514.340740][T19877] veth1_to_bond: entered allmulticast mode [ 514.348529][T19877] veth1_to_bond: entered promiscuous mode [ 514.355202][T19877] bridge5: port 2(veth1_to_bond) entered blocking state [ 514.362318][T19877] bridge5: port 2(veth1_to_bond) entered forwarding state [ 515.081579][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.169568][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.230303][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.340210][ T51] bridge_slave_1: left allmulticast mode [ 515.346596][ T51] bridge_slave_1: left promiscuous mode [ 515.352731][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.362870][ T51] bridge_slave_0: left allmulticast mode [ 515.368581][ T51] bridge_slave_0: left promiscuous mode [ 515.375539][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.548873][T19883] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5840'. [ 515.786514][ T5104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 515.813117][ T5104] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 515.835190][ T5104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 515.855130][ T5104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 515.875155][ T5104] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 515.883095][ T5104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 515.914839][T19885] ================================================================== [ 515.922946][T19885] BUG: KASAN: slab-use-after-free in sk_skb_reason_drop+0x44/0x3d0 [ 515.930845][T19885] Read of size 4 at addr ffff88801e9a7224 by task syz-executor/19885 [ 515.939079][T19885] [ 515.941409][T19885] CPU: 0 PID: 19885 Comm: syz-executor Not tainted 6.10.0-rc5-syzkaller-01176-g19e6ad2c7578 #0 [ 515.951830][T19885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 515.962083][T19885] Call Trace: [ 515.965370][T19885] [ 515.968389][T19885] dump_stack_lvl+0x241/0x360 [ 515.973251][T19885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 515.978471][T19885] ? __pfx__printk+0x10/0x10 [ 515.983063][T19885] ? _printk+0xd5/0x120 [ 515.987230][T19885] ? __virt_addr_valid+0x183/0x520 [ 515.992338][T19885] ? __virt_addr_valid+0x183/0x520 [ 515.997543][T19885] print_report+0x169/0x550 [ 516.002042][T19885] ? __virt_addr_valid+0x183/0x520 [ 516.007176][T19885] ? __virt_addr_valid+0x183/0x520 [ 516.012563][T19885] ? __virt_addr_valid+0x44e/0x520 [ 516.017868][T19885] ? __phys_addr+0xba/0x170 [ 516.022395][T19885] ? sk_skb_reason_drop+0x44/0x3d0 [ 516.027595][T19885] kasan_report+0x143/0x180 [ 516.032330][T19885] ? sk_skb_reason_drop+0x44/0x3d0 [ 516.037489][T19885] kasan_check_range+0x282/0x290 [ 516.042451][T19885] sk_skb_reason_drop+0x44/0x3d0 [ 516.047424][T19885] __hci_req_sync+0x631/0x950 [ 516.052641][T19885] ? __pfx___hci_req_sync+0x10/0x10 [ 516.058204][T19885] ? __pfx___mutex_lock+0x10/0x10 [ 516.063247][T19885] ? __pfx_autoremove_wake_function+0x10/0x10 [ 516.069444][T19885] ? __pfx_hci_scan_req+0x10/0x10 [ 516.074552][T19885] hci_req_sync+0xa9/0xd0 [ 516.078892][T19885] hci_dev_cmd+0x4c5/0xa50 [ 516.083307][T19885] ? security_capable+0x90/0xb0 [ 516.088172][T19885] ? __pfx_hci_dev_cmd+0x10/0x10 [ 516.093111][T19885] ? hci_sock_ioctl+0x6c6/0xa40 [ 516.097977][T19885] sock_do_ioctl+0x158/0x460 [ 516.102573][T19885] ? __pfx_sock_do_ioctl+0x10/0x10 [ 516.107745][T19885] sock_ioctl+0x629/0x8e0 [ 516.112178][T19885] ? __pfx_sock_ioctl+0x10/0x10 [ 516.117058][T19885] ? __fget_files+0x29/0x470 [ 516.121707][T19885] ? __fget_files+0x3f6/0x470 [ 516.126402][T19885] ? __fget_files+0x29/0x470 [ 516.131001][T19885] ? bpf_lsm_file_ioctl+0x9/0x10 [ 516.136024][T19885] ? security_file_ioctl+0x87/0xb0 [ 516.141153][T19885] ? __pfx_sock_ioctl+0x10/0x10 [ 516.146353][T19885] __se_sys_ioctl+0xfc/0x170 [ 516.150938][T19885] do_syscall_64+0xf3/0x230 [ 516.155527][T19885] ? clear_bhb_loop+0x35/0x90 [ 516.160208][T19885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.166106][T19885] RIP: 0033:0x7ff526775b1b [ 516.170516][T19885] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 516.190290][T19885] RSP: 002b:00007fffa761dbd0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 516.198707][T19885] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff526775b1b [ 516.206760][T19885] RDX: 00007fffa761dc48 RSI: 00000000400448dd RDI: 0000000000000003 [ 516.214821][T19885] RBP: 000055557f4734a8 R08: 0000000000000000 R09: 0000000000000000 [ 516.222808][T19885] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 516.230782][T19885] R13: 0000000000000001 R14: 0000000000000009 R15: 0000000000000009 [ 516.238932][T19885] [ 516.241971][T19885] [ 516.244286][T19885] Allocated by task 5104: [ 516.248675][T19885] kasan_save_track+0x3f/0x80 [ 516.253354][T19885] __kasan_slab_alloc+0x66/0x80 [ 516.258310][T19885] kmem_cache_alloc_noprof+0x135/0x2a0 [ 516.263794][T19885] skb_clone+0x20c/0x390 [ 516.268045][T19885] hci_cmd_work+0x2a2/0x670 [ 516.272677][T19885] process_scheduled_works+0xa2c/0x1830 [ 516.278269][T19885] worker_thread+0x86d/0xd50 [ 516.282872][T19885] kthread+0x2f0/0x390 [ 516.286970][T19885] ret_from_fork+0x4b/0x80 [ 516.291475][T19885] ret_from_fork_asm+0x1a/0x30 [ 516.296429][T19885] [ 516.298747][T19885] Freed by task 5104: [ 516.302718][T19885] kasan_save_track+0x3f/0x80 [ 516.307397][T19885] kasan_save_free_info+0x40/0x50 [ 516.312422][T19885] poison_slab_object+0xe0/0x150 [ 516.317477][T19885] __kasan_slab_free+0x37/0x60 [ 516.322263][T19885] kmem_cache_free+0x145/0x350 [ 516.327029][T19885] hci_req_sync_complete+0xe8/0x290 [ 516.332401][T19885] hci_event_packet+0xc75/0x1540 [ 516.337430][T19885] hci_rx_work+0x3e8/0xca0 [ 516.341853][T19885] process_scheduled_works+0xa2c/0x1830 [ 516.347417][T19885] worker_thread+0x86d/0xd50 [ 516.352143][T19885] kthread+0x2f0/0x390 [ 516.356314][T19885] ret_from_fork+0x4b/0x80 [ 516.360732][T19885] ret_from_fork_asm+0x1a/0x30 [ 516.365790][T19885] [ 516.368301][T19885] The buggy address belongs to the object at ffff88801e9a7140 [ 516.368301][T19885] which belongs to the cache skbuff_head_cache of size 240 [ 516.383161][T19885] The buggy address is located 228 bytes inside of [ 516.383161][T19885] freed 240-byte region [ffff88801e9a7140, ffff88801e9a7230) [ 516.397068][T19885] [ 516.399385][T19885] The buggy address belongs to the physical page: [ 516.405796][T19885] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1e9a7 [ 516.414564][T19885] memcg:ffff88802a4c2101 [ 516.418815][T19885] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 516.426560][T19885] page_type: 0xffffefff(slab) [ 516.431413][T19885] raw: 00fff00000000000 ffff888018ed2780 0000000000000000 0000000000000001 [ 516.440008][T19885] raw: 0000000000000000 00000000000c000c 00000001ffffefff ffff88802a4c2101 [ 516.448586][T19885] page dumped because: kasan: bad access detected [ 516.455185][T19885] page_owner tracks the page as allocated [ 516.460914][T19885] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5139, tgid 5139 (kworker/0:4), ts 472496564678, free_ts 471618791731 [ 516.481775][T19885] post_alloc_hook+0x1f3/0x230 [ 516.486914][T19885] get_page_from_freelist+0x2e4c/0x2f10 [ 516.492550][T19885] __alloc_pages_noprof+0x256/0x6c0 [ 516.497978][T19885] alloc_slab_page+0x5f/0x120 [ 516.502730][T19885] allocate_slab+0x5a/0x2f0 [ 516.507351][T19885] ___slab_alloc+0xcd1/0x14b0 [ 516.512104][T19885] __slab_alloc+0x58/0xa0 [ 516.516596][T19885] kmem_cache_alloc_node_noprof+0x1fe/0x320 [ 516.522619][T19885] __alloc_skb+0x1c3/0x440 [ 516.527062][T19885] nsim_dev_trap_report_work+0x254/0xaa0 [ 516.532686][T19885] process_scheduled_works+0xa2c/0x1830 [ 516.538324][T19885] worker_thread+0x86d/0xd50 [ 516.542940][T19885] kthread+0x2f0/0x390 [ 516.547105][T19885] ret_from_fork+0x4b/0x80 [ 516.551518][T19885] ret_from_fork_asm+0x1a/0x30 [ 516.556306][T19885] page last free pid 4537 tgid 4537 stack trace: [ 516.562655][T19885] free_unref_page+0xd22/0xea0 [ 516.567508][T19885] __put_partials+0xeb/0x130 [ 516.572114][T19885] put_cpu_partial+0x17c/0x250 [ 516.576902][T19885] __slab_free+0x2ea/0x3d0 [ 516.581421][T19885] qlist_free_all+0x9e/0x140 [ 516.586009][T19885] kasan_quarantine_reduce+0x14f/0x170 [ 516.591455][T19885] __kasan_slab_alloc+0x23/0x80 [ 516.596307][T19885] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 516.602209][T19885] __alloc_skb+0x1c3/0x440 [ 516.606664][T19885] alloc_skb_with_frags+0xc3/0x770 [ 516.612033][T19885] sock_alloc_send_pskb+0x91a/0xa60 [ 516.617261][T19885] unix_dgram_sendmsg+0x6d3/0x1f80 [ 516.622358][T19885] __sock_sendmsg+0x221/0x270 [ 516.627116][T19885] __sys_sendto+0x3a4/0x4f0 [ 516.631602][T19885] __x64_sys_sendto+0xde/0x100 [ 516.636369][T19885] do_syscall_64+0xf3/0x230 [ 516.640864][T19885] [ 516.643178][T19885] Memory state around the buggy address: [ 516.648813][T19885] ffff88801e9a7100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 516.656869][T19885] ffff88801e9a7180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 516.664954][T19885] >ffff88801e9a7200: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 516.673029][T19885] ^ [ 516.678251][T19885] ffff88801e9a7280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.686321][T19885] ffff88801e9a7300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 516.694373][T19885] ================================================================== [ 516.708811][T19885] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 516.716051][T19885] CPU: 0 PID: 19885 Comm: syz-executor Not tainted 6.10.0-rc5-syzkaller-01176-g19e6ad2c7578 #0 [ 516.726500][T19885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 516.736652][T19885] Call Trace: [ 516.740033][T19885] [ 516.742971][T19885] dump_stack_lvl+0x241/0x360 [ 516.747774][T19885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.752989][T19885] ? __pfx__printk+0x10/0x10 [ 516.757628][T19885] ? preempt_schedule+0xe1/0xf0 [ 516.762804][T19885] ? vscnprintf+0x5d/0x90 [ 516.767217][T19885] panic+0x349/0x860 [ 516.771146][T19885] ? check_panic_on_warn+0x21/0xb0 [ 516.776259][T19885] ? __pfx_panic+0x10/0x10 [ 516.780674][T19885] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 516.786659][T19885] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 516.792989][T19885] ? print_report+0x502/0x550 [ 516.797668][T19885] check_panic_on_warn+0x86/0xb0 [ 516.802614][T19885] ? sk_skb_reason_drop+0x44/0x3d0 [ 516.807741][T19885] end_report+0x77/0x160 [ 516.812072][T19885] kasan_report+0x154/0x180 [ 516.816577][T19885] ? sk_skb_reason_drop+0x44/0x3d0 [ 516.821695][T19885] kasan_check_range+0x282/0x290 [ 516.826633][T19885] sk_skb_reason_drop+0x44/0x3d0 [ 516.831576][T19885] __hci_req_sync+0x631/0x950 [ 516.836255][T19885] ? __pfx___hci_req_sync+0x10/0x10 [ 516.841454][T19885] ? __pfx___mutex_lock+0x10/0x10 [ 516.846610][T19885] ? __pfx_autoremove_wake_function+0x10/0x10 [ 516.852686][T19885] ? __pfx_hci_scan_req+0x10/0x10 [ 516.857795][T19885] hci_req_sync+0xa9/0xd0 [ 516.862160][T19885] hci_dev_cmd+0x4c5/0xa50 [ 516.866589][T19885] ? security_capable+0x90/0xb0 [ 516.871438][T19885] ? __pfx_hci_dev_cmd+0x10/0x10 [ 516.876385][T19885] ? hci_sock_ioctl+0x6c6/0xa40 [ 516.881275][T19885] sock_do_ioctl+0x158/0x460 [ 516.885973][T19885] ? __pfx_sock_do_ioctl+0x10/0x10 [ 516.891098][T19885] sock_ioctl+0x629/0x8e0 [ 516.895437][T19885] ? __pfx_sock_ioctl+0x10/0x10 [ 516.900283][T19885] ? __fget_files+0x29/0x470 [ 516.904875][T19885] ? __fget_files+0x3f6/0x470 [ 516.909544][T19885] ? __fget_files+0x29/0x470 [ 516.914130][T19885] ? bpf_lsm_file_ioctl+0x9/0x10 [ 516.919059][T19885] ? security_file_ioctl+0x87/0xb0 [ 516.924161][T19885] ? __pfx_sock_ioctl+0x10/0x10 [ 516.929044][T19885] __se_sys_ioctl+0xfc/0x170 [ 516.933653][T19885] do_syscall_64+0xf3/0x230 [ 516.938170][T19885] ? clear_bhb_loop+0x35/0x90 [ 516.942849][T19885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.948757][T19885] RIP: 0033:0x7ff526775b1b [ 516.953176][T19885] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 516.972882][T19885] RSP: 002b:00007fffa761dbd0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 516.981327][T19885] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff526775b1b [ 516.989487][T19885] RDX: 00007fffa761dc48 RSI: 00000000400448dd RDI: 0000000000000003 [ 516.997472][T19885] RBP: 000055557f4734a8 R08: 0000000000000000 R09: 0000000000000000 [ 517.005440][T19885] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 517.014203][T19885] R13: 0000000000000001 R14: 0000000000000009 R15: 0000000000000009 [ 517.022181][T19885] [ 517.025463][T19885] Kernel Offset: disabled [ 517.029776][T19885] Rebooting in 86400 seconds..